Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e33372e38302e302f32322d3234203d3e20323632343137.roa
File:                     3137372e33372e38302e302f32322d3234203d3e20323632343137.roa (raw, json)
Hash identifier:          Fdj3Q4cIDMsvNs57jHiXEhOEuSHWkAs88mKCqGCe5bw=
Subject key identifier:   03:1A:5B:1F:27:93:5A:7F:CC:06:4C:C2:DD:F4:70:E8:94:2F:D5:79
Certificate issuer:       /CN=97A4AF5A5DAA9301E561374F38352591E093C270
Certificate serial:       0F693332528A3F05C26085D99B8ABCFF4DB9D9C1
Authority key identifier: 97:A4:AF:5A:5D:AA:93:01:E5:61:37:4F:38:35:25:91:E0:93:C2:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97A4AF5A5DAA9301E561374F38352591E093C270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e33372e38302e302f32322d3234203d3e20323632343137.roa
Signing time:             Mon 11 Dec 2023 17:37:09 +0000
ROA not before:           Mon 11 Dec 2023 17:32:09 +0000
ROA not after:            Mon 09 Dec 2024 17:37:09 +0000
asID:                     262417
IP address blocks:        177.37.80.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:69:33:32:52:8a:3f:05:c2:60:85:d9:9b:8a:bc:ff:4d:b9:d9:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97A4AF5A5DAA9301E561374F38352591E093C270
        Validity
            Not Before: Dec 11 17:32:09 2023 GMT
            Not After : Dec  9 17:37:09 2024 GMT
        Subject: CN=031A5B1F27935A7FCC064CC2DDF470E8942FD579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7b:b8:b5:b8:36:72:5e:41:bc:1b:3c:7e:cb:
                    bb:ba:29:3f:a4:0a:e9:37:40:07:2b:5d:5a:7d:97:
                    2a:cb:88:35:b9:b5:90:95:1c:f9:47:7f:7f:9d:4f:
                    4d:51:99:2d:6a:0f:14:d4:24:ed:32:b4:c1:c5:fd:
                    48:1e:b1:ac:98:4e:4b:58:3a:10:c5:f4:9d:41:a3:
                    d9:43:e6:31:3b:2d:f0:e6:fe:d7:81:0c:85:de:93:
                    57:42:fa:8f:9f:5c:58:2d:29:9f:5e:22:90:a2:ea:
                    a7:94:06:ee:91:0c:9a:f2:74:a5:7d:16:05:4b:8d:
                    c5:51:82:37:ab:c4:5c:27:d5:35:fa:96:aa:37:66:
                    01:95:e8:ef:09:9f:38:c4:d9:79:a3:a2:a7:f1:2f:
                    82:1d:8c:a6:55:d1:fe:44:66:18:58:b0:52:bb:89:
                    01:03:8c:6a:ee:27:2a:74:82:c5:f4:65:be:7e:13:
                    67:66:db:59:d7:51:7d:cf:c4:03:86:f9:4b:3d:dd:
                    5e:e0:ac:3a:fd:0d:d5:44:7b:49:78:ed:62:4a:56:
                    9c:98:2b:9b:c8:69:30:a1:43:92:20:e4:ec:2e:08:
                    c5:ac:f7:80:ff:94:7a:46:66:a0:fb:21:f1:4f:86:
                    b2:6a:b3:f7:3a:60:63:3f:cc:47:eb:8c:01:44:1f:
                    2a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:1A:5B:1F:27:93:5A:7F:CC:06:4C:C2:DD:F4:70:E8:94:2F:D5:79
            X509v3 Authority Key Identifier:
