Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/3137392e34332e31392e302f32342d3234203d3e20323730393736.roa
File:                     3137392e34332e31392e302f32342d3234203d3e20323730393736.roa (raw, json)
Hash identifier:          oq3oHFaVHmZUl36rA9oSFIY6OSvf9wBCorilVcPmOyY=
Subject key identifier:   2C:4E:BC:7F:98:3F:6F:A8:92:E4:B4:D5:2D:0A:6F:7D:E9:19:C1:0E
Certificate issuer:       /CN=D0FDDFD00693149E10422185188F22AE97C6A48A
Certificate serial:       11D229D65BF10BA51B0EBA00B4FC7FBDE86EE829
Authority key identifier: D0:FD:DF:D0:06:93:14:9E:10:42:21:85:18:8F:22:AE:97:C6:A4:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0FDDFD00693149E10422185188F22AE97C6A48A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/3137392e34332e31392e302f32342d3234203d3e20323730393736.roa
Signing time:             Sat 15 Jul 2023 22:00:00 +0000
ROA not before:           Sat 15 Jul 2023 21:55:00 +0000
ROA not after:            Sat 13 Jul 2024 22:00:00 +0000
asID:                     270976
IP address blocks:        179.43.19.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:d2:29:d6:5b:f1:0b:a5:1b:0e:ba:00:b4:fc:7f:bd:e8:6e:e8:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0FDDFD00693149E10422185188F22AE97C6A48A
        Validity
            Not Before: Jul 15 21:55:00 2023 GMT
            Not After : Jul 13 22:00:00 2024 GMT
        Subject: CN=3082010A02820101009D705AB1E96ED93D50D7CD0A08DD98201959004A99F57CE36C3B7648E3ACF92BF3B340E02BA7307549802DAFDC3DA4A144FFB2A10C5532FAE8EB7B367F6DC68216F45E8BFB01A4606E33E8B699208C8E3A8534ED64157BE74B8BE2FFE360C70E30614C39F557B4BA32A4CFFC7EE7816DE879AF681D8B47ABE9B226334D30625AA585CDC7E192E376F301C7041CC88DDAF86D5D69D6D671B260E8C9F56C8F7E0ECB8C33EFAB13DB185BEE6432AA6051C5F45DAF0011861CCDF056658FD39E72E1B2C3FBCB81F66EAA14B72D2772EDDE23279DD4AACAD071555637595870F15CC538B82B7F636A397F56BC29DEE20A411B171243A86F228A9A82D30182D6F3A8D30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:70:5a:b1:e9:6e:d9:3d:50:d7:cd:0a:08:dd:
                    98:20:19:59:00:4a:99:f5:7c:e3:6c:3b:76:48:e3:
                    ac:f9:2b:f3:b3:40:e0:2b:a7:30:75:49:80:2d:af:
                    dc:3d:a4:a1:44:ff:b2:a1:0c:55:32:fa:e8:eb:7b:
                    36:7f:6d:c6:82:16:f4:5e:8b:fb:01:a4:60:6e:33:
                    e8:b6:99:20:8c:8e:3a:85:34:ed:64:15:7b:e7:4b:
                    8b:e2:ff:e3:60:c7:0e:30:61:4c:39:f5:57:b4:ba:
                    32:a4:cf:fc:7e:e7:81:6d:e8:79:af:68:1d:8b:47:
                    ab:e9:b2:26:33:4d:30:62:5a:a5:85:cd:c7:e1:92:
                    e3:76:f3:01:c7:04:1c:c8:8d:da:f8:6d:5d:69:d6:
                    d6:71:b2:60:e8:c9:f5:6c:8f:7e:0e:cb:8c:33:ef:
                    ab:13:db:18:5b:ee:64:32:aa:60:51:c5:f4:5d:af:
                    00:11:86:1c:cd:f0:56:65:8f:d3:9e:72:e1:b2:c3:
                    fb:cb:81:f6:6e:aa:14:b7:2d:27:72:ed:de:23:27:
                    9d:d4:aa:ca:d0:71:55:56:37:59:58:70:f1:5c:c5:
                    38:b8:2b:7f:63:6a:39:7f:56:bc:29:de:e2:0a:41:
                    1b:17:12:43:a8:6f:22:8a:9a:82:d3:01:82:d6:f3:
                    a8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4E:BC:7F:98:3F:6F:A8:92:E4:B4:D5:2D:0A:6F:7D:E9:19:C1:0E
            X509v3 Authority Key Identifier:
                keyid:D0:FD:DF:D0:06:93:14:9E:10:42:21:85:18:8F:22:AE:97:C6:A4:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/D0FDDFD00693149E10422185188F22AE97C6A48A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0FDDFD00693149E10422185188F22AE97C6A48A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/3137392e34332e31392e302f32342d3234203d3e20323730393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:30:74:2a:6e:31:de:0a:ef:0c:13:85:38:c2:b0:6f:a7:ed:
         99:00:77:28:5c:4b:04:43:24:fc:a0:e6:b0:73:02:55:1e:26:
         39:31:35:72:95:ac:3e:1c:7d:04:e6:94:f9:ed:b1:03:6b:21:
         7f:f2:84:d5:d2:19:6e:31:e3:ec:56:27:38:52:cf:ad:c9:44:
         bd:1b:9a:d5:cd:81:80:80:ec:92:2d:3d:3b:5e:b3:ba:bb:8b:
         10:a5:13:7d:af:25:ab:75:2f:f7:df:16:56:04:ae:27:35:8c:
         45:dd:8f:2d:e0:9f:01:6d:61:3c:68:95:a3:33:6e:6b:fb:e2:
         6e:c0:2c:ab:8e:98:40:82:92:a3:f9:cf:08:a9:4d:e3:b2:97:
         49:c6:89:1c:20:0e:ed:90:a7:f7:05:17:b3:05:08:57:06:7d:
         37:6a:80:9e:6f:b7:b4:41:08:9e:62:e9:53:eb:7a:9f:1c:bb:
         fa:f9:2a:0e:76:07:1e:a1:eb:f2:91:73:db:24:ad:0b:74:90:
         04:1f:2b:14:59:2c:8b:1d:18:7a:0b:8a:60:90:06:c9:fd:e5:
         a5:c5:90:a0:f6:e2:42:5e:2a:66:23:47:53:3d:95:0e:87:15:
         89:83:78:61:a1:c5:50:65:0b:d8:12:04:58:8c:d7:05:e6:fe:
         f3:12:3e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:17 2024 by rpki-client on console-ams.rpki-client.org