Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/3137392e34322e37302e302f32342d3234203d3e20323731313330.roa
File:                     3137392e34322e37302e302f32342d3234203d3e20323731313330.roa (raw, json)
Hash identifier:          wgEbw/lqHAFg/zBPwqXFpss81/wIiyPaiY5QIXAPqIw=
Subject key identifier:   D4:37:7D:46:9E:5C:7E:BB:48:6D:1F:A3:AC:1F:E0:C6:FB:4E:E9:33
Certificate issuer:       /CN=0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95
Certificate serial:       47B4CC997BD81928884E00E24E763C5D7B9F93A7
Authority key identifier: 0C:9C:FA:86:DD:C1:A2:0D:F7:24:2A:FB:3C:0F:13:25:E3:AF:DC:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/3137392e34322e37302e302f32342d3234203d3e20323731313330.roa
Signing time:             Sun 05 Dec 2021 07:42:21 +0000
ROA not before:           Sun 05 Dec 2021 07:37:21 +0000
ROA not after:            Sun 04 Dec 2022 07:42:21 +0000
asID:                     271130
IP address blocks:        179.42.70.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b4:cc:99:7b:d8:19:28:88:4e:00:e2:4e:76:3c:5d:7b:9f:93:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95
        Validity
            Not Before: Dec  5 07:37:21 2021 GMT
            Not After : Dec  4 07:42:21 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:67:1c:83:19:79:6f:ec:fb:8c:6f:76:31:01:
                    4a:b4:73:0b:89:ee:9e:e6:d4:25:ef:29:46:58:1d:
                    76:82:f5:b2:75:85:a0:e0:41:76:5b:28:d7:da:11:
                    3c:2b:c3:d8:62:b7:f4:36:3f:34:57:88:2a:0b:17:
                    0c:2b:65:1f:8a:9d:2f:ba:81:03:f5:d6:4e:d5:46:
                    7f:6e:70:a7:fe:c6:e1:22:1c:18:02:4a:f7:0d:ca:
                    cf:0a:8c:2a:d4:a4:0d:3d:de:e0:96:84:6f:cf:29:
                    be:f7:31:18:fc:bb:26:b3:6c:08:4d:34:d0:86:1f:
                    3a:e0:14:5f:68:18:da:e2:60:2f:47:1e:42:c4:3d:
                    ef:8d:fd:e0:cf:31:1a:61:15:45:8a:65:da:35:67:
                    77:db:6a:d9:c9:67:9a:46:15:87:e6:66:f3:b2:6f:
                    14:97:ee:01:1b:0f:1b:21:3c:66:46:9b:ef:51:a8:
                    9c:af:ca:03:04:46:f5:e1:3b:ca:af:ad:b4:c5:24:
                    e3:df:e9:6e:95:86:76:74:d0:e5:a3:9f:71:34:95:
                    df:8f:66:bb:9a:53:60:b9:c0:16:42:df:c5:86:a8:
                    c4:32:df:3c:51:c6:eb:11:c6:64:2a:60:4e:2a:89:
                    1c:4b:e1:27:d2:bb:4b:69:e2:b8:93:15:49:ea:94:
                    6d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:37:7D:46:9E:5C:7E:BB:48:6D:1F:A3:AC:1F:E0:C6:FB:4E:E9:33
            X509v3 Authority Key Identifier:
                keyid:0C:9C:FA:86:DD:C1:A2:0D:F7:24:2A:FB:3C:0F:13:25:E3:AF:DC:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/3137392e34322e37302e302f32342d3234203d3e20323731313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:0f:2f:59:89:6f:b8:c8:28:dd:07:ab:85:a9:14:5f:a9:92:
         0a:6e:9d:bb:3d:56:21:0c:c7:ec:6a:35:ea:d6:42:a0:09:97:
         ad:79:98:17:48:13:25:16:f9:fb:58:46:34:71:2a:45:30:b7:
         85:d4:3c:4e:ad:d9:32:f8:45:bd:1a:16:1e:dd:83:97:3e:ca:
         bb:27:e9:b4:f3:45:82:a9:63:93:c9:f4:b6:6b:61:b2:25:eb:
         e2:b3:7c:db:a8:f9:c2:09:66:a2:d4:a5:ad:d2:81:4a:7b:80:
         1d:4d:a8:a8:5a:65:6a:17:78:b2:51:d4:b5:6f:cf:d4:70:30:
         f2:26:30:97:92:42:dd:81:06:6b:ab:7a:33:72:dd:9c:19:a1:
         7a:3b:0d:e4:fe:b8:ea:ee:4c:50:e4:51:11:4b:8d:ff:88:b4:
         34:ee:5b:f4:f9:2a:6d:40:86:c6:22:72:5b:c1:a8:bd:60:6d:
         c7:56:64:32:3b:d9:b6:4d:98:89:ec:0d:2c:4f:04:81:23:71:
         5a:c7:0f:34:dc:86:33:cc:82:6e:cb:85:f7:61:b2:b9:42:3d:
         1a:b3:a3:12:5f:fd:07:54:ed:45:42:19:81:a8:9b:bf:66:7f:
         a9:6c:1c:6a:ec:f2:54:f5:5f:1f:bb:18:3f:23:8b:dd:0f:44:
         27:3a:e0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org