Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/3137392e34322e36382e302f32342d3234203d3e20323731313330.roa
File:                     3137392e34322e36382e302f32342d3234203d3e20323731313330.roa (raw, json)
Hash identifier:          kThCbZWfKXYdve6GPZ3mOAG1PE3T9QP+VdlkUCiIEgA=
Subject key identifier:   17:2E:E4:0C:22:5D:2A:E6:14:0F:5B:60:7C:FB:11:E4:01:B9:3D:7E
Certificate issuer:       /CN=0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95
Certificate serial:       61F73F79A217618813D8A5378A57B6CAED78DDD8
Authority key identifier: 0C:9C:FA:86:DD:C1:A2:0D:F7:24:2A:FB:3C:0F:13:25:E3:AF:DC:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/3137392e34322e36382e302f32342d3234203d3e20323731313330.roa
Signing time:             Sun 05 Dec 2021 07:42:00 +0000
ROA not before:           Sun 05 Dec 2021 07:37:00 +0000
ROA not after:            Sun 04 Dec 2022 07:42:00 +0000
asID:                     271130
IP address blocks:        179.42.68.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:f7:3f:79:a2:17:61:88:13:d8:a5:37:8a:57:b6:ca:ed:78:dd:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95
        Validity
            Not Before: Dec  5 07:37:00 2021 GMT
            Not After : Dec  4 07:42:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8e:f5:0e:99:4b:d2:87:74:58:99:ab:30:1d:
                    cb:69:c9:0d:86:a0:8d:7b:db:a5:11:89:ea:5d:8a:
                    f8:bc:4b:7c:97:20:0b:62:4d:0f:34:32:bf:63:fe:
                    90:25:e5:6c:7e:2d:d3:7f:97:df:58:79:3b:a1:be:
                    b8:70:5b:18:f3:7e:51:e5:07:a9:1a:4f:4b:8d:7e:
                    70:7a:9e:c8:39:b2:f1:6c:87:a1:1e:87:b3:1b:93:
                    06:4f:e9:50:0c:53:17:7c:05:6f:de:ca:69:ad:b1:
                    ba:08:12:2d:b4:c7:d0:bd:47:b2:99:63:7f:67:4b:
                    4d:82:5c:b2:27:ab:73:42:25:19:d4:f3:d6:61:b0:
                    e9:99:fb:f4:0f:c9:ff:d3:12:3a:49:93:99:11:e6:
                    16:f2:48:38:46:28:4d:95:75:cf:73:0d:a7:a6:d7:
                    f3:da:82:3c:30:d1:56:b7:3a:3a:96:db:7c:a2:07:
                    81:68:7b:b2:bf:e2:cc:bc:fb:92:c6:cc:45:de:d7:
                    9f:00:b1:f6:ca:a4:47:7e:00:2a:1b:5c:8f:91:25:
                    d0:22:03:5c:b7:55:f3:fb:28:f0:bb:ff:17:c3:08:
                    e4:b7:d5:c5:1e:1c:ba:60:04:66:a4:2e:dd:39:a7:
                    4c:e4:fc:b6:b3:26:1b:56:43:95:3e:1c:a7:92:d1:
                    89:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:2E:E4:0C:22:5D:2A:E6:14:0F:5B:60:7C:FB:11:E4:01:B9:3D:7E
            X509v3 Authority Key Identifier:
                keyid:0C:9C:FA:86:DD:C1:A2:0D:F7:24:2A:FB:3C:0F:13:25:E3:AF:DC:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/3137392e34322e36382e302f32342d3234203d3e20323731313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:39:6b:c5:d4:a3:93:af:3b:21:ff:9d:6a:38:4e:1e:f1:e5:
         b0:d9:94:98:92:23:f9:67:6b:b0:fe:f6:85:8d:49:81:d3:df:
         6c:f8:cc:45:a5:70:28:9e:56:6b:19:0e:e3:83:72:5f:e4:eb:
         e3:f1:6b:f7:6e:f4:d3:38:f2:06:81:87:84:da:71:91:26:31:
         be:ba:f4:26:70:66:60:50:2d:77:38:fe:94:1c:f0:03:c0:5a:
         d4:a5:bf:0e:fb:46:fc:e9:c2:70:d2:8a:48:e4:44:99:ba:a6:
         76:32:a1:38:02:38:a1:b7:11:44:24:bc:15:d7:ad:d1:67:2d:
         99:d0:03:50:37:11:ed:33:d9:fc:6b:cf:a1:60:14:d0:8a:a4:
         16:4f:8a:8d:45:25:61:9d:27:eb:9c:58:fc:fc:fa:b5:d8:24:
         df:37:25:ed:bb:29:83:cf:ab:20:1a:b7:2b:8a:e5:53:73:ff:
         af:4d:76:6b:56:cb:ce:d0:5b:69:7b:a3:0b:c0:5b:da:6c:c0:
         fd:9d:b3:dc:38:5a:f7:cf:9e:aa:96:18:84:a9:e3:47:c1:cc:
         f7:db:0c:99:df:54:f3:7d:2d:19:d1:14:5c:be:a8:c1:22:7a:
         64:1f:35:ec:8c:13:9d:01:82:e6:80:c6:5f:9e:db:83:64:35:
         c3:47:3d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org