Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e33372e36342e302f32302d3234203d3e20323632343137.roa
File:                     3137372e33372e36342e302f32302d3234203d3e20323632343137.roa (raw, json)
Hash identifier:          X6tA9TZ9SMRAOQg65Od8X2nj9mW3sQOMmFJzkGm+4sg=
Subject key identifier:   36:51:4A:55:06:50:56:3C:EC:DA:DE:20:96:FF:39:31:84:5A:99:1E
Certificate issuer:       /CN=97A4AF5A5DAA9301E561374F38352591E093C270
Certificate serial:       1E7F2BBE23CA93C42A5845F5E3CF66726C8764BC
Authority key identifier: 97:A4:AF:5A:5D:AA:93:01:E5:61:37:4F:38:35:25:91:E0:93:C2:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97A4AF5A5DAA9301E561374F38352591E093C270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e33372e36342e302f32302d3234203d3e20323632343137.roa
Signing time:             Wed 13 Dec 2023 11:52:33 +0000
ROA not before:           Wed 13 Dec 2023 11:47:33 +0000
ROA not after:            Wed 11 Dec 2024 11:52:33 +0000
asID:                     262417
IP address blocks:        177.37.64.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:7f:2b:be:23:ca:93:c4:2a:58:45:f5:e3:cf:66:72:6c:87:64:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97A4AF5A5DAA9301E561374F38352591E093C270
        Validity
            Not Before: Dec 13 11:47:33 2023 GMT
            Not After : Dec 11 11:52:33 2024 GMT
        Subject: CN=36514A550650563CECDADE2096FF3931845A991E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e7:5b:57:15:ec:fe:51:5e:82:a5:31:8b:99:
                    c3:fa:d5:50:3c:78:5d:dd:dd:3f:44:47:a2:30:3e:
                    94:b6:ff:bb:83:c9:7f:f0:2f:18:fd:5e:c3:50:a6:
                    dc:c3:a4:61:b4:33:90:19:b9:ee:88:97:93:ef:4c:
                    05:78:63:75:28:1a:97:cb:27:de:12:2e:e8:d5:5f:
                    2e:18:37:b6:62:54:a6:2f:f3:f2:43:95:dd:ea:4b:
                    50:ed:c1:c7:2a:c5:c8:4e:6c:2d:9d:c5:8f:11:22:
                    7f:72:35:ae:4e:ab:e2:dc:43:25:a8:43:e8:2c:7f:
                    ce:8a:e3:d2:8c:7e:b3:b7:52:3b:4c:bc:9c:80:49:
                    14:00:d5:26:90:06:88:35:cf:be:9f:0a:98:23:ee:
                    54:f9:b5:f5:ae:d9:f3:68:87:ad:72:8e:d6:79:e3:
                    3b:37:a5:6c:3a:93:06:71:35:b7:a9:fc:4d:69:de:
                    46:b4:fe:89:9f:51:2b:df:3a:05:fd:be:16:17:4f:
                    b8:c5:b5:bd:a6:bc:4b:08:da:4c:30:c8:ea:37:bf:
                    41:f2:28:8a:35:c1:e7:4d:5b:05:9c:a6:33:61:de:
                    87:1d:0d:c2:e2:61:7a:41:a6:70:fb:8b:e4:40:2a:
                    af:e3:67:6d:63:d6:6d:b3:7f:31:05:8f:ac:33:d4:
                    35:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:51:4A:55:06:50:56:3C:EC:DA:DE:20:96:FF:39:31:84:5A:99:1E
            X509v3 Authority Key Identifier:
                keyid:97:A4:AF:5A:5D:AA:93:01:E5:61:37:4F:38:35:25:91:E0:93:C2:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/97A4AF5A5DAA9301E561374F38352591E093C270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97A4AF5A5DAA9301E561374F38352591E093C270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e33372e36342e302f32302d3234203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         80:f0:93:ed:4e:f8:95:c0:04:fe:e6:3f:f6:58:87:6d:b6:27:
         7e:bc:39:81:45:01:6f:d0:48:d1:0b:d5:1e:0c:4a:6d:86:e7:
         f9:32:89:d1:df:6e:56:6e:ea:1c:e2:3e:7e:b5:2a:ad:68:7f:
         4c:3f:76:b5:13:2f:b0:75:4f:d4:d5:63:98:89:4e:8c:6f:13:
         f9:8d:55:b2:b1:ca:73:ad:68:ca:6a:c8:1a:ca:4f:04:33:60:
         c8:5f:3d:82:e6:d3:aa:85:7a:fe:13:76:ab:86:f2:9e:27:50:
         91:ac:ef:4a:5c:cd:61:47:51:ef:45:d0:ab:00:04:c4:37:cb:
         e3:69:66:87:b3:fd:6a:f2:f4:2b:50:d0:30:e5:31:06:fe:49:
         d7:01:c5:22:56:d2:e9:30:bf:a3:46:a2:60:b2:05:55:30:26:
         6a:31:37:10:02:c6:a4:ad:46:8e:03:b5:f8:53:da:04:ad:ee:
         76:53:98:18:3b:59:9f:cc:b7:99:3e:24:2d:0f:dc:31:fc:4e:
         30:8e:85:37:24:aa:3a:e4:da:1b:55:a6:66:ef:cb:53:a9:3a:
         e6:0a:60:98:42:0f:0e:be:93:86:81:2b:32:a5:89:46:91:ac:
         40:fe:be:8c:59:27:c3:bb:02:8c:48:f3:38:6c:86:0b:48:84:
         17:74:28:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org