Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e33372e36382e302f32322d3234203d3e20323632343137.roa
File:                     3137372e33372e36382e302f32322d3234203d3e20323632343137.roa (raw, json)
Hash identifier:          DPx2bKVCaXwSLES/rLvNws+Z0LDBpE5i0IhQveRu4jg=
Subject key identifier:   3B:06:F3:0D:6F:6A:91:7C:67:D0:9D:11:EF:DA:99:C4:2C:02:FC:D8
Certificate issuer:       /CN=97A4AF5A5DAA9301E561374F38352591E093C270
Certificate serial:       309020AA16329BED747445FB83B3112CAB284E4A
Authority key identifier: 97:A4:AF:5A:5D:AA:93:01:E5:61:37:4F:38:35:25:91:E0:93:C2:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97A4AF5A5DAA9301E561374F38352591E093C270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e33372e36382e302f32322d3234203d3e20323632343137.roa
Signing time:             Mon 11 Dec 2023 17:36:45 +0000
ROA not before:           Mon 11 Dec 2023 17:31:45 +0000
ROA not after:            Mon 09 Dec 2024 17:36:45 +0000
asID:                     262417
IP address blocks:        177.37.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:90:20:aa:16:32:9b:ed:74:74:45:fb:83:b3:11:2c:ab:28:4e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97A4AF5A5DAA9301E561374F38352591E093C270
        Validity
            Not Before: Dec 11 17:31:45 2023 GMT
            Not After : Dec  9 17:36:45 2024 GMT
        Subject: CN=3B06F30D6F6A917C67D09D11EFDA99C42C02FCD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:e7:39:3c:95:32:f1:83:99:67:cf:ad:b2:d3:
                    27:9c:8b:f3:aa:8e:85:7d:e7:03:8a:2d:70:86:cf:
                    60:f3:2d:11:74:06:21:18:14:7b:a2:f6:54:e7:54:
                    42:24:62:54:03:d7:b9:07:a1:87:53:fd:e4:22:2b:
                    e9:2e:2c:ca:47:14:f4:25:73:a5:67:14:1c:dd:c4:
                    55:4e:cb:e3:23:a2:fc:0c:c6:af:93:a3:b7:38:4b:
                    c0:fe:fb:d1:fc:eb:28:de:36:72:2d:f6:40:04:86:
                    5f:d6:86:53:63:2f:d9:8d:82:79:56:1b:b9:17:8d:
                    5b:4a:e6:b4:5b:ef:9b:3b:f8:e1:50:34:f9:94:be:
                    54:eb:49:7a:a2:5d:40:7a:18:70:af:1a:8c:cf:f0:
                    85:fb:ba:65:05:27:d1:ce:eb:cf:2b:94:93:71:af:
                    9d:5b:c7:93:ca:1d:1a:c1:64:8d:4f:fa:d3:74:90:
                    89:fb:01:d7:d1:40:31:21:1e:16:d4:c8:13:62:c0:
                    98:d9:d0:e3:4a:f2:2b:bc:e0:bb:0f:e9:1a:9d:2b:
                    92:42:00:b1:d1:88:3c:03:db:3a:c8:56:2c:59:13:
                    3a:55:79:eb:24:7b:09:7f:e4:f9:e4:2b:11:4d:a8:
                    46:e2:47:58:c1:ce:3d:d2:06:61:65:21:fb:db:7c:
                    e8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:06:F3:0D:6F:6A:91:7C:67:D0:9D:11:EF:DA:99:C4:2C:02:FC:D8
            X509v3 Authority Key Identifier:
                keyid:97:A4:AF:5A:5D:AA:93:01:E5:61:37:4F:38:35:25:91:E0:93:C2:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/97A4AF5A5DAA9301E561374F38352591E093C270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97A4AF5A5DAA9301E561374F38352591E093C270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e33372e36382e302f32322d3234203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:5c:fe:f3:62:07:df:db:89:19:f0:44:58:d6:80:fe:e3:d8:
         5e:f5:b0:19:26:ac:81:e8:47:47:56:25:47:9e:32:48:ae:f4:
         92:8a:cb:d4:4b:bf:f4:44:53:69:4c:1e:f7:80:a7:8d:b2:88:
         2e:5c:ad:a7:05:49:94:49:b9:44:68:45:e8:83:41:4f:c8:57:
         4e:0c:c6:c0:c3:6f:16:5a:f7:6f:f6:fc:e3:63:1d:82:93:75:
         14:a3:11:c4:86:4c:d8:d5:87:dd:2a:6c:90:60:5f:93:04:d4:
         60:91:1a:e5:9e:dc:e6:5e:d4:22:40:da:71:a2:2d:32:61:42:
         04:19:d8:4b:70:2a:f5:26:a2:e8:5d:ed:d9:02:9b:fc:2c:a8:
         43:f1:f7:5e:56:66:2a:de:cc:3f:c1:7b:0b:44:be:42:3b:0f:
         13:47:e4:1a:db:d5:04:ea:4c:93:ee:e8:d0:b7:c5:f6:85:ae:
         1b:84:8d:f2:3a:f7:7c:da:e5:e7:3c:82:49:66:c0:17:f0:3a:
         17:16:52:fe:cf:58:f0:84:6b:38:d8:63:11:db:5d:8d:0f:aa:
         0b:3c:e0:c2:d8:5e:57:82:de:cb:8a:4c:75:b5:9e:5b:ea:ed:
         f7:33:b5:c7:5a:bf:5b:dd:69:90:c7:60:83:8f:63:05:d1:a5:
         1b:b5:ba:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org