Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/3137392e34332e31372e302f32342d3234203d3e20323730393736.roa
File:                     3137392e34332e31372e302f32342d3234203d3e20323730393736.roa (raw, json)
Hash identifier:          i0M/4gCZnL1ATkJFx/0wc+/j/bxRJoTwCefP1jVzOb8=
Subject key identifier:   B9:F1:1E:90:15:73:BF:E8:A0:06:97:13:B5:BB:9A:82:C1:5A:23:3D
Certificate issuer:       /CN=D0FDDFD00693149E10422185188F22AE97C6A48A
Certificate serial:       34FCDBEAE33EADBA6FBBC63DAD98CDE49EDD8AD0
Authority key identifier: D0:FD:DF:D0:06:93:14:9E:10:42:21:85:18:8F:22:AE:97:C6:A4:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0FDDFD00693149E10422185188F22AE97C6A48A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/3137392e34332e31372e302f32342d3234203d3e20323730393736.roa
Signing time:             Sat 15 Jul 2023 22:00:00 +0000
ROA not before:           Sat 15 Jul 2023 21:55:00 +0000
ROA not after:            Sat 13 Jul 2024 22:00:00 +0000
asID:                     270976
IP address blocks:        179.43.17.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:fc:db:ea:e3:3e:ad:ba:6f:bb:c6:3d:ad:98:cd:e4:9e:dd:8a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0FDDFD00693149E10422185188F22AE97C6A48A
        Validity
            Not Before: Jul 15 21:55:00 2023 GMT
            Not After : Jul 13 22:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3c:8e:c2:0f:c7:b3:45:b4:a0:27:3a:45:58:
                    3a:68:c9:c8:35:55:66:ca:75:11:76:59:56:98:89:
                    14:de:8a:1a:22:ff:84:c2:0b:50:64:46:f3:6a:2d:
                    81:6c:d1:db:5e:0f:2d:d1:9f:e0:04:8a:a4:f7:79:
                    f0:89:3b:8f:9c:8f:e5:15:53:c4:ca:3b:35:70:1e:
                    22:2f:a7:54:b9:e7:4e:73:70:1f:39:7e:7e:0c:01:
                    4f:7c:e6:24:6d:19:0c:89:f5:2c:7a:42:c5:aa:d8:
                    4b:dc:bc:69:6d:cf:b9:d4:21:ef:b2:fb:89:b9:42:
                    ef:71:f0:f2:a5:54:41:a3:35:43:d1:11:aa:b0:c3:
                    6e:9d:04:b3:d1:c6:b8:7c:c1:28:20:98:16:58:9f:
                    53:2d:da:3e:a8:0e:54:1a:24:9f:ef:4b:1b:79:b1:
                    e5:fb:fb:07:3f:a1:13:f9:3c:8d:0d:2b:17:62:90:
                    ef:1f:02:d8:fb:20:21:7b:72:87:28:1b:e6:4b:26:
                    f3:22:92:43:87:a3:96:dd:56:57:32:ce:5f:bb:a1:
                    30:1a:95:d0:39:94:eb:c1:ac:8e:4c:07:9f:4e:99:
                    e8:7a:8c:fb:52:7b:80:74:d5:31:a6:b0:e0:15:ce:
                    54:ef:9e:6d:a0:36:25:a9:70:b6:bf:dc:67:08:fc:
                    5f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F1:1E:90:15:73:BF:E8:A0:06:97:13:B5:BB:9A:82:C1:5A:23:3D
            X509v3 Authority Key Identifier:
                keyid:D0:FD:DF:D0:06:93:14:9E:10:42:21:85:18:8F:22:AE:97:C6:A4:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/D0FDDFD00693149E10422185188F22AE97C6A48A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0FDDFD00693149E10422185188F22AE97C6A48A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/3137392e34332e31372e302f32342d3234203d3e20323730393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:91:9e:1c:e2:33:6c:c2:61:07:5a:f1:16:04:03:65:52:f5:
         1d:9b:04:df:e1:89:fd:e2:5f:aa:cf:4b:d4:db:c0:66:4b:d5:
         87:58:76:56:ae:17:a1:85:3f:69:ca:67:73:15:b7:e6:25:05:
         5e:03:45:bf:53:de:43:1f:bf:b3:bc:92:75:9e:98:7d:a0:aa:
         7e:30:4c:eb:bc:a5:2b:35:16:f3:48:2f:55:25:a6:67:d5:b4:
         be:e3:39:8f:a7:ae:cc:c0:93:ba:57:6f:b8:6a:08:50:cc:c6:
         16:e2:96:82:24:4f:24:9b:18:9a:ae:7a:97:e8:67:76:21:27:
         7d:e8:5f:7c:51:9b:f2:92:74:6f:b5:9d:b3:88:91:0f:89:4f:
         95:9c:8e:24:83:ef:08:95:8a:fd:4e:27:a4:cc:db:04:df:7f:
         0e:86:22:67:04:0a:f0:74:dc:12:55:e9:5b:87:93:44:90:bd:
         ad:84:61:3d:52:8f:04:dc:46:05:a1:62:26:a9:5c:34:bc:5d:
         c2:af:52:89:33:91:c8:93:10:27:75:1f:5a:18:5d:a7:3b:11:
         31:8d:8a:00:25:31:38:4d:ac:a2:4d:76:25:3f:0b:6b:4a:d8:
         06:68:23:83:bd:1f:9c:54:13:d2:12:79:65:a4:fd:41:b0:6f:
         05:77:49:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org