Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/3137392e34322e37302e302f32332d3233203d3e20323731313330.roa
File:                     3137392e34322e37302e302f32332d3233203d3e20323731313330.roa (raw, json)
Hash identifier:          hsBz1ChqJN9Eo9dd6xIlEgfy6bm2ftahpJ46dPRQNqE=
Subject key identifier:   63:BD:FF:B4:40:91:20:3B:6E:32:4E:53:70:97:03:8F:DC:4B:CF:7A
Certificate issuer:       /CN=0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95
Certificate serial:       16D9F13D8152F8B90B4E1D5B125A600A73E8BD42
Authority key identifier: 0C:9C:FA:86:DD:C1:A2:0D:F7:24:2A:FB:3C:0F:13:25:E3:AF:DC:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/3137392e34322e37302e302f32332d3233203d3e20323731313330.roa
Signing time:             Sun 05 Dec 2021 07:42:18 +0000
ROA not before:           Sun 05 Dec 2021 07:37:18 +0000
ROA not after:            Sun 04 Dec 2022 07:42:18 +0000
asID:                     271130
IP address blocks:        179.42.70.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:d9:f1:3d:81:52:f8:b9:0b:4e:1d:5b:12:5a:60:0a:73:e8:bd:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95
        Validity
            Not Before: Dec  5 07:37:18 2021 GMT
            Not After : Dec  4 07:42:18 2022 GMT
        Subject: CN=3082010A0282010100DFE2FFDAA175222966F4D833DA0F0725F49EBB5C461848FE9DF55C4B9AC811CDA3ABC46305E61B6F2103593E87D9122C2D58A3E1A9A0E01C297CD065E458AB465CBF22313AD9AD6AEB558AF816363FE63C3C7E3B8FA8763FD8360BAAEF9DF5572928AF3C721B48416F59A4A8A8F128FCFD26EF143CC40578C4D94DB62C9A72C8B6BCAFDEDD2CBD66EA7CB26E19FD216BFF2E2375540B95FE56AA91A57E9150D881D6A0AF6E3197184F950D2E9A17A1E9B8583FE1B01D4C8B47D26A7AEBBCD69C4D97A48D05BAB78DA5EF06B3B1EBCC796EA092372792FD8C97915CAB81DB6D82AE885E30A3BF623EC09594DB79E562DEF4A9C4D19BD092C14242EFEAEBD42E5F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e2:ff:da:a1:75:22:29:66:f4:d8:33:da:0f:
                    07:25:f4:9e:bb:5c:46:18:48:fe:9d:f5:5c:4b:9a:
                    c8:11:cd:a3:ab:c4:63:05:e6:1b:6f:21:03:59:3e:
                    87:d9:12:2c:2d:58:a3:e1:a9:a0:e0:1c:29:7c:d0:
                    65:e4:58:ab:46:5c:bf:22:31:3a:d9:ad:6a:eb:55:
                    8a:f8:16:36:3f:e6:3c:3c:7e:3b:8f:a8:76:3f:d8:
                    36:0b:aa:ef:9d:f5:57:29:28:af:3c:72:1b:48:41:
                    6f:59:a4:a8:a8:f1:28:fc:fd:26:ef:14:3c:c4:05:
                    78:c4:d9:4d:b6:2c:9a:72:c8:b6:bc:af:de:dd:2c:
                    bd:66:ea:7c:b2:6e:19:fd:21:6b:ff:2e:23:75:54:
                    0b:95:fe:56:aa:91:a5:7e:91:50:d8:81:d6:a0:af:
                    6e:31:97:18:4f:95:0d:2e:9a:17:a1:e9:b8:58:3f:
                    e1:b0:1d:4c:8b:47:d2:6a:7a:eb:bc:d6:9c:4d:97:
                    a4:8d:05:ba:b7:8d:a5:ef:06:b3:b1:eb:cc:79:6e:
                    a0:92:37:27:92:fd:8c:97:91:5c:ab:81:db:6d:82:
                    ae:88:5e:30:a3:bf:62:3e:c0:95:94:db:79:e5:62:
                    de:f4:a9:c4:d1:9b:d0:92:c1:42:42:ef:ea:eb:d4:
                    2e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BD:FF:B4:40:91:20:3B:6E:32:4E:53:70:97:03:8F:DC:4B:CF:7A
            X509v3 Authority Key Identifier:
                keyid:0C:9C:FA:86:DD:C1:A2:0D:F7:24:2A:FB:3C:0F:13:25:E3:AF:DC:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/3137392e34322e37302e302f32332d3233203d3e20323731313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:86:16:ec:b2:50:4c:82:e9:ed:13:d5:bb:06:54:85:8f:68:
