Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/3137392e34322e37312e302f32342d3234203d3e20323731313330.roa
File:                     3137392e34322e37312e302f32342d3234203d3e20323731313330.roa (raw, json)
Hash identifier:          iyI3iDIiOkCmXo+lV7RD9PqYtMzlqRBABR0NwCW5iu4=
Subject key identifier:   A6:F8:8A:11:6F:CF:39:9A:74:AD:5A:E1:38:D0:E4:3B:20:FF:96:64
Certificate issuer:       /CN=0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95
Certificate serial:       2B154DBFAF6C4D2120D080B20DBFB96CDF83875E
Authority key identifier: 0C:9C:FA:86:DD:C1:A2:0D:F7:24:2A:FB:3C:0F:13:25:E3:AF:DC:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/3137392e34322e37312e302f32342d3234203d3e20323731313330.roa
Signing time:             Sun 05 Dec 2021 07:42:24 +0000
ROA not before:           Sun 05 Dec 2021 07:37:24 +0000
ROA not after:            Sun 04 Dec 2022 07:42:24 +0000
asID:                     271130
IP address blocks:        179.42.71.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:15:4d:bf:af:6c:4d:21:20:d0:80:b2:0d:bf:b9:6c:df:83:87:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95
        Validity
            Not Before: Dec  5 07:37:24 2021 GMT
            Not After : Dec  4 07:42:24 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:62:af:5b:59:00:2c:46:3b:46:34:83:7d:ad:
                    7d:74:ed:b3:43:9b:9a:c1:26:f8:82:f4:ad:2c:78:
                    92:ea:45:9f:e9:ed:1b:de:b7:4f:ed:8e:86:62:ca:
                    bf:f1:74:54:50:50:34:87:d6:6e:43:d6:18:4b:0a:
                    f3:17:85:86:bc:92:3e:77:72:90:70:ff:e2:d7:c3:
                    85:0f:47:44:2b:41:20:c8:d8:ef:e3:2e:93:4f:0c:
                    0c:34:d6:d6:87:18:40:20:a0:b0:f0:93:51:25:54:
                    c5:0e:8a:98:b3:42:4e:fa:86:1b:aa:57:69:8f:f3:
                    1e:e1:d8:75:d2:84:9c:ba:45:cc:1d:d3:ab:c1:37:
                    92:27:be:59:ea:07:95:22:23:fb:59:9c:1a:16:04:
                    63:fc:21:c2:3b:00:69:d3:0f:ff:9c:8a:14:96:33:
                    f9:91:40:1f:c1:af:ac:d8:2f:b3:ba:ff:86:fa:01:
                    87:bc:78:ad:8a:0b:0b:0e:1d:be:b6:4d:69:c6:d4:
                    b0:5b:83:f3:0f:e2:c5:a2:42:ff:15:f2:cd:c1:1d:
                    46:3c:eb:41:f0:63:bc:b5:0a:d2:60:94:2d:7e:93:
                    9d:61:90:65:57:b6:42:f3:92:e9:bb:fb:ff:90:91:
                    22:0e:02:eb:3a:64:ab:de:a2:05:10:a1:97:ca:0e:
                    1c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F8:8A:11:6F:CF:39:9A:74:AD:5A:E1:38:D0:E4:3B:20:FF:96:64
            X509v3 Authority Key Identifier:
                keyid:0C:9C:FA:86:DD:C1:A2:0D:F7:24:2A:FB:3C:0F:13:25:E3:AF:DC:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/3137392e34322e37312e302f32342d3234203d3e20323731313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:b1:d4:3e:bf:39:82:d4:f3:38:77:e3:c6:30:15:59:38:c6:
         25:49:cc:7e:31:17:c8:1f:97:7d:46:e3:dd:54:c3:f8:ee:c9:
         0c:60:78:b8:04:c5:a5:b9:18:44:ca:67:03:98:bc:47:e4:b9:
         14:d8:f4:04:05:82:a6:be:e6:23:07:29:2e:aa:d6:c2:1e:36:
         df:dd:36:20:41:6f:e9:a8:2e:5e:6d:ed:2f:e8:8b:33:ca:60:
         93:4c:4a:cd:87:a3:8c:d7:b9:4b:e2:4a:d6:f0:d7:74:68:00:
         02:f4:a5:12:28:fa:f8:b8:4f:f1:cf:f5:df:b7:71:e7:ab:29:
         94:17:2c:cc:56:d1:53:c1:22:22:9d:36:0e:04:f1:7d:ca:27:
         1a:da:c9:99:d1:45:1e:7d:3f:70:40:b5:88:26:b9:1d:f0:26:
         0b:7a:bd:f0:03:dd:b5:4f:d8:35:be:2c:8d:3a:52:0e:21:ca:
         1b:70:e5:a2:2b:46:b8:be:80:0d:7b:01:55:7a:3f:29:ba:28:
         d5:47:7e:b3:24:b9:03:34:fe:1f:56:dc:6b:88:5b:94:24:0e:
         fe:d2:e1:97:ed:4d:0b:c5:63:1b:e9:32:62:28:76:8e:35:88:
         3a:ba:03:4b:4a:ff:4f:76:11:d8:d3:64:de:15:6b:3d:51:86:
         18:75:1a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org