Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/3137392e34322e37302e302f32332d3332203d3e20323731313330.roa
File:                     3137392e34322e37302e302f32332d3332203d3e20323731313330.roa (raw, json)
Hash identifier:          bRlDNjCzJGYOZf98Mqu2Y5j1qflebO8jDUJimP3xZtk=
Subject key identifier:   C9:C9:32:5B:7D:BC:8F:CD:77:7D:CB:76:F9:CE:BC:74:9F:F8:B8:3C
Certificate issuer:       /CN=04AFE5BFE3D946811341B0DCBC883C99338E067B
Certificate serial:       55AB65DB7141F953E96350ADA36372774607CDC9
Authority key identifier: 04:AF:E5:BF:E3:D9:46:81:13:41:B0:DC:BC:88:3C:99:33:8E:06:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04AFE5BFE3D946811341B0DCBC883C99338E067B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/3137392e34322e37302e302f32332d3332203d3e20323731313330.roa
Signing time:             Tue 07 Nov 2023 17:35:34 +0000
ROA not before:           Tue 07 Nov 2023 17:30:34 +0000
ROA not after:            Tue 05 Nov 2024 17:35:34 +0000
asID:                     271130
IP address blocks:        179.42.70.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ab:65:db:71:41:f9:53:e9:63:50:ad:a3:63:72:77:46:07:cd:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04AFE5BFE3D946811341B0DCBC883C99338E067B
        Validity
            Not Before: Nov  7 17:30:34 2023 GMT
            Not After : Nov  5 17:35:34 2024 GMT
        Subject: CN=C9C9325B7DBC8FCD777DCB76F9CEBC749FF8B83C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:1e:38:35:ca:66:44:cd:48:89:e0:c2:53:41:
                    f2:43:a3:3f:ad:c6:6c:f2:26:a9:b8:67:41:78:38:
                    5d:bc:4f:f7:72:9c:b1:f2:cf:b5:de:ec:71:68:f0:
                    f0:3b:dc:b1:b9:ed:2f:72:47:2a:bf:c2:6d:15:ab:
                    e8:45:44:a9:bd:3e:dd:92:a2:54:9e:1d:eb:3c:4d:
                    87:59:0b:c0:98:c6:86:aa:c6:d4:2f:d8:2a:59:1b:
                    1d:5f:1a:7c:02:7f:a7:35:7e:65:22:be:94:b8:2a:
                    03:e8:c9:35:2d:9b:b0:2e:e0:5b:50:01:43:aa:ef:
                    bf:0a:34:af:20:3b:6d:c5:12:84:d5:b1:99:90:13:
                    4e:96:5a:2c:41:18:c6:5c:1f:fd:7c:09:36:af:21:
                    a0:05:b8:68:d0:31:f0:a5:9c:8e:82:3f:20:22:2d:
                    b0:d2:58:5f:3e:45:6c:45:2a:f0:49:52:f3:11:6d:
                    01:34:d7:47:90:18:bb:4f:42:9a:5b:e9:3c:96:6a:
                    82:3e:26:fc:0d:4d:25:38:f8:29:79:f7:6b:8b:1e:
                    70:c0:37:da:9a:22:df:07:eb:e9:6f:5b:44:27:6c:
                    19:e1:70:10:71:b1:49:d6:a9:ba:96:19:27:f4:9f:
                    ab:d1:7f:6f:ac:76:6f:63:5b:45:4e:3e:6b:5b:87:
                    10:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C9:32:5B:7D:BC:8F:CD:77:7D:CB:76:F9:CE:BC:74:9F:F8:B8:3C
            X509v3 Authority Key Identifier:
                keyid:04:AF:E5:BF:E3:D9:46:81:13:41:B0:DC:BC:88:3C:99:33:8E:06:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/04AFE5BFE3D946811341B0DCBC883C99338E067B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04AFE5BFE3D946811341B0DCBC883C99338E067B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/3137392e34322e37302e302f32332d3332203d3e20323731313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:d6:3e:28:e7:2a:03:27:1c:57:f7:63:b0:8c:a4:81:3c:7c:
         42:9f:61:77:3d:fb:1a:ca:8a:12:f3:8a:2b:ac:71:fc:af:8d:
         b0:29:ec:a8:e6:72:58:9d:33:f9:33:d7:e6:07:45:e2:b0:c9:
         33:20:e0:71:b2:d6:11:1a:da:b3:7c:07:54:23:e9:6f:de:90:
         1b:22:fa:7e:e0:8e:04:73:32:b5:6c:f6:e6:6b:a6:2b:3a:5d:
         b7:ab:19:3f:9a:52:a5:30:cc:4f:21:b9:01:f2:00:23:93:fa:
         15:a4:0d:d1:0d:8d:32:66:2f:b2:43:67:6b:76:2e:ef:ff:68:
         8a:4d:62:ae:c9:b6:52:17:33:76:88:5b:c7:85:9d:85:70:cd:
         2d:33:a6:10:1f:92:54:a1:ab:08:99:36:da:e2:f0:09:f4:f2:
         1d:09:b9:7d:f6:ce:5a:b1:79:a4:20:51:d7:98:97:98:99:9c:
         8f:f2:36:f6:a6:fd:fb:a5:54:c6:b9:60:4d:e5:34:50:ed:6d:
         1a:a5:0d:05:a2:2a:cf:15:7a:99:d1:4a:21:d8:d1:0a:69:c0:
         ff:48:36:60:8b:0b:3f:21:b0:70:bf:03:3f:e1:5b:3d:9c:20:
         51:8a:e0:2f:3d:b7:28:b4:71:8b:0c:31:b3:49:2d:f6:c0:9f:
         c4:cd:fe:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org