         0b:93:fc:49:75:60:d4:5b:46:c5:03:b8:c5:6f:38:8c:a3:27:
         12:c5:de:5b:e8:f6:80:67:dd:62:81:04:71:ea:b0:eb:ce:25:
         ec:d3:44:41:0a:5a:7a:1b:d5:4e:0c:21:a5:de:54:da:f3:85:
         95:c5:59:a4:5d:cb:09:93:0d:b7:17:49:4e:56:7a:35:04:4e:
         9d:0c:d3:60:1f:ca:fe:24:95:b1:3f:fc:55:f4:44:1b:48:aa:
         88:1d:f5:39:f0:c5:f1:90:e5:42:ac:4a:46:82:7b:0a:86:36:
         22:c3:84:2c:94:49:a0:64:bb:25:28:46:c8:e0:6a:00:97:ac:
         b9:05:de:86:51:3c:5a:f1:42:95:e3:b9:39:07:52:0c:1e:1a:
         f1:33:ac:09:f0:17:a6:bb:a4:70:67:40:09:eb:c7:50:bf:e9:
         04:3a:0a:67:a4:ce:dd:df:40:67:a5:d0:e0:75:59:1b:4e:3d:
         47:04:9c:66:34:1e:d6:ea:bc:a4:8b:8f:86:37:3c:56:3e:27:
         b8:22:a9:a1:62:86:66:79:c9:65:96:ee:97:27:bc:19:24:9d:
         12:07:69:f1:eb:fc:9c:03:9d:58:53:39:5a:71:b5:4e:4f:51:
         86:c4:c1:72
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUFtnxPYFS+LkLTh1bElpgCnPovUIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEM5Q0ZBODZEREMxQTIwREY3MjQyQUZCM0MwRjEzMjVF
M0FGREM5NTAeFw0yMTEyMDUwNzM3MThaFw0yMjEyMDQwNzQyMThaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREZFMkZGREFBMTc1MjIyOTY2
RjREODMzREEwRjA3MjVGNDlFQkI1QzQ2MTg0OEZFOURGNTVDNEI5QUM4MTFDREEz
QUJDNDYzMDVFNjFCNkYyMTAzNTkzRTg3RDkxMjJDMkQ1OEEzRTFBOUEwRTAxQzI5
N0NEMDY1RTQ1OEFCNDY1Q0JGMjIzMTNBRDlBRDZBRUI1NThBRjgxNjM2M0ZFNjND
M0M3RTNCOEZBODc2M0ZEODM2MEJBQUVGOURGNTU3MjkyOEFGM0M3MjFCNDg0MTZG
NTlBNEE4QThGMTI4RkNGRDI2RUYxNDNDQzQwNTc4QzREOTREQjYyQzlBNzJDOEI2
QkNBRkRFREQyQ0JENjZFQTdDQjI2RTE5RkQyMTZCRkYyRTIzNzU1NDBCOTVGRTU2
QUE5MUE1N0U5MTUwRDg4MUQ2QTBBRjZFMzE5NzE4NEY5NTBEMkU5QTE3QTFFOUI4
NTgzRkUxQjAxRDRDOEI0N0QyNkE3QUVCQkNENjlDNEQ5N0E0OEQwNUJBQjc4REE1
RUYwNkIzQjFFQkNDNzk2RUEwOTIzNzI3OTJGRDhDOTc5MTVDQUI4MURCNkQ4MkFF
ODg1RTMwQTNCRjYyM0VDMDk1OTREQjc5RTU2MkRFRjRBOUM0RDE5QkQwOTJDMTQy
NDJFRkVBRUJENDJFNUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA3+L/2qF1Iilm9Ngz2g8HJfSeu1xGGEj+nfVcS5rIEc2jq8RjBeYb
byEDWT6H2RIsLVij4amg4BwpfNBl5FirRly/IjE62a1q61WK+BY2P+Y8PH47j6h2
P9g2C6rvnfVXKSivPHIbSEFvWaSoqPEo/P0m7xQ8xAV4xNlNtiyacsi2vK/e3Sy9
Zup8sm4Z/SFr/y4jdVQLlf5WqpGlfpFQ2IHWoK9uMZcYT5UNLpoXoem4WD/hsB1M
i0fSanrrvNacTZekjQW6t42l7wazsevMeW6gkjcnkv2Ml5Fcq4HbbYKuiF4wo79i
PsCVlNt55WLe9KnE0ZvQksFCQu/q69QuXwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FGO9/7RAkSA7bjJOU3CXA4/cS896MB8GA1UdIwQYMBaAFAyc+obdwaIN9yQq+zwP
EyXjr9yVMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hlWUozb1pLU2tVRWdu
Q2hSdHd2QTJSOVdoZ21XRmJMOGs1TTFUU3l6WEhELzAvMEM5Q0ZBODZEREMxQTIw
REY3MjQyQUZCM0MwRjEzMjVFM0FGREM5NS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8wQzlDRkE4NkREQzFBMjBERjcyNDJBRkIzQzBGMTMyNUUzQUZE
Qzk1LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9IZVlKM29aS1NrVUVnbkNoUnR3
dkEyUjlXaGdtV0ZiTDhrNU0xVFN5elhIRC8wLzMxMzczOTJlMzQzMjJlMzczMDJl
MzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzczMTMxMzMzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbMq
RjANBgkqhkiG9w0BAQsFAAOCAQEADYYW7LJQTILp7RPVuwZUhY9oC5P8SXVg1FtG
xQO4xW84jKMnEsXeW+j2gGfdYoEEceqw684l7NNEQQpaehvVTgwhpd5U2vOFlcVZ
pF3LCZMNtxdJTlZ6NQROnQzTYB/K/iSVsT/8VfREG0iqiB31OfDF8ZDlQqxKRoJ7
CoY2IsOELJRJoGS7JShGyOBqAJesuQXehlE8WvFCleO5OQdSDB4a8TOsCfAXpruk
cGdACevHUL/pBDoKZ6TO3d9AZ6XQ4HVZG049RwScZjQe1uq8pIuPhjc8Vj4nuCKp
oWKGZnnJZZbulye8GSSdEgdp8ev8nAOdWFM5WnG1Tk9RhsTBcg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org