Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/3137392e34332e31382e302f32332d3233203d3e20323730393736.roa
File:                     3137392e34332e31382e302f32332d3233203d3e20323730393736.roa (raw, json)
Hash identifier:          Rp+NG9ft8O/eN98QdJDyXF0Qqgvmp9AuYDO44KKxulU=
Subject key identifier:   BB:3E:E7:A6:8D:0D:15:B4:21:B5:1A:8B:6B:97:AB:8C:F1:03:58:D9
Certificate issuer:       /CN=D0FDDFD00693149E10422185188F22AE97C6A48A
Certificate serial:       64E5ECE541205CDC42694659895CF5BDC6C06ACA
Authority key identifier: D0:FD:DF:D0:06:93:14:9E:10:42:21:85:18:8F:22:AE:97:C6:A4:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0FDDFD00693149E10422185188F22AE97C6A48A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/3137392e34332e31382e302f32332d3233203d3e20323730393736.roa
Signing time:             Sat 15 Jul 2023 22:00:00 +0000
ROA not before:           Sat 15 Jul 2023 21:55:00 +0000
ROA not after:            Sat 13 Jul 2024 22:00:00 +0000
asID:                     270976
IP address blocks:        179.43.18.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:e5:ec:e5:41:20:5c:dc:42:69:46:59:89:5c:f5:bd:c6:c0:6a:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0FDDFD00693149E10422185188F22AE97C6A48A
        Validity
            Not Before: Jul 15 21:55:00 2023 GMT
            Not After : Jul 13 22:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d9:17:75:8a:42:77:17:89:68:74:7a:35:21:
                    39:f2:23:4d:0f:28:0f:d7:36:1f:10:a5:6b:3f:e6:
                    5e:f5:a2:8e:66:f2:89:dd:08:29:3b:05:35:f4:72:
                    28:b3:39:d1:f5:43:03:77:da:5c:11:45:55:74:8d:
                    dc:a8:47:f1:31:fa:19:37:a3:21:db:bc:c1:6f:56:
                    97:2a:d6:f0:34:20:f4:db:c8:f5:b4:69:55:85:a6:
                    4c:1f:56:d6:eb:cf:49:ae:e5:93:38:27:20:f0:52:
                    f8:7e:f9:a2:a6:8b:49:a4:75:ee:1f:fa:92:ff:b6:
                    27:1b:76:c8:a8:ce:77:84:6f:4c:bf:93:2c:ae:9b:
                    0c:86:3a:89:f6:ae:ff:e8:47:cf:5a:8e:25:d8:bf:
                    01:08:b5:e2:67:3c:0e:5b:6e:54:d1:bc:6c:12:a9:
                    f7:40:79:95:24:23:06:43:63:7f:1d:ab:c2:22:ef:
                    7f:b4:27:d6:86:6c:c1:f3:39:64:c1:d6:b3:af:0a:
                    7c:b1:e0:b9:8f:27:02:24:4b:6b:03:39:6e:68:48:
                    ec:91:5e:41:52:98:5f:1f:a3:d0:49:be:43:be:f6:
                    eb:36:fe:ad:1b:c2:35:3b:75:98:04:23:84:ed:5a:
                    ed:49:b0:8d:75:70:16:24:b7:83:a9:93:a8:13:5e:
                    f1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:3E:E7:A6:8D:0D:15:B4:21:B5:1A:8B:6B:97:AB:8C:F1:03:58:D9
            X509v3 Authority Key Identifier:
                keyid:D0:FD:DF:D0:06:93:14:9E:10:42:21:85:18:8F:22:AE:97:C6:A4:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/D0FDDFD00693149E10422185188F22AE97C6A48A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0FDDFD00693149E10422185188F22AE97C6A48A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/3137392e34332e31382e302f32332d3233203d3e20323730393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:75:af:2f:e7:6e:14:9e:cf:da:16:12:be:70:a2:a3:75:51:
         f1:b0:68:62:e5:9d:a2:b1:5f:f0:70:f5:98:98:e9:29:3e:53:
         47:48:0f:af:d1:ef:66:5d:51:fd:73:09:9b:17:7e:e8:b1:b5:
         07:89:dc:1a:73:34:79:6b:c4:8f:0d:76:3b:e6:68:2f:57:d4:
         ef:ed:5b:7f:b8:c5:d1:57:b7:b7:ae:20:59:0f:dc:c8:4a:19:
         b9:9a:5a:c6:d7:36:b3:6f:81:2b:02:e9:7a:d4:e4:cb:2b:ee:
         3d:cf:44:cd:45:28:17:fa:d8:70:73:d2:26:35:8d:bb:d2:11:
         7a:39:f1:b9:7e:1f:19:4a:cc:a7:04:cc:49:86:8e:cd:10:ca:
         54:2f:48:6c:e3:c7:79:56:79:c1:3a:c7:58:26:ba:b4:b4:ec:
         6d:f7:ec:46:07:51:ff:89:8b:8d:bd:7f:f6:d2:24:ba:55:2a:
         1f:a4:77:27:a0:c8:6d:47:61:a2:99:f0:50:a9:dd:aa:de:68:
         32:3a:c5:f4:3d:75:5e:87:b0:c4:8f:89:cc:15:2a:1a:c7:95:
         b3:ba:f1:07:77:c1:77:3a:a8:bf:9e:13:c4:0a:be:1b:ee:58:
         42:d5:2e:05:52:b1:87:e9:bd:51:1f:d4:d7:1e:7f:3a:16:c8:
         05:c4:f5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:17 2024 by rpki-client on console-ams.rpki-client.org