Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e33372e36342e302f31392d3234203d3e20323632343137.roa
File:                     3137372e33372e36342e302f31392d3234203d3e20323632343137.roa (raw, json)
Hash identifier:          WJVCLDSjS/M4fbjyy7OpSxcyiRHuOrhrlEyudfvWZvM=
Subject key identifier:   86:6B:CD:05:EA:28:CE:1A:F0:F5:A4:4D:3F:F5:76:7E:2D:B8:8E:3E
Certificate issuer:       /CN=EB846310FC1F1BA82FBB3923B2F76ED66DA86097
Certificate serial:       0414C9ED7038D35DF70ACD2BFCBD4A54FFC52138
Authority key identifier: EB:84:63:10:FC:1F:1B:A8:2F:BB:39:23:B2:F7:6E:D6:6D:A8:60:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB846310FC1F1BA82FBB3923B2F76ED66DA86097.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e33372e36342e302f31392d3234203d3e20323632343137.roa
Signing time:             Fri 23 Aug 2024 16:14:58 +0000
ROA not before:           Fri 23 Aug 2024 16:09:58 +0000
ROA not after:            Fri 22 Aug 2025 16:14:58 +0000
asID:                     262417
IP address blocks:        177.37.64.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:14:c9:ed:70:38:d3:5d:f7:0a:cd:2b:fc:bd:4a:54:ff:c5:21:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB846310FC1F1BA82FBB3923B2F76ED66DA86097
        Validity
            Not Before: Aug 23 16:09:58 2024 GMT
            Not After : Aug 22 16:14:58 2025 GMT
        Subject: CN=866BCD05EA28CE1AF0F5A44D3FF5767E2DB88E3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:45:df:07:e6:91:f5:f9:67:a9:ce:5d:4a:7a:
                    38:7c:1d:14:2d:9e:a6:50:34:ff:61:a9:7b:b6:67:
                    d6:e1:ad:8a:53:87:8f:7a:7f:39:d2:d8:10:c4:36:
                    a5:82:33:10:fa:4c:27:66:16:7e:64:b2:0d:c1:d4:
                    f0:a7:ff:21:d4:af:36:67:ff:5f:dc:b9:02:8e:72:
                    bc:c0:2d:11:36:80:fd:6b:5d:ef:20:70:58:ef:11:
                    79:73:1d:80:cf:88:25:af:7c:2c:0e:72:88:b6:b8:
                    b0:ac:68:72:74:a4:80:70:e8:39:5e:88:5b:6b:0d:
                    db:4e:8f:0b:ff:92:67:77:a2:c5:01:cc:65:c3:e6:
                    1c:81:8c:fb:30:80:34:49:99:9e:26:56:4d:29:ce:
                    e2:ab:51:64:33:1b:b6:5e:26:b6:48:1b:83:e8:b6:
                    45:63:3a:39:9e:df:01:e2:66:8c:69:12:16:73:45:
                    e3:94:cb:13:44:23:de:5e:8d:55:fb:f9:ff:5d:6d:
                    bb:60:38:c8:d4:95:bf:93:37:96:d8:31:ba:17:9a:
                    c7:f4:4f:e9:22:c2:cc:74:ed:2b:b7:fc:ad:8c:68:
                    6e:d3:0f:e6:ad:d2:88:26:ab:ea:5f:f0:92:67:97:
                    a2:fe:81:e2:9d:ef:75:a1:35:5b:14:b0:fb:b8:ae:
                    22:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:6B:CD:05:EA:28:CE:1A:F0:F5:A4:4D:3F:F5:76:7E:2D:B8:8E:3E
            X509v3 Authority Key Identifier:
                keyid:EB:84:63:10:FC:1F:1B:A8:2F:BB:39:23:B2:F7:6E:D6:6D:A8:60:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/EB846310FC1F1BA82FBB3923B2F76ED66DA86097.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB846310FC1F1BA82FBB3923B2F76ED66DA86097.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e33372e36342e302f31392d3234203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         83:32:b4:32:c0:7a:bb:45:c9:ae:62:4b:07:ba:87:6b:23:16:
         41:18:c9:33:53:e5:d3:90:07:bb:df:50:35:5f:11:ff:ea:81:
         56:13:d6:4f:58:2f:07:1d:92:37:94:9f:43:7b:1b:65:93:b7:
         47:40:cb:a7:c2:72:af:2c:45:c2:fb:4a:21:92:ae:22:14:50:
         63:66:5f:77:9a:86:7b:79:b3:21:6a:b1:c7:e5:0e:5b:a0:ca:
         c5:07:62:d5:e9:66:ed:ec:d0:a0:8e:13:2d:94:17:fa:cf:58:
         1b:1c:49:1b:09:81:22:4a:62:90:07:c3:be:a1:4e:1f:b3:d1:
         46:aa:83:d8:88:0d:f1:f8:a6:c1:d7:e3:e2:d3:e8:c2:dd:18:
         34:0a:98:f5:0a:05:e1:4f:a1:e1:fc:65:10:71:6c:3c:9f:87:
         dd:dc:5a:99:aa:c4:67:b1:74:b2:00:19:05:17:43:21:89:17:
         33:9c:e2:aa:06:17:bf:6b:b1:3d:cd:01:71:e4:59:ac:6d:50:
         d0:18:8a:98:93:f7:e9:6c:00:22:9d:11:3e:62:3f:0d:22:bd:
         de:e2:83:0d:50:11:2c:6b:65:0d:84:83:61:71:1f:94:fe:e8:
         e8:cc:1d:c3:50:ff:0f:0f:e2:e6:b6:ec:22:48:b2:51:3e:1d:
         67:f1:7c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:30 2025 by rpki-client