Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/3137392e34332e31382e302f32342d3234203d3e20323730393736.roa
File:                     3137392e34332e31382e302f32342d3234203d3e20323730393736.roa (raw, json)
Hash identifier:          UxIuUafzCN0VxVw1Ue6sxITPSbFssSo/CAirRDYv2YA=
Subject key identifier:   40:7D:A2:D4:E5:84:21:E7:85:69:BF:11:E9:AE:54:79:6E:0A:7B:68
Certificate issuer:       /CN=D0FDDFD00693149E10422185188F22AE97C6A48A
Certificate serial:       47FA1288F9F19C867C8DEF777CDEB3E7868582A6
Authority key identifier: D0:FD:DF:D0:06:93:14:9E:10:42:21:85:18:8F:22:AE:97:C6:A4:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0FDDFD00693149E10422185188F22AE97C6A48A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/3137392e34332e31382e302f32342d3234203d3e20323730393736.roa
Signing time:             Sat 15 Jul 2023 22:00:00 +0000
ROA not before:           Sat 15 Jul 2023 21:55:00 +0000
ROA not after:            Sat 13 Jul 2024 22:00:00 +0000
asID:                     270976
IP address blocks:        179.43.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:fa:12:88:f9:f1:9c:86:7c:8d:ef:77:7c:de:b3:e7:86:85:82:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0FDDFD00693149E10422185188F22AE97C6A48A
        Validity
            Not Before: Jul 15 21:55:00 2023 GMT
            Not After : Jul 13 22:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8f:0b:72:69:29:08:ca:04:bd:40:c8:3b:e1:
                    32:33:a6:ec:19:39:20:ae:ef:ba:6b:3d:28:ce:ed:
                    b2:38:f9:b6:0f:2a:cd:7a:f5:d1:75:17:dd:5a:db:
                    2b:13:a6:06:29:ef:89:25:e8:c7:0c:8e:24:6e:27:
                    3c:83:ef:65:96:d8:b1:7d:47:2c:34:a4:2d:77:6d:
                    2d:1d:3c:6d:55:69:d0:6e:b8:eb:8a:14:e6:2b:36:
                    4f:28:13:d0:34:6c:29:2c:10:13:1f:c3:d3:49:f2:
                    da:40:dc:e7:c3:4f:5e:2c:3f:e9:5b:5d:ce:79:fa:
                    e7:df:af:e6:24:4e:06:c4:19:c1:82:be:77:5c:b5:
                    42:a1:3d:7d:16:8c:c5:0b:ab:88:c5:8e:44:d1:f1:
                    ea:3e:93:09:1e:cf:f8:0b:80:d9:d1:b9:b6:6d:d5:
                    28:c3:3d:cd:1b:46:96:b2:3e:aa:3d:ed:68:c4:cd:
                    46:1c:7f:e9:71:fc:2c:f4:f1:9c:f5:84:ce:f3:e0:
                    2d:0f:d9:88:4c:2f:44:1d:94:b3:a3:00:67:9b:46:
                    25:e7:2a:4f:99:14:44:36:98:49:4d:53:c8:d3:d3:
                    ae:a1:3b:16:97:0d:51:1f:cb:27:8e:da:fa:19:bb:
                    c3:cd:98:2a:26:39:78:6d:e4:37:03:8a:19:d0:7d:
                    1f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:7D:A2:D4:E5:84:21:E7:85:69:BF:11:E9:AE:54:79:6E:0A:7B:68
            X509v3 Authority Key Identifier:
                keyid:D0:FD:DF:D0:06:93:14:9E:10:42:21:85:18:8F:22:AE:97:C6:A4:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/D0FDDFD00693149E10422185188F22AE97C6A48A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0FDDFD00693149E10422185188F22AE97C6A48A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/3137392e34332e31382e302f32342d3234203d3e20323730393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:a2:24:2b:0c:91:1d:8e:aa:1e:97:80:d6:66:14:5b:ad:ca:
         b7:aa:05:e9:3d:38:f5:b3:8a:3a:9b:23:f4:48:7a:12:10:ca:
         0f:73:40:fb:e4:cc:66:80:b0:1b:a4:28:5f:ca:f5:88:6c:87:
         d9:44:57:07:b4:f1:16:35:50:ca:7d:e4:4b:0d:37:43:78:f7:
         3f:bb:08:0b:c4:ea:e1:41:a6:48:c7:42:67:9e:e5:c6:f5:a9:
         09:94:62:4d:cd:84:2e:df:89:14:47:5a:df:1a:42:df:63:5e:
         c5:62:79:ab:3f:d7:10:3f:a1:e7:6e:0c:eb:a0:2f:16:2e:03:
         a8:e3:7e:69:39:0e:a1:93:ee:04:67:14:f0:9b:73:de:00:f4:
         64:58:48:ad:c1:49:bc:25:bd:7d:d3:42:a2:e6:fa:11:c5:29:
         6e:9c:d8:35:14:b1:d6:61:20:b2:e9:4a:23:db:80:a1:6f:de:
         df:22:bd:cc:31:71:f0:9d:12:74:0b:01:51:26:0e:23:8a:54:
         a0:c9:d3:97:17:21:23:3f:4e:01:7b:fc:4f:98:72:4d:94:f8:
         bf:32:79:8e:98:6e:62:bf:19:57:71:29:80:2c:db:ea:bb:95:
         45:c6:d4:3e:d3:55:b4:c1:7f:be:4f:2f:1d:e2:c1:bd:1c:91:
         3a:32:0b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org