Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e33372e37362e302f32322d3234203d3e20323632343137.roa
File:                     3137372e33372e37362e302f32322d3234203d3e20323632343137.roa (raw, json)
Hash identifier:          oUGkWjXzUpT+YPT8FZJtZAzEQ2Vkh3QtCzhQfnftW+w=
Subject key identifier:   62:04:29:17:29:E7:11:2A:94:24:4C:8A:9F:B5:65:9A:06:96:08:EE
Certificate issuer:       /CN=97A4AF5A5DAA9301E561374F38352591E093C270
Certificate serial:       7DF4A5064FCBA5CACB9BD97196E75F85C206A2FC
Authority key identifier: 97:A4:AF:5A:5D:AA:93:01:E5:61:37:4F:38:35:25:91:E0:93:C2:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97A4AF5A5DAA9301E561374F38352591E093C270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e33372e37362e302f32322d3234203d3e20323632343137.roa
Signing time:             Mon 11 Dec 2023 17:36:52 +0000
ROA not before:           Mon 11 Dec 2023 17:31:52 +0000
ROA not after:            Mon 09 Dec 2024 17:36:52 +0000
asID:                     262417
IP address blocks:        177.37.76.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:f4:a5:06:4f:cb:a5:ca:cb:9b:d9:71:96:e7:5f:85:c2:06:a2:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97A4AF5A5DAA9301E561374F38352591E093C270
        Validity
            Not Before: Dec 11 17:31:52 2023 GMT
            Not After : Dec  9 17:36:52 2024 GMT
        Subject: CN=6204291729E7112A94244C8A9FB5659A069608EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:be:c4:e5:c9:56:f1:81:44:70:8c:b2:57:04:
                    ea:6c:11:ac:3a:43:d0:1a:3f:29:7f:a8:00:fe:87:
                    0f:15:7c:f6:c8:5a:d3:53:ff:aa:2f:d0:e4:29:9d:
                    b5:ac:04:af:e1:83:3e:57:5b:73:78:f1:77:b1:f0:
                    c5:47:79:47:85:37:f7:0c:27:50:8a:56:6e:6e:93:
                    6e:ee:57:9f:c4:1a:c8:28:5f:4c:2c:62:0e:8d:8c:
                    4d:9c:21:e1:ec:28:9a:b4:d9:b9:50:d1:f8:53:54:
                    32:a4:e8:7e:29:82:64:30:7b:8c:58:74:6b:05:15:
                    ce:af:9d:9b:9e:f3:7b:e3:7d:a5:57:d7:a8:be:d8:
                    87:00:e8:cd:80:8d:59:5a:9c:15:ae:b0:c4:b7:9f:
                    0c:13:60:56:6d:28:fe:50:c7:b8:12:cf:09:df:37:
                    bf:cb:59:e3:8b:33:52:fb:80:7d:e7:31:6f:e9:f2:
                    ad:00:c2:a0:6b:25:b5:6c:20:21:82:5c:32:bb:18:
                    dd:88:38:e5:ea:94:c2:e7:12:d4:b4:d8:3b:49:68:
                    85:a4:a6:50:4b:c0:c6:48:d2:93:03:b3:b2:33:3d:
                    a5:ee:6e:09:b8:1f:95:03:07:01:e6:9f:2f:da:aa:
                    a0:69:9e:3d:27:88:75:3b:26:c3:65:22:a9:b7:6a:
                    61:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:04:29:17:29:E7:11:2A:94:24:4C:8A:9F:B5:65:9A:06:96:08:EE
            X509v3 Authority Key Identifier:
