Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e33372e37322e302f32322d3234203d3e20323632343137.roa
File:                     3137372e33372e37322e302f32322d3234203d3e20323632343137.roa (raw, json)
Hash identifier:          we2Afou8HPEbO4uY7K1zLD8E8u6TfZGE3zERSJI7uAY=
Subject key identifier:   71:06:0A:67:22:BF:A7:10:8B:AD:A5:B1:78:C4:4E:C2:61:45:29:AD
Certificate issuer:       /CN=97A4AF5A5DAA9301E561374F38352591E093C270
Certificate serial:       2F200E2C9162827384DD9DD606259ABCC59C931F
Authority key identifier: 97:A4:AF:5A:5D:AA:93:01:E5:61:37:4F:38:35:25:91:E0:93:C2:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97A4AF5A5DAA9301E561374F38352591E093C270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e33372e37322e302f32322d3234203d3e20323632343137.roa
Signing time:             Mon 11 Dec 2023 17:36:48 +0000
ROA not before:           Mon 11 Dec 2023 17:31:48 +0000
ROA not after:            Mon 09 Dec 2024 17:36:48 +0000
asID:                     262417
IP address blocks:        177.37.72.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:20:0e:2c:91:62:82:73:84:dd:9d:d6:06:25:9a:bc:c5:9c:93:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97A4AF5A5DAA9301E561374F38352591E093C270
        Validity
            Not Before: Dec 11 17:31:48 2023 GMT
            Not After : Dec  9 17:36:48 2024 GMT
        Subject: CN=71060A6722BFA7108BADA5B178C44EC2614529AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:82:28:48:2d:91:69:cf:cd:22:8c:01:bb:84:
                    b9:01:4a:22:bd:42:0f:6d:9c:b3:9f:22:3f:bb:88:
                    79:ce:5f:1d:e8:ef:40:17:dd:66:32:84:07:ee:f2:
                    dd:ab:53:ab:e8:e8:ad:12:9a:d5:19:54:7d:8e:ee:
                    48:1c:33:54:18:16:77:1b:c0:48:de:8b:0b:73:62:
                    ca:be:83:d9:87:a7:36:8b:67:8d:e2:ae:af:51:d6:
                    2c:e9:48:a6:85:9f:e1:ae:e8:00:fc:d7:e6:33:ae:
                    38:ef:6f:97:fc:1b:23:1f:96:3e:72:02:0b:22:97:
                    89:b4:d6:f7:dc:c5:33:95:45:ab:22:2f:7f:41:d6:
                    57:30:58:a9:c1:32:ae:eb:60:62:45:cb:fb:a3:67:
                    04:ce:e9:67:24:5b:8e:f3:fd:0d:b3:bd:c4:b9:e6:
                    e3:aa:39:d6:87:24:52:b4:5d:0c:ca:0b:a8:15:c1:
                    0c:1f:3d:05:74:09:b6:b8:28:66:07:01:1a:c4:e7:
                    f9:8f:34:64:86:66:e2:86:a6:54:31:8d:a1:2e:aa:
                    78:03:ef:67:87:cd:e4:8a:0d:ed:2d:ff:e1:df:fe:
                    b5:99:5b:1b:93:58:84:59:bb:8d:60:87:16:b5:83:
                    dc:d5:26:b6:75:d1:ad:88:8f:03:28:46:68:ae:08:
                    1c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:06:0A:67:22:BF:A7:10:8B:AD:A5:B1:78:C4:4E:C2:61:45:29:AD
            X509v3 Authority Key Identifier:
