Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e33372e38342e302f32322d3234203d3e20323632343137.roa
File:                     3137372e33372e38342e302f32322d3234203d3e20323632343137.roa (raw, json)
Hash identifier:          64bFVgGOgA2PjHz9aMlVYP69iwun5z06hOr/WXqgQbQ=
Subject key identifier:   99:2F:26:28:C5:BB:5E:97:DA:4E:AC:A4:40:62:C3:FD:85:21:2A:72
Certificate issuer:       /CN=97A4AF5A5DAA9301E561374F38352591E093C270
Certificate serial:       71AA961BB312EB3CDE258A6E509650CEB4811274
Authority key identifier: 97:A4:AF:5A:5D:AA:93:01:E5:61:37:4F:38:35:25:91:E0:93:C2:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97A4AF5A5DAA9301E561374F38352591E093C270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e33372e38342e302f32322d3234203d3e20323632343137.roa
Signing time:             Mon 11 Dec 2023 17:37:11 +0000
ROA not before:           Mon 11 Dec 2023 17:32:11 +0000
ROA not after:            Mon 09 Dec 2024 17:37:11 +0000
asID:                     262417
IP address blocks:        177.37.84.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:aa:96:1b:b3:12:eb:3c:de:25:8a:6e:50:96:50:ce:b4:81:12:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97A4AF5A5DAA9301E561374F38352591E093C270
        Validity
            Not Before: Dec 11 17:32:11 2023 GMT
            Not After : Dec  9 17:37:11 2024 GMT
        Subject: CN=992F2628C5BB5E97DA4EACA44062C3FD85212A72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9d:d4:14:08:f4:32:58:83:97:47:97:2a:4f:
                    f0:06:52:03:82:e3:aa:5f:3a:b2:28:67:ea:d2:53:
                    e0:e6:24:37:ec:a8:88:1c:a7:6a:87:f6:7e:01:e7:
                    49:49:31:22:a5:2e:47:b3:ea:65:89:62:cf:47:ff:
                    00:76:62:bb:60:e4:57:16:6f:9f:3e:df:f8:89:3d:
                    cd:61:12:d6:4e:fe:16:7d:54:31:90:55:d7:dc:e2:
                    55:a0:77:59:b7:be:dd:b2:ee:69:e7:6f:ff:e5:38:
                    61:a8:ea:8b:76:cf:89:21:58:ac:cd:c3:c3:e1:f0:
                    3f:99:22:8f:8a:be:ab:37:01:93:21:ed:18:09:da:
                    b2:88:f9:02:3b:26:20:98:11:06:3b:1e:81:30:b5:
                    55:ce:53:5f:22:3c:74:80:fb:f5:9f:87:f6:b9:57:
                    3a:5b:dc:ce:ea:d8:89:1f:8c:22:22:18:2a:9c:75:
                    8a:7e:e5:38:80:07:ff:ab:d7:57:35:7c:bd:c2:ff:
                    16:6f:b8:c7:db:6a:4a:b6:10:3a:bd:2d:c6:e4:d4:
                    8d:79:ff:71:7c:e9:f4:5d:42:d6:3a:bd:a1:af:29:
                    6b:ec:f1:68:64:45:e7:de:e4:69:64:ee:4e:98:43:
                    11:9b:6c:d7:40:f3:b6:23:9f:2e:eb:73:7d:0a:c4:
                    b3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:2F:26:28:C5:BB:5E:97:DA:4E:AC:A4:40:62:C3:FD:85:21:2A:72
            X509v3 Authority Key Identifier:
                keyid:97:A4:AF:5A:5D:AA:93:01:E5:61:37:4F:38:35:25:91:E0:93:C2:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/97A4AF5A5DAA9301E561374F38352591E093C270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97A4AF5A5DAA9301E561374F38352591E093C270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e33372e38342e302f32322d3234203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:1a:38:d9:f3:62:61:05:ee:f9:cf:ed:cf:13:f7:0d:d1:88:
         91:2e:22:39:4d:ef:06:4e:c2:1f:8f:a6:8d:d3:df:e2:25:9a:
         15:b3:2c:ec:0a:f9:77:61:97:51:67:f5:ea:7a:00:c8:8f:f5:
         c7:0e:e7:e0:20:4a:0e:14:3c:7e:79:3d:67:f2:d9:de:53:66:
         61:df:7c:52:a8:c2:ba:f0:6a:42:64:14:90:65:37:8b:15:2a:
         dd:6b:30:82:5c:2f:d3:d3:8a:11:66:33:e9:57:61:3b:4d:d0:
         b3:31:46:fa:33:a4:b7:1e:0a:e1:e1:9c:e5:c9:9e:1e:24:3c:
         5a:5a:41:ed:be:16:87:49:4c:5a:f3:67:a4:16:1a:0d:49:96:
         26:df:9b:4d:75:9f:54:b1:80:ac:ec:16:c8:5b:f4:a1:60:87:
         7c:77:2b:92:c3:4c:5b:b1:7c:64:3d:f3:ce:33:ed:48:47:08:
         91:fb:cd:a4:92:45:c6:cf:d7:c4:1f:81:68:44:3c:6c:75:94:
         bf:f7:5e:5f:97:59:20:7a:db:7f:84:c3:45:57:c1:b5:ef:61:
         2c:7d:c6:0f:8c:d1:12:38:cb:ad:5c:b6:ed:76:47:4b:ed:8d:
         24:fc:00:ea:d4:1c:04:c3:7d:95:9b:61:96:5e:85:d5:ce:20:
         16:b6:c2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org