Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e33372e38382e302f32312d3234203d3e20323632343137.roa
File:                     3137372e33372e38382e302f32312d3234203d3e20323632343137.roa (raw, json)
Hash identifier:          IRreX0f62V9g70qofqzNKW1RxfyDpKO2pntFu/t5t04=
Subject key identifier:   54:57:EB:6F:0C:00:32:8B:9F:BE:C5:7A:50:74:E8:E9:62:42:63:4B
Certificate issuer:       /CN=97A4AF5A5DAA9301E561374F38352591E093C270
Certificate serial:       4E73D108E083667F469850E17D4AEE64C4F21DE3
Authority key identifier: 97:A4:AF:5A:5D:AA:93:01:E5:61:37:4F:38:35:25:91:E0:93:C2:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97A4AF5A5DAA9301E561374F38352591E093C270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e33372e38382e302f32312d3234203d3e20323632343137.roa
Signing time:             Wed 13 Dec 2023 11:49:36 +0000
ROA not before:           Wed 13 Dec 2023 11:44:36 +0000
ROA not after:            Wed 11 Dec 2024 11:49:36 +0000
asID:                     262417
IP address blocks:        177.37.88.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:73:d1:08:e0:83:66:7f:46:98:50:e1:7d:4a:ee:64:c4:f2:1d:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97A4AF5A5DAA9301E561374F38352591E093C270
        Validity
            Not Before: Dec 13 11:44:36 2023 GMT
            Not After : Dec 11 11:49:36 2024 GMT
        Subject: CN=5457EB6F0C00328B9FBEC57A5074E8E96242634B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f2:c4:64:18:f0:18:5d:d8:7d:c4:04:22:31:
                    fb:7c:f2:19:9e:3f:ea:61:cd:38:8a:8b:d0:63:60:
                    bc:1f:33:45:f4:c0:9f:48:dd:14:5a:b3:6c:c4:03:
                    2c:ce:f2:86:36:76:5a:ee:ea:c6:51:cf:dc:43:95:
                    a7:a7:e8:d5:5b:91:36:35:af:ae:ce:20:df:b5:67:
                    73:e5:36:42:8f:f3:17:8f:b9:3d:a2:12:aa:a7:98:
                    59:07:22:0d:a0:87:79:1c:28:61:f8:34:06:ff:a4:
                    ab:98:c9:0c:e9:bd:8a:4b:b2:58:4b:46:33:1e:46:
                    d8:68:33:a5:2e:30:4c:30:a6:67:49:2d:97:e2:77:
                    7d:6c:e3:c8:28:de:c2:63:2f:f6:90:64:11:c2:98:
                    88:79:61:57:ce:52:38:43:ee:60:87:01:ca:a5:db:
                    91:5a:24:db:09:f5:01:df:2a:1c:87:72:63:0b:b4:
                    ae:dd:b8:6c:a5:4b:72:f4:8e:89:eb:6c:41:b6:23:
                    93:9c:45:6d:d2:f4:00:4e:61:f7:cf:ff:6c:2f:d2:
                    a8:0a:44:0c:f9:08:d5:ae:5f:13:76:ea:b5:76:68:
                    d1:6d:ce:c5:48:85:29:80:7b:e6:ea:1e:4c:9d:4c:
                    98:99:23:27:cb:26:e6:40:c8:53:3b:92:8b:29:08:
                    78:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:57:EB:6F:0C:00:32:8B:9F:BE:C5:7A:50:74:E8:E9:62:42:63:4B
            X509v3 Authority Key Identifier:
                keyid:97:A4:AF:5A:5D:AA:93:01:E5:61:37:4F:38:35:25:91:E0:93:C2:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/97A4AF5A5DAA9301E561374F38352591E093C270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97A4AF5A5DAA9301E561374F38352591E093C270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e33372e38382e302f32312d3234203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         70:e1:b0:2b:de:36:e3:e1:1a:d6:65:9b:ca:1b:f8:c3:fe:94:
         dd:b6:cc:26:e3:4b:61:b7:5f:d0:1b:7d:86:95:6f:aa:fe:7c:
         e4:f0:6d:65:d2:33:a8:28:e0:cc:40:05:87:9e:b1:72:a2:df:
         99:1a:a6:dc:86:19:ec:cf:28:19:b7:86:db:97:67:85:d7:8b:
         2f:24:23:12:75:45:b8:ce:62:cc:d3:41:bd:8b:94:a6:6d:c9:
         24:e9:04:f5:52:5f:0c:9e:bf:dd:41:f0:3b:7e:18:78:4d:28:
         0b:16:bc:04:fa:8b:73:da:b7:83:b3:81:f6:f8:59:7b:ff:a6:
         d1:3e:95:83:80:ef:d7:d5:31:6a:24:61:52:18:da:19:e0:44:
         df:7a:3e:8f:49:59:e5:64:51:c4:b5:cb:ff:7a:3e:c1:b8:93:
         61:0e:05:ad:e8:83:56:04:f8:95:07:64:e3:58:38:ff:5b:ce:
         b6:df:be:c8:4e:ed:1b:da:c8:86:db:b9:4b:73:e3:7d:71:6a:
         59:d6:c4:47:ea:0e:b3:6f:b1:1d:0d:ba:d3:95:87:40:b5:1f:
         2a:59:a2:2e:dd:21:91:3d:28:57:5e:4c:56:62:9a:53:99:a9:
         7c:da:c8:57:74:50:89:d5:f3:dd:d9:89:fa:56:cb:a4:fd:56:
         a4:ad:4f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org