Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/3137392e34322e36392e302f32342d3234203d3e20323731313330.roa
File:                     3137392e34322e36392e302f32342d3234203d3e20323731313330.roa (raw, json)
Hash identifier:          OgYKzRFtN8e2kHsTEFs6LLHHo9KdfEf19sTBz0nf7Ec=
Subject key identifier:   B1:B6:94:C5:CB:0B:DF:00:F4:68:0C:FF:6B:5D:95:6B:43:76:F2:70
Certificate issuer:       /CN=0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95
Certificate serial:       36A83090A62942A0BF123C2BEBE0300EE44F8DBF
Authority key identifier: 0C:9C:FA:86:DD:C1:A2:0D:F7:24:2A:FB:3C:0F:13:25:E3:AF:DC:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/3137392e34322e36392e302f32342d3234203d3e20323731313330.roa
Signing time:             Sun 05 Dec 2021 07:42:05 +0000
ROA not before:           Sun 05 Dec 2021 07:37:05 +0000
ROA not after:            Sun 04 Dec 2022 07:42:05 +0000
asID:                     271130
IP address blocks:        179.42.69.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:a8:30:90:a6:29:42:a0:bf:12:3c:2b:eb:e0:30:0e:e4:4f:8d:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95
        Validity
            Not Before: Dec  5 07:37:05 2021 GMT
            Not After : Dec  4 07:42:05 2022 GMT
        Subject: CN=3082010A0282010100C339A1634833B1BCB5DB6BE5952A5B384A034F3D948BA77F1C4A044DE4937125889EA53C85419C759C0B5CA989B48E2F029DFF9DC14A6D6694DEBF5AAB639604AA38BDCA253AC89545FBECA0082F7E8A9DF8985D220FB74D1F8A4FA1BE3B295762F1A74ECE2E46F695F0D286563CF98D47BF134D7C3347CA66F046B06C2F4E92B579B3EB5543281648D4E01A8904E76598C970A3EFF36E42FA7EAE37BDF368315258169FD0F521D5FB67DE5CDCFBF67DD4097210E3C7A2DE3B79A770489A71A9526E8CEB3640F05BE3B1A5892D9368EE9CED0528E578A0B75367B3CCDE60554F8574AE2977DBFE5BD255C4848AF4D3DF46AD515899720CA1D2965E250D4BB11D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:39:a1:63:48:33:b1:bc:b5:db:6b:e5:95:2a:
                    5b:38:4a:03:4f:3d:94:8b:a7:7f:1c:4a:04:4d:e4:
                    93:71:25:88:9e:a5:3c:85:41:9c:75:9c:0b:5c:a9:
                    89:b4:8e:2f:02:9d:ff:9d:c1:4a:6d:66:94:de:bf:
                    5a:ab:63:96:04:aa:38:bd:ca:25:3a:c8:95:45:fb:
                    ec:a0:08:2f:7e:8a:9d:f8:98:5d:22:0f:b7:4d:1f:
                    8a:4f:a1:be:3b:29:57:62:f1:a7:4e:ce:2e:46:f6:
                    95:f0:d2:86:56:3c:f9:8d:47:bf:13:4d:7c:33:47:
                    ca:66:f0:46:b0:6c:2f:4e:92:b5:79:b3:eb:55:43:
                    28:16:48:d4:e0:1a:89:04:e7:65:98:c9:70:a3:ef:
                    f3:6e:42:fa:7e:ae:37:bd:f3:68:31:52:58:16:9f:
                    d0:f5:21:d5:fb:67:de:5c:dc:fb:f6:7d:d4:09:72:
                    10:e3:c7:a2:de:3b:79:a7:70:48:9a:71:a9:52:6e:
                    8c:eb:36:40:f0:5b:e3:b1:a5:89:2d:93:68:ee:9c:
                    ed:05:28:e5:78:a0:b7:53:67:b3:cc:de:60:55:4f:
                    85:74:ae:29:77:db:fe:5b:d2:55:c4:84:8a:f4:d3:
                    df:46:ad:51:58:99:72:0c:a1:d2:96:5e:25:0d:4b:
                    b1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B6:94:C5:CB:0B:DF:00:F4:68:0C:FF:6B:5D:95:6B:43:76:F2:70
            X509v3 Authority Key Identifier:
                keyid:0C:9C:FA:86:DD:C1:A2:0D:F7:24:2A:FB:3C:0F:13:25:E3:AF:DC:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/3137392e34322e36392e302f32342d3234203d3e20323731313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:1c:4c:02:8b:da:80:9a:2b:cb:11:c0:6a:90:5d:47:a3:03:
         d7:79:46:34:48:d7:fd:d6:e0:79:fb:02:eb:a7:73:e7:17:13:
         41:39:07:d8:92:22:b2:30:86:cc:17:d0:0f:30:36:10:8a:5e:
         dd:78:0a:1f:7e:23:86:92:fc:57:43:7e:bb:fd:6b:b7:43:58:
         ed:56:66:da:a9:55:81:07:90:bc:fd:cb:c7:e3:57:fa:e8:be:
         61:a8:84:a6:62:49:b0:89:f8:fe:ba:60:7f:20:80:4f:ca:09:
         ea:52:92:f6:30:84:d4:f8:a6:30:a6:d8:7e:a7:c7:de:de:92:
         11:dc:5f:df:92:f7:79:93:c1:32:27:f5:b6:1b:ff:4c:9e:7f:
         a6:47:b1:05:0d:0a:b4:45:3b:b5:2a:dc:bb:d8:65:1d:5e:94:
         c4:f5:33:57:25:c1:8a:5a:a1:9a:7e:57:8a:89:91:b9:6e:96:
         b8:78:1f:47:12:be:06:57:00:a5:11:9e:89:56:30:33:99:85:
         0a:b3:bf:d3:ea:45:54:2a:98:c0:cf:79:55:4b:bf:70:96:a0:
         ef:16:aa:38:60:66:1c:da:c7:ca:6c:67:c7:80:fb:5f:27:c7:
         b5:83:7d:e6:cf:24:c7:d5:89:c8:b8:e3:6a:ee:65:30:1b:04:
         0f:18:ed:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org