Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/3137392e34322e36382e302f32332d3233203d3e20323731313330.roa
File:                     3137392e34322e36382e302f32332d3233203d3e20323731313330.roa (raw, json)
Hash identifier:          l9rHIAuF3U9AG822ppyhblL05P6I50++v8YotvdusgM=
Subject key identifier:   A2:D4:5F:A9:82:10:2C:B8:B1:FF:7A:B1:72:5D:7F:4B:91:82:7F:9B
Certificate issuer:       /CN=0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95
Certificate serial:       77F67BC9C7E6B7A83FE8D93B5E9EADD7E5B48BEE
Authority key identifier: 0C:9C:FA:86:DD:C1:A2:0D:F7:24:2A:FB:3C:0F:13:25:E3:AF:DC:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/3137392e34322e36382e302f32332d3233203d3e20323731313330.roa
Signing time:             Sun 05 Dec 2021 07:41:50 +0000
ROA not before:           Sun 05 Dec 2021 07:36:50 +0000
ROA not after:            Sun 04 Dec 2022 07:41:50 +0000
asID:                     271130
IP address blocks:        179.42.68.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:f6:7b:c9:c7:e6:b7:a8:3f:e8:d9:3b:5e:9e:ad:d7:e5:b4:8b:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95
        Validity
            Not Before: Dec  5 07:36:50 2021 GMT
            Not After : Dec  4 07:41:50 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7e:5b:d0:22:3b:2a:2e:74:0b:72:a7:72:33:
                    44:e3:fb:59:1e:4d:aa:27:52:de:41:87:6a:b7:71:
                    0b:41:66:14:88:26:a0:fd:13:a7:c1:0f:55:8a:95:
                    f3:1a:e6:36:ea:15:31:ad:1e:19:78:b3:bd:ec:00:
                    74:81:be:34:68:19:bc:b1:a6:8e:b3:6d:ea:47:fa:
                    22:ab:99:10:6e:3b:09:25:6f:33:82:ec:18:2f:93:
                    4f:f3:46:c0:81:4e:02:c6:c9:2e:62:b9:3e:97:60:
                    08:2d:aa:e2:fc:35:14:c1:8b:6c:eb:fe:05:fb:62:
                    e7:b1:63:02:c7:9e:94:e2:d8:cc:81:a6:2e:23:49:
                    2a:81:b5:ec:88:cb:8e:8f:83:5e:01:85:47:ab:b8:
                    fe:59:f9:3f:9b:66:8d:3d:3e:08:83:1d:02:ef:27:
                    ef:a5:d2:ab:e5:2a:26:fa:59:e5:02:c0:07:0f:c6:
                    5d:b4:ed:4f:5d:35:11:53:92:a4:cf:2e:97:65:ba:
                    84:fa:6a:3a:28:db:0d:dd:04:df:c2:bc:30:1d:d9:
                    5f:57:25:bb:fc:b9:7a:81:32:e6:4a:53:6c:81:79:
                    e2:fe:e5:37:76:98:ee:0d:d5:12:76:90:96:0d:c5:
                    33:bc:fa:0f:cd:5f:d2:16:66:90:5b:cf:a8:31:95:
                    6f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D4:5F:A9:82:10:2C:B8:B1:FF:7A:B1:72:5D:7F:4B:91:82:7F:9B
            X509v3 Authority Key Identifier:
                keyid:0C:9C:FA:86:DD:C1:A2:0D:F7:24:2A:FB:3C:0F:13:25:E3:AF:DC:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/3137392e34322e36382e302f32332d3233203d3e20323731313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:a6:12:d4:e7:79:c4:03:22:0c:c3:19:23:a6:dc:1a:05:2c:
         9f:79:31:8c:d6:17:52:dc:a6:d0:48:e4:d2:01:03:6a:84:b3:
         13:17:49:39:c2:96:42:60:bf:ea:a0:ed:a3:8c:bb:d9:e9:15:
         6e:1b:6c:2d:4b:62:48:24:a6:86:9d:e5:57:63:fc:c6:a7:84:
         0d:3c:8f:44:19:63:49:b3:84:1c:a9:1f:dc:58:85:b8:ae:59:
         df:76:2e:c8:e2:86:63:42:90:36:4d:2e:e6:05:31:a1:3d:ea:
         4f:e8:c4:e9:88:93:b3:9b:ba:3a:16:7b:0f:ea:44:b9:88:04:
         58:f5:b5:8f:3b:b3:dd:0b:3d:1b:b5:92:34:1b:4f:a9:33:4e:
         00:09:fb:1f:c4:69:38:d9:77:0d:bf:fe:d8:33:e1:f6:fa:cf:
         b1:98:ee:06:2f:14:fc:98:98:ff:66:93:51:ac:93:d0:3d:d2:
         dd:69:12:b7:50:ef:09:e9:3b:9c:2b:30:a2:33:cb:3d:ff:92:
         fe:be:bc:ee:41:bf:48:27:56:98:7e:c2:78:2c:b3:f8:63:98:
         f5:13:71:ce:26:7f:25:6c:84:a7:34:43:bc:bc:aa:71:ae:c7:
         81:49:5a:dc:0b:be:82:e4:0e:fa:b5:5a:bb:95:13:a7:4e:c9:
         8c:a6:3d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org