Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/3137392e34332e31362e302f32332d3233203d3e20323730393736.roa
File:                     3137392e34332e31362e302f32332d3233203d3e20323730393736.roa (raw, json)
Hash identifier:          J+FlgVoa8GXPovt3i3WybBC6flzpBKTM0jZdvYmkSEg=
Subject key identifier:   20:F8:83:5A:7E:DF:70:1E:4E:DA:8F:5F:05:95:70:49:5B:36:FF:DF
Certificate issuer:       /CN=D0FDDFD00693149E10422185188F22AE97C6A48A
Certificate serial:       76FC74F5A2F88453C58C33467126104801C3EA29
Authority key identifier: D0:FD:DF:D0:06:93:14:9E:10:42:21:85:18:8F:22:AE:97:C6:A4:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0FDDFD00693149E10422185188F22AE97C6A48A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/3137392e34332e31362e302f32332d3233203d3e20323730393736.roa
Signing time:             Sat 15 Jul 2023 22:00:00 +0000
ROA not before:           Sat 15 Jul 2023 21:55:00 +0000
ROA not after:            Sat 13 Jul 2024 22:00:00 +0000
asID:                     270976
IP address blocks:        179.43.16.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:fc:74:f5:a2:f8:84:53:c5:8c:33:46:71:26:10:48:01:c3:ea:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0FDDFD00693149E10422185188F22AE97C6A48A
        Validity
            Not Before: Jul 15 21:55:00 2023 GMT
            Not After : Jul 13 22:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:a8:1b:bb:c4:63:5f:10:67:4d:4c:67:f0:c0:
                    b8:20:86:a8:ed:cb:ad:54:58:a1:46:68:67:d3:b5:
                    d9:e6:8b:0d:f4:d2:99:7c:b9:8f:98:c3:48:e9:23:
                    a0:0e:94:6f:68:e7:a9:a1:0d:63:0c:ed:d7:f1:e0:
                    16:45:1d:f5:e4:8d:31:5a:02:19:fa:2b:c0:f8:fa:
                    b3:9c:96:7f:c4:20:c8:b1:f3:51:d6:fa:cd:6d:47:
                    c6:6c:ca:dd:65:fb:dc:f1:db:c1:2d:69:83:da:18:
                    88:68:32:2c:6a:a4:5d:aa:07:dc:73:fc:16:18:cf:
                    60:3a:77:9c:5a:b7:e1:b0:c9:02:fe:71:38:39:97:
                    14:f4:57:0b:1d:94:93:98:6b:a1:5b:47:71:dd:86:
                    1f:c5:a4:50:0a:6a:0a:6c:a4:e0:c3:de:24:ee:7c:
                    ce:34:44:a8:ba:18:4a:00:3e:a0:ac:8c:2c:cd:41:
                    67:af:7f:79:9e:dc:36:62:75:09:f1:aa:c9:3d:f1:
                    b5:44:6f:ef:3b:d5:d4:4a:a1:19:b2:ab:88:2b:12:
                    3a:c3:91:2f:9e:05:c7:3c:cd:57:ba:e5:3b:e2:89:
                    08:fb:65:30:c2:98:36:c6:91:2d:42:5b:ee:e6:d6:
                    d8:35:f3:82:6d:5e:f2:9f:8f:f1:2a:96:29:da:36:
                    12:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F8:83:5A:7E:DF:70:1E:4E:DA:8F:5F:05:95:70:49:5B:36:FF:DF
            X509v3 Authority Key Identifier:
                keyid:D0:FD:DF:D0:06:93:14:9E:10:42:21:85:18:8F:22:AE:97:C6:A4:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/D0FDDFD00693149E10422185188F22AE97C6A48A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0FDDFD00693149E10422185188F22AE97C6A48A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/3137392e34332e31362e302f32332d3233203d3e20323730393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:74:ce:66:62:f8:63:d2:1c:e8:f8:f9:da:2b:92:66:ca:ae:
         3e:f2:e2:2e:98:2a:80:5a:97:2a:6c:32:8f:61:06:26:39:36:
         61:df:ae:b4:6e:f0:8e:48:76:b3:5d:0b:4d:c5:58:33:b1:2a:
         4e:42:0c:b0:ea:9f:54:8f:1d:d5:f3:d3:e7:07:a3:bb:c1:37:
         8b:4d:5b:8e:2c:c8:c3:b6:2a:d2:cf:dc:5a:df:4f:ed:6a:5d:
         9d:ce:a5:0f:8f:c5:41:24:9f:75:31:4f:f3:d1:3d:ec:e7:d8:
         15:4d:f7:09:b3:fb:21:17:bd:a4:f1:cf:a4:40:ab:8a:df:c3:
         05:00:02:95:e2:ec:a8:02:c9:85:61:ae:5c:bc:6e:96:ab:08:
         27:a4:fa:76:c5:62:6b:e7:e5:69:e7:b8:a5:78:79:dc:0a:00:
         61:8d:fd:d2:da:8d:14:87:a8:ff:9f:1d:8b:1d:79:ef:ce:77:
         19:22:00:4e:88:36:a9:2f:4f:75:e4:91:f1:14:fa:bc:7c:f2:
         53:cb:1a:59:f8:6f:43:ba:f6:73:f5:1d:f6:4e:ba:b6:28:e3:
         cb:c3:bd:8d:3d:e2:fa:4d:40:bc:91:45:28:d4:78:06:4d:97:
         ce:07:e2:a9:66:28:7d:e1:00:ca:b4:9b:06:54:55:c5:a3:29:
         86:42:43:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:17 2024 by rpki-client on console-ams.rpki-client.org