Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e33372e36342e302f32322d3234203d3e20323632343137.roa
File:                     3137372e33372e36342e302f32322d3234203d3e20323632343137.roa (raw, json)
Hash identifier:          EEP2+GoSfs9u9RxSS0Jj0spe2RW42KFzc2/80z4OpnY=
Subject key identifier:   F4:43:0D:29:71:AF:9D:6E:6A:B3:4A:4D:88:89:DD:68:69:CA:07:26
Certificate issuer:       /CN=97A4AF5A5DAA9301E561374F38352591E093C270
Certificate serial:       72B446B9BB7239434BCAF85C0B38E676D028D9C3
Authority key identifier: 97:A4:AF:5A:5D:AA:93:01:E5:61:37:4F:38:35:25:91:E0:93:C2:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97A4AF5A5DAA9301E561374F38352591E093C270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e33372e36342e302f32322d3234203d3e20323632343137.roa
Signing time:             Mon 11 Dec 2023 17:36:42 +0000
ROA not before:           Mon 11 Dec 2023 17:31:42 +0000
ROA not after:            Mon 09 Dec 2024 17:36:42 +0000
asID:                     262417
IP address blocks:        177.37.64.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:b4:46:b9:bb:72:39:43:4b:ca:f8:5c:0b:38:e6:76:d0:28:d9:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97A4AF5A5DAA9301E561374F38352591E093C270
        Validity
            Not Before: Dec 11 17:31:42 2023 GMT
            Not After : Dec  9 17:36:42 2024 GMT
        Subject: CN=F4430D2971AF9D6E6AB34A4D8889DD6869CA0726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6f:41:b9:b5:8a:f5:b9:7c:c7:eb:d9:bc:82:
                    86:21:c2:7c:d5:ea:8f:7a:af:85:d7:a3:02:8c:07:
                    62:4d:7a:14:4e:09:21:66:e4:12:82:94:c2:21:c5:
                    51:db:46:b6:59:a0:3f:b7:9c:ed:f7:63:7d:08:7e:
                    c3:8d:64:eb:3a:a1:41:ba:fc:03:f0:8b:6f:3c:70:
                    bd:d7:b6:cf:4b:8c:cc:46:87:37:d9:d6:3f:f6:9d:
                    e4:e9:12:f0:5b:33:ff:5c:80:f6:05:54:5a:e0:ac:
                    b1:0e:8e:b9:68:75:10:d6:02:39:39:1b:24:12:9d:
                    7c:0b:82:41:e9:42:62:b4:3f:d9:e0:c3:48:01:11:
                    16:5c:9f:15:71:e3:12:87:84:f1:54:f1:fb:89:f4:
                    cc:57:85:bf:fb:13:32:d6:b9:db:48:a0:43:14:b4:
                    bd:68:f0:97:68:87:6e:c5:1a:c7:93:03:0b:03:c4:
                    a8:d8:cc:c9:b4:11:f4:f9:0f:82:78:de:a1:89:fa:
                    05:78:c3:a8:f5:08:69:28:d1:1d:a2:3f:cd:c4:fc:
                    99:9e:5c:3f:38:44:2d:bf:bf:03:ff:d3:d5:35:20:
                    bf:af:93:0e:8f:ab:12:a5:43:02:8b:e5:04:7b:55:
                    c6:cf:1e:0b:59:65:09:83:c8:24:30:6f:c6:18:91:
                    b2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:43:0D:29:71:AF:9D:6E:6A:B3:4A:4D:88:89:DD:68:69:CA:07:26
            X509v3 Authority Key Identifier:
                keyid:97:A4:AF:5A:5D:AA:93:01:E5:61:37:4F:38:35:25:91:E0:93:C2:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/97A4AF5A5DAA9301E561374F38352591E093C270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97A4AF5A5DAA9301E561374F38352591E093C270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e33372e36342e302f32322d3234203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:43:20:f3:c7:e3:13:b8:4d:79:c9:b7:78:f2:a2:ee:7c:9d:
         13:b8:d1:8e:0f:72:a5:79:ee:df:b4:4d:6b:4e:d8:19:f5:45:
         f4:07:32:03:eb:26:8c:02:27:94:20:a9:eb:15:f5:a2:31:a5:
         9e:fc:4d:fd:c0:4e:50:2f:57:3e:61:71:3d:01:92:d7:3e:5a:
         e1:9f:6b:66:06:47:04:f6:a6:56:72:04:da:af:4e:5b:56:55:
         ba:31:ff:f7:b3:3b:a7:1b:0a:7c:a2:13:aa:65:08:8c:bc:d6:
         3f:7d:6f:18:a1:0c:05:8b:25:35:4f:17:d5:30:6e:71:d3:15:
         3b:c8:78:2e:a1:52:81:6c:fe:34:ea:47:f3:9f:80:36:42:a8:
         eb:2c:08:ce:5f:51:7a:dd:cf:10:55:49:1a:ee:c0:2d:f2:fa:
         4b:3e:e7:9d:c9:e9:88:03:01:42:2e:e4:24:68:29:ce:32:73:
         fb:99:08:a3:e5:4b:c8:ca:86:94:09:13:12:a4:dd:79:a8:45:
         6c:5d:9b:74:62:b1:f6:9d:e8:46:f2:61:fe:32:65:1c:36:7b:
         fa:b3:4b:ab:32:b8:a8:31:c3:6c:c8:e0:bb:06:75:96:6b:0a:
         66:8c:ae:23:f3:b9:e5:a3:e7:3e:c1:ed:61:bc:71:d6:55:2e:
         ed:d8:0f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org