                keyid:97:A4:AF:5A:5D:AA:93:01:E5:61:37:4F:38:35:25:91:E0:93:C2:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/97A4AF5A5DAA9301E561374F38352591E093C270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97A4AF5A5DAA9301E561374F38352591E093C270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e33372e37322e302f32322d3234203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:7f:cb:22:75:d2:10:21:ed:f7:82:c7:a9:be:d1:22:57:0b:
         c9:4a:3d:10:33:fe:91:fa:63:d7:1c:fa:89:00:fd:e4:89:82:
         38:10:31:0e:81:c5:09:88:ec:19:83:f0:fe:bd:39:61:c4:fe:
         66:0b:33:a6:79:3f:51:c4:e9:53:0e:9d:19:d2:40:7e:47:66:
         f6:79:65:95:8b:c4:f4:59:83:9d:f0:8b:f3:bf:e0:6e:cf:9f:
         aa:dc:12:a9:95:17:c4:39:02:6e:d7:4a:4a:2f:f8:a1:19:70:
         8a:2c:2f:84:15:14:33:c4:a5:43:c1:93:6b:13:85:69:3a:9d:
         6c:27:c7:a5:dd:57:0a:a1:ad:2c:db:bc:56:27:8f:e8:90:ae:
         54:97:ab:68:14:31:cf:3d:93:8b:fc:dd:11:d0:b1:f6:e0:78:
         48:72:08:b9:a6:78:03:ff:5a:17:d7:48:d0:f4:b3:95:3a:82:
         b1:ee:ff:a8:cc:62:70:09:3f:c6:b8:f6:71:70:d0:d8:57:be:
         d9:f3:00:ae:99:2a:f9:84:ea:00:28:81:d3:5d:0c:dc:cb:ca:
         86:c0:0a:04:b2:ac:9a:c9:37:6a:01:d5:a9:02:7e:fe:11:c2:
         58:23:19:4d:dd:b8:76:f0:3d:25:47:c5:54:29:0a:97:56:33:
         03:97:e1:0d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULyAOLJFignOE3Z3WBiWavMWckx8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTdBNEFGNUE1REFBOTMwMUU1NjEzNzRGMzgzNTI1OTFF
MDkzQzI3MDAeFw0yMzEyMTExNzMxNDhaFw0yNDEyMDkxNzM2NDhaMDMxMTAvBgNV
BAMTKDcxMDYwQTY3MjJCRkE3MTA4QkFEQTVCMTc4QzQ0RUMyNjE0NTI5QUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkgihILZFpz80ijAG7hLkBSiK9
Qg9tnLOfIj+7iHnOXx3o70AX3WYyhAfu8t2rU6vo6K0SmtUZVH2O7kgcM1QYFncb
wEjeiwtzYsq+g9mHpzaLZ43irq9R1izpSKaFn+Gu6AD81+Yzrjjvb5f8GyMflj5y
Agsil4m01vfcxTOVRasiL39B1lcwWKnBMq7rYGJFy/ujZwTO6WckW47z/Q2zvcS5
5uOqOdaHJFK0XQzKC6gVwQwfPQV0Cba4KGYHARrE5/mPNGSGZuKGplQxjaEuqngD
72eHzeSKDe0t/+Hf/rWZWxuTWIRZu41ghxa1g9zVJrZ10a2IjwMoRmiuCBxXAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUcQYKZyK/pxCLraWxeMROwmFFKa0wHwYDVR0j
BBgwFoAUl6SvWl2qkwHlYTdPODUlkeCTwnAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEVCNDVSekZnM0c0aVVpejRmdVU0cVQ4UEdvNjRSUlBMdHphTVd4ZkdV
ZlIvMC85N0E0QUY1QTVEQUE5MzAxRTU2MTM3NEYzODM1MjU5MUUwOTNDMjcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk3QTRBRjVBNURBQTkzMDFF
NTYxMzc0RjM4MzUyNTkxRTA5M0MyNzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hFQjQ1UnpGZzNHNGlVaXo0ZnVVNHFUOFBHbzY0UlJQTHR6YU1XeGZHVWZSLzAv
MzEzNzM3MmUzMzM3MmUzNzMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMy
MzQzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsSVIMA0GCSqGSIb3DQEBCwUAA4IBAQCdf8siddIQ
Ie33gsepvtEiVwvJSj0QM/6R+mPXHPqJAP3kiYI4EDEOgcUJiOwZg/D+vTlhxP5m
CzOmeT9RxOlTDp0Z0kB+R2b2eWWVi8T0WYOd8Ivzv+Buz5+q3BKplRfEOQJu10pK
L/ihGXCKLC+EFRQzxKVDwZNrE4VpOp1sJ8el3VcKoa0s27xWJ4/okK5Ul6toFDHP
PZOL/N0R0LH24HhIcgi5pngD/1oX10jQ9LOVOoKx7v+ozGJwCT/GuPZxcNDYV77Z
8wCumSr5hOoAKIHTXQzcy8qGwAoEsqyayTdqAdWpAn7+EcJYIxlN3bh28D0lR8VU
KQqXVjMDl+EN
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org