Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e33372e36342e302f31392d3234203d3e20323632343137.roa
File:                     3137372e33372e36342e302f31392d3234203d3e20323632343137.roa (raw, json)
Hash identifier:          9u0nhTsZNHJLScYDHt2NqwbYJz63Vl6ZuKrFx9qeUHI=
Subject key identifier:   2B:C4:CE:7B:5E:13:B3:3F:1F:28:9D:BC:A3:C8:68:A4:B9:45:7B:C2
Certificate issuer:       /CN=40209EB56DBE9B90721379291AA6F10A592354FB
Certificate serial:       45920147EF28C63E9CBCB7787D8998EC642DABAC
Authority key identifier: 40:20:9E:B5:6D:BE:9B:90:72:13:79:29:1A:A6:F1:0A:59:23:54:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40209EB56DBE9B90721379291AA6F10A592354FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e33372e36342e302f31392d3234203d3e20323632343137.roa
Signing time:             Tue 02 Apr 2024 14:24:03 +0000
ROA not before:           Tue 02 Apr 2024 14:19:03 +0000
ROA not after:            Tue 01 Apr 2025 14:24:03 +0000
asID:                     262417
IP address blocks:        177.37.64.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:92:01:47:ef:28:c6:3e:9c:bc:b7:78:7d:89:98:ec:64:2d:ab:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40209EB56DBE9B90721379291AA6F10A592354FB
        Validity
            Not Before: Apr  2 14:19:03 2024 GMT
            Not After : Apr  1 14:24:03 2025 GMT
        Subject: CN=2BC4CE7B5E13B33F1F289DBCA3C868A4B9457BC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:11:e1:23:0b:1c:98:e3:1e:34:6a:c7:14:c4:
                    14:c2:da:1e:d0:40:6f:0f:d5:8f:14:5e:43:c7:6a:
                    4e:4a:58:71:86:ae:92:bb:81:03:32:81:63:e5:ce:
                    e6:40:25:4a:24:21:86:fa:1f:c8:f1:c3:f1:c8:91:
                    d8:ae:f2:f7:24:af:40:97:51:97:a0:cf:46:bb:3e:
                    d5:30:78:52:a3:33:e7:18:7c:5f:23:a6:5d:5c:4c:
                    33:d9:33:45:12:14:24:78:fd:5b:ac:c5:67:8f:d7:
                    bc:99:33:90:9e:6c:aa:75:60:fa:8f:75:e2:e9:89:
                    48:41:4b:5f:e3:77:6f:10:05:74:07:5a:4f:59:9d:
                    0f:42:60:74:87:2f:f8:6e:dc:cf:5f:ca:e5:64:f6:
                    cd:55:fa:c9:e1:5e:8c:27:06:30:71:7b:a8:97:1c:
                    b3:c4:3e:9b:4a:ac:2b:fd:b0:7e:16:34:a6:4c:ab:
                    11:e7:f1:e6:a5:9f:91:be:61:e4:c2:32:30:15:42:
                    de:eb:94:0d:8e:99:ec:6c:02:d7:c7:16:b7:76:6b:
                    aa:4b:dd:0a:89:b4:69:86:ac:05:b6:69:e1:9b:91:
                    10:7e:a1:4a:e1:78:7f:95:16:f8:a8:df:a8:0c:68:
                    f9:7b:78:9c:e8:3d:19:02:e6:c0:51:8d:90:ed:85:
                    2b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C4:CE:7B:5E:13:B3:3F:1F:28:9D:BC:A3:C8:68:A4:B9:45:7B:C2
            X509v3 Authority Key Identifier:
                keyid:40:20:9E:B5:6D:BE:9B:90:72:13:79:29:1A:A6:F1:0A:59:23:54:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/40209EB56DBE9B90721379291AA6F10A592354FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40209EB56DBE9B90721379291AA6F10A592354FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e33372e36342e302f31392d3234203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         70:ea:69:e4:0b:82:e9:77:b2:0e:ba:7f:61:22:d1:59:96:7d:
         7d:70:66:71:e1:62:6e:93:04:3e:11:56:b2:51:14:65:3a:17:
         87:3c:0a:65:84:2d:1f:d6:25:cd:93:eb:aa:f1:fd:b1:68:e7:
         41:7c:59:7b:36:36:42:5a:b8:89:08:8c:f3:23:ac:03:cb:58:
         22:39:cf:2c:00:4a:95:1d:bb:55:0a:54:6a:15:54:a5:2a:d5:
         5b:1d:d8:a8:29:3b:e0:21:2b:85:5f:b3:5d:bb:3e:46:e5:08:
         a2:6f:78:a3:1e:41:b5:34:fd:16:54:8a:ed:e1:77:1a:5d:08:
         58:5d:cb:e1:28:ae:ce:e4:3d:be:d6:eb:d4:0d:95:a7:b7:ea:
         f3:96:41:16:19:13:a5:35:5d:34:84:fa:b7:7e:33:48:91:fb:
         93:a7:8f:55:c8:9a:8e:b0:04:ff:4e:eb:30:73:aa:b8:10:74:
         c2:e7:d8:9e:0c:5d:09:c9:ce:3d:ae:44:a1:1a:af:49:2c:ca:
         48:50:40:a0:2f:1b:15:fa:f8:d4:6e:83:3e:98:b6:3c:be:89:
         72:84:f4:b1:66:d0:65:8d:9f:c2:31:6e:12:9c:cf:d1:8a:ae:
         07:9f:ad:a1:05:79:c2:17:11:10:01:06:6b:30:17:33:22:95:
         33:c5:da:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org