                keyid:97:A4:AF:5A:5D:AA:93:01:E5:61:37:4F:38:35:25:91:E0:93:C2:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/97A4AF5A5DAA9301E561374F38352591E093C270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97A4AF5A5DAA9301E561374F38352591E093C270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e33372e37362e302f32322d3234203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:32:32:fa:a3:7a:f0:31:a4:e1:ca:64:cf:60:18:0f:16:3f:
         64:0b:1b:d0:47:36:fc:8c:ed:e6:fa:e1:cb:3b:73:f6:f0:1c:
         e5:ab:8f:42:af:29:ff:08:fc:3c:0a:a2:2b:87:56:71:a2:d7:
         a3:1d:4e:b6:52:1a:2c:e6:0f:c1:6a:42:6a:69:a3:81:5c:c6:
         93:ff:3f:09:43:42:29:de:f1:71:11:d2:1a:07:73:3a:db:e5:
         94:70:dc:99:5a:85:c5:5a:d3:eb:d7:ac:65:c3:8b:5a:b4:b6:
         5e:1d:29:ac:ed:66:e2:bc:28:a9:14:2c:3e:b1:0d:0b:42:d3:
         83:ef:46:b6:ed:59:fe:f9:b6:4c:a1:19:24:55:b7:e2:05:6a:
         92:1b:f1:15:8c:db:b9:63:e7:58:02:e6:30:7f:4b:ee:8e:27:
         67:b1:bd:e3:25:bb:8b:52:e5:76:ec:8f:b0:b5:b7:04:8e:0f:
         93:0d:d6:1f:74:cf:6a:41:a3:07:35:20:fb:be:ae:92:fa:f0:
         79:01:dc:35:e1:93:8d:74:4a:75:93:85:04:50:b7:c9:6d:de:
         ec:c3:7f:d2:ae:86:8c:20:c0:b8:67:c8:39:aa:5e:9b:4a:19:
         e2:fb:36:c9:46:eb:bb:f7:88:86:5b:b0:eb:6c:34:e7:a8:30:
         18:03:7b:a8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUffSlBk/LpcrLm9lxludfhcIGovwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTdBNEFGNUE1REFBOTMwMUU1NjEzNzRGMzgzNTI1OTFF
MDkzQzI3MDAeFw0yMzEyMTExNzMxNTJaFw0yNDEyMDkxNzM2NTJaMDMxMTAvBgNV
BAMTKDYyMDQyOTE3MjlFNzExMkE5NDI0NEM4QTlGQjU2NTlBMDY5NjA4RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLvsTlyVbxgURwjLJXBOpsEaw6
Q9AaPyl/qAD+hw8VfPbIWtNT/6ov0OQpnbWsBK/hgz5XW3N48Xex8MVHeUeFN/cM
J1CKVm5uk27uV5/EGsgoX0wsYg6NjE2cIeHsKJq02blQ0fhTVDKk6H4pgmQwe4xY
dGsFFc6vnZue83vjfaVX16i+2IcA6M2AjVlanBWusMS3nwwTYFZtKP5Qx7gSzwnf
N7/LWeOLM1L7gH3nMW/p8q0AwqBrJbVsICGCXDK7GN2IOOXqlMLnEtS02DtJaIWk
plBLwMZI0pMDs7IzPaXubgm4H5UDBwHmny/aqqBpnj0niHU7JsNlIqm3amHxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUYgQpFynnESqUJEyKn7VlmgaWCO4wHwYDVR0j
BBgwFoAUl6SvWl2qkwHlYTdPODUlkeCTwnAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEVCNDVSekZnM0c0aVVpejRmdVU0cVQ4UEdvNjRSUlBMdHphTVd4ZkdV
ZlIvMC85N0E0QUY1QTVEQUE5MzAxRTU2MTM3NEYzODM1MjU5MUUwOTNDMjcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk3QTRBRjVBNURBQTkzMDFF
NTYxMzc0RjM4MzUyNTkxRTA5M0MyNzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hFQjQ1UnpGZzNHNGlVaXo0ZnVVNHFUOFBHbzY0UlJQTHR6YU1XeGZHVWZSLzAv
MzEzNzM3MmUzMzM3MmUzNzM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMy
MzQzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsSVMMA0GCSqGSIb3DQEBCwUAA4IBAQCjMjL6o3rw
MaThymTPYBgPFj9kCxvQRzb8jO3m+uHLO3P28Bzlq49Cryn/CPw8CqIrh1Zxotej
HU62Uhos5g/BakJqaaOBXMaT/z8JQ0Ip3vFxEdIaB3M62+WUcNyZWoXFWtPr16xl
w4tatLZeHSms7WbivCipFCw+sQ0LQtOD70a27Vn++bZMoRkkVbfiBWqSG/EVjNu5
Y+dYAuYwf0vujidnsb3jJbuLUuV27I+wtbcEjg+TDdYfdM9qQaMHNSD7vq6S+vB5
Adw14ZONdEp1k4UEULfJbd7sw3/SroaMIMC4Z8g5ql6bShni+zbJRuu794iGW7Dr
bDTnqDAYA3uo
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org