                keyid:97:A4:AF:5A:5D:AA:93:01:E5:61:37:4F:38:35:25:91:E0:93:C2:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/97A4AF5A5DAA9301E561374F38352591E093C270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97A4AF5A5DAA9301E561374F38352591E093C270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e33372e38302e302f32322d3234203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:13:6f:0e:d1:b6:41:96:b2:25:ba:ee:82:bb:56:58:b2:da:
         77:03:11:b3:cb:1b:c8:77:60:cd:c6:bc:d4:d3:9c:46:75:47:
         92:a8:12:1a:ea:01:fc:53:40:f1:ec:90:1f:3c:3c:5a:1b:d0:
         4a:2f:df:5e:56:e2:83:52:d5:14:2f:7c:0c:ea:36:2e:39:12:
         47:92:fc:1b:c3:f6:d2:c3:9f:9c:18:94:19:21:fb:9c:4b:80:
         ab:84:25:c9:be:4f:5c:a3:4f:8f:4c:bd:a4:5e:78:3e:a4:c1:
         1f:21:9c:11:b6:70:03:88:c3:b5:71:07:93:55:f4:a9:5e:6f:
         d4:65:67:ae:46:1b:a0:09:be:e9:05:f7:75:f1:1c:17:a5:3c:
         85:94:a8:58:61:e7:b3:fc:b6:72:e6:5c:f0:0d:2d:f5:f7:b1:
         cf:be:27:8c:c1:68:e5:78:70:3b:6a:e2:db:ba:d6:22:c5:f3:
         72:48:62:6d:b9:21:f6:9b:14:42:18:36:f0:f2:5f:14:e7:62:
         09:e0:26:ca:84:74:0b:ba:6c:9f:3b:2b:d8:0d:ee:17:bb:22:
         bf:61:e5:c7:0d:c9:a8:d9:d0:5b:97:63:e5:a6:f2:cb:96:0c:
         68:1b:0e:fc:49:c7:18:1b:33:88:33:10:a4:e5:03:39:dd:eb:
         39:4c:86:b3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUD2kzMlKKPwXCYIXZm4q8/0252cEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTdBNEFGNUE1REFBOTMwMUU1NjEzNzRGMzgzNTI1OTFF
MDkzQzI3MDAeFw0yMzEyMTExNzMyMDlaFw0yNDEyMDkxNzM3MDlaMDMxMTAvBgNV
BAMTKDAzMUE1QjFGMjc5MzVBN0ZDQzA2NENDMkRERjQ3MEU4OTQyRkQ1NzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5e7i1uDZyXkG8Gzx+y7u6KT+k
Cuk3QAcrXVp9lyrLiDW5tZCVHPlHf3+dT01RmS1qDxTUJO0ytMHF/UgesayYTktY
OhDF9J1Bo9lD5jE7LfDm/teBDIXek1dC+o+fXFgtKZ9eIpCi6qeUBu6RDJrydKV9
FgVLjcVRgjerxFwn1TX6lqo3ZgGV6O8JnzjE2XmjoqfxL4IdjKZV0f5EZhhYsFK7
iQEDjGruJyp0gsX0Zb5+E2dm21nXUX3PxAOG+Us93V7grDr9DdVEe0l47WJKVpyY
K5vIaTChQ5Ig5OwuCMWs94D/lHpGZqD7IfFPhrJqs/c6YGM/zEfrjAFEHyoLAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUAxpbHyeTWn/MBkzC3fRw6JQv1XkwHwYDVR0j
BBgwFoAUl6SvWl2qkwHlYTdPODUlkeCTwnAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEVCNDVSekZnM0c0aVVpejRmdVU0cVQ4UEdvNjRSUlBMdHphTVd4ZkdV
ZlIvMC85N0E0QUY1QTVEQUE5MzAxRTU2MTM3NEYzODM1MjU5MUUwOTNDMjcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk3QTRBRjVBNURBQTkzMDFF
NTYxMzc0RjM4MzUyNTkxRTA5M0MyNzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hFQjQ1UnpGZzNHNGlVaXo0ZnVVNHFUOFBHbzY0UlJQTHR6YU1XeGZHVWZSLzAv
MzEzNzM3MmUzMzM3MmUzODMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMy
MzQzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsSVQMA0GCSqGSIb3DQEBCwUAA4IBAQCjE28O0bZB
lrIluu6Cu1ZYstp3AxGzyxvId2DNxrzU05xGdUeSqBIa6gH8U0Dx7JAfPDxaG9BK
L99eVuKDUtUUL3wM6jYuORJHkvwbw/bSw5+cGJQZIfucS4CrhCXJvk9co0+PTL2k
Xng+pMEfIZwRtnADiMO1cQeTVfSpXm/UZWeuRhugCb7pBfd18RwXpTyFlKhYYeez
/LZy5lzwDS3197HPvieMwWjleHA7auLbutYixfNySGJtuSH2mxRCGDbw8l8U52IJ
4CbKhHQLumyfOyvYDe4XuyK/YeXHDcmo2dBbl2PlpvLLlgxoGw78SccYGzOIMxCk
5QM53es5TIaz
-----END CERTIFICATE-----
Generated at Tue Dec 12 18:45:04 2023 by rpki-client on console-ams.rpki-client.org