Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/3137392e34332e31362e302f32342d3234203d3e20323730393736.roa
File:                     3137392e34332e31362e302f32342d3234203d3e20323730393736.roa (raw, json)
Hash identifier:          2pYcAhmjQLZLcK44lUMtd6uPvA1JXGN10ANbjJLq5+s=
Subject key identifier:   39:BA:3A:BB:34:5F:31:F6:C1:45:00:7A:FA:EA:0E:7A:04:58:7A:88
Certificate issuer:       /CN=D0FDDFD00693149E10422185188F22AE97C6A48A
Certificate serial:       34BA681414BA8EF4956E56BC3EE8C59C0E4F3908
Authority key identifier: D0:FD:DF:D0:06:93:14:9E:10:42:21:85:18:8F:22:AE:97:C6:A4:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0FDDFD00693149E10422185188F22AE97C6A48A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/3137392e34332e31362e302f32342d3234203d3e20323730393736.roa
Signing time:             Sat 15 Jul 2023 22:00:00 +0000
ROA not before:           Sat 15 Jul 2023 21:55:00 +0000
ROA not after:            Sat 13 Jul 2024 22:00:00 +0000
asID:                     270976
IP address blocks:        179.43.16.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ba:68:14:14:ba:8e:f4:95:6e:56:bc:3e:e8:c5:9c:0e:4f:39:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0FDDFD00693149E10422185188F22AE97C6A48A
        Validity
            Not Before: Jul 15 21:55:00 2023 GMT
            Not After : Jul 13 22:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e1:f6:d1:26:75:6e:f0:b8:4b:7d:8a:64:29:
                    35:c2:80:ca:80:7e:59:ca:3f:ca:44:ad:94:d2:56:
                    61:05:ad:cf:34:7d:10:b2:4b:8a:f7:19:b3:0e:d2:
                    8d:b6:fe:b2:c3:f6:da:2c:9d:24:5e:36:c1:20:da:
                    2f:75:bb:d5:04:b7:aa:66:70:0e:b4:f9:67:59:8e:
                    d2:12:06:1a:2b:d6:c3:0b:cd:65:1e:f1:7d:c5:b4:
                    3e:69:7d:75:6f:2b:2b:c0:ec:db:12:73:4e:ff:23:
                    38:02:40:89:da:bd:35:b0:b4:9e:33:8c:b3:38:e9:
                    b7:3e:09:8c:99:a8:d2:c6:ce:41:89:49:9b:c1:6a:
                    8c:59:45:bc:64:33:9a:f0:5a:45:bf:e2:27:29:3d:
                    c5:86:65:06:ed:66:bf:cb:da:36:cc:f6:fd:5c:a2:
                    3e:d7:44:8d:26:e6:ac:5d:a7:ec:5e:73:b8:79:ed:
                    c6:87:fd:dc:63:bc:16:4a:ee:1d:46:10:2b:fb:c8:
                    df:af:85:f5:72:70:76:c6:77:8d:ab:29:71:bd:26:
                    c7:ec:f7:8d:30:8b:69:60:6a:0f:df:36:0f:d0:4c:
                    47:58:31:c6:74:52:12:09:b7:30:98:01:6a:97:53:
                    8f:71:47:72:06:88:62:93:82:7f:3f:3a:45:71:3c:
                    c0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:BA:3A:BB:34:5F:31:F6:C1:45:00:7A:FA:EA:0E:7A:04:58:7A:88
            X509v3 Authority Key Identifier:
                keyid:D0:FD:DF:D0:06:93:14:9E:10:42:21:85:18:8F:22:AE:97:C6:A4:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/D0FDDFD00693149E10422185188F22AE97C6A48A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0FDDFD00693149E10422185188F22AE97C6A48A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/3137392e34332e31362e302f32342d3234203d3e20323730393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:e4:f5:e2:b5:d4:71:11:23:6f:a5:d7:f4:5a:ce:bf:33:08:
         68:5b:d6:87:ec:a0:2c:3b:c3:9c:60:26:33:66:6d:5f:6a:88:
         78:7a:ca:fd:08:b5:c4:a5:ee:fe:61:7b:8b:ce:9d:34:e9:22:
         7b:9f:bd:af:98:5a:46:4f:6f:da:d8:d3:fe:c9:2e:cd:7b:5b:
         6b:62:e8:81:97:5f:33:79:35:3b:d6:95:78:c6:4e:6e:35:27:
         e8:ab:52:0c:e4:97:8c:0c:ea:35:b6:08:ea:b4:7d:2b:8e:20:
         7e:4c:4e:af:d6:f9:a5:09:04:1e:af:4c:f1:c1:7a:5a:d9:96:
         11:c2:01:88:59:0b:12:14:29:20:72:c6:3f:96:64:af:45:ca:
         e0:e5:44:ae:97:ae:da:69:c4:12:ed:97:47:bc:94:6a:49:dc:
         51:3b:c1:7e:c2:8b:01:c7:5f:43:0d:05:73:4d:6e:b0:15:da:
         be:6c:fe:52:41:38:bd:e0:20:4e:73:3a:50:4e:17:ab:2a:88:
         33:a2:1b:16:be:f1:ef:a6:97:b4:fc:e2:6b:4f:76:5e:00:93:
         36:c2:0d:92:2d:75:ad:3f:7b:49:95:6c:9e:fa:81:ab:b1:df:
         96:6e:50:ea:b4:06:85:d1:d0:cf:94:2a:04:27:06:bf:1d:18:
         55:8e:92:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:17 2024 by rpki-client on console-ams.rpki-client.org