Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e33372e39322e302f32322d3234203d3e20323632343137.roa
File:                     3137372e33372e39322e302f32322d3234203d3e20323632343137.roa (raw, json)
Hash identifier:          taPxKnw0aT+f5AzjAgWrcF6uy9t8RAzom533jINxSto=
Subject key identifier:   56:28:06:BD:A6:7E:3D:A3:C9:59:7C:F2:11:F9:1B:C8:07:6A:0E:23
Certificate issuer:       /CN=97A4AF5A5DAA9301E561374F38352591E093C270
Certificate serial:       56345C885C63775EC280D12F4B056C5FD453114A
Authority key identifier: 97:A4:AF:5A:5D:AA:93:01:E5:61:37:4F:38:35:25:91:E0:93:C2:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97A4AF5A5DAA9301E561374F38352591E093C270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e33372e39322e302f32322d3234203d3e20323632343137.roa
Signing time:             Mon 11 Dec 2023 17:37:16 +0000
ROA not before:           Mon 11 Dec 2023 17:32:16 +0000
ROA not after:            Mon 09 Dec 2024 17:37:16 +0000
asID:                     262417
IP address blocks:        177.37.92.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:34:5c:88:5c:63:77:5e:c2:80:d1:2f:4b:05:6c:5f:d4:53:11:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97A4AF5A5DAA9301E561374F38352591E093C270
        Validity
            Not Before: Dec 11 17:32:16 2023 GMT
            Not After : Dec  9 17:37:16 2024 GMT
        Subject: CN=562806BDA67E3DA3C9597CF211F91BC8076A0E23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:85:87:49:e1:f2:d4:dc:52:db:d7:56:23:ad:
                    39:84:37:27:30:55:29:cd:97:a5:1d:e9:24:63:77:
                    1e:74:db:ab:a4:68:58:05:d4:64:14:0b:ce:c6:83:
                    2a:09:e2:7d:ee:6e:73:02:47:05:16:37:83:85:80:
                    7c:9f:58:af:ae:24:f8:51:2b:83:35:c9:e5:13:78:
                    a9:aa:1e:3f:13:e4:e1:82:b4:01:31:ec:8b:da:f8:
                    bf:7a:8c:24:ce:06:2c:1e:e3:7e:48:6e:7c:78:9e:
                    d1:ec:b7:0f:3c:f2:b0:26:68:02:61:52:32:8d:ef:
                    97:52:b5:1d:53:c4:ad:3d:9c:1e:83:1e:11:3f:23:
                    97:3e:cc:7e:bd:f7:81:b4:3f:f2:0b:c6:7b:a2:38:
                    62:5b:8a:96:08:4c:1b:eb:40:16:34:2b:74:7e:9b:
                    5a:84:28:d2:ac:e5:a8:b2:43:de:b3:34:73:5a:63:
                    d5:d5:c2:83:c1:b6:e2:7b:5c:0a:6b:95:2b:82:c1:
                    92:66:6f:4e:c1:08:60:22:b5:b6:a5:a3:f5:25:d6:
                    64:5b:0c:5d:35:66:ff:77:77:33:c8:08:be:35:c9:
                    33:f5:64:51:15:2b:47:02:bd:aa:22:ac:0d:3e:44:
                    c3:be:aa:87:30:97:b4:28:bf:07:70:f2:14:73:3e:
                    e1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:28:06:BD:A6:7E:3D:A3:C9:59:7C:F2:11:F9:1B:C8:07:6A:0E:23
            X509v3 Authority Key Identifier:
                keyid:97:A4:AF:5A:5D:AA:93:01:E5:61:37:4F:38:35:25:91:E0:93:C2:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/97A4AF5A5DAA9301E561374F38352591E093C270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97A4AF5A5DAA9301E561374F38352591E093C270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e33372e39322e302f32322d3234203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:e9:b9:1c:1c:fa:21:c3:f7:e4:64:cf:93:78:65:96:3e:32:
         e2:7d:0f:07:d2:0b:d4:b9:44:10:3e:e1:32:8b:7d:d7:ec:06:
         26:1f:a8:dd:9d:a8:a2:7e:73:f3:b1:1e:d7:46:18:81:82:57:
         c9:cb:ab:70:fe:ac:46:f5:49:6d:66:3a:bf:b2:93:2a:fe:ab:
         fc:c5:dd:5f:2d:61:c4:60:2c:18:84:e8:ea:d1:c5:cd:e7:28:
         34:ba:0b:f4:92:ae:13:f2:a4:78:36:ba:87:90:68:6b:8f:a1:
         d3:36:78:85:13:1b:bf:65:87:34:e3:57:a3:8a:c6:b1:d1:bf:
         b2:84:3b:65:59:3e:f4:eb:1d:ab:52:3d:7a:ae:51:72:fd:39:
         43:42:93:f0:01:5d:d7:f6:8e:f5:0b:b9:a5:97:33:69:2c:02:
         f9:87:b5:d9:45:54:c6:92:09:18:77:8d:ce:5f:95:75:29:66:
         51:a9:79:25:b1:5f:a2:73:cd:7d:50:56:8b:a5:e7:aa:d8:b1:
         a7:0e:e4:8e:0c:2c:da:f0:01:9b:a6:31:f8:63:dd:6e:3d:2a:
         8e:2b:63:3d:1e:ea:2d:d4:26:96:54:82:bf:75:e4:37:1f:f7:
         a9:30:83:5f:e2:49:ea:47:84:84:c5:7e:ec:5b:65:98:61:e8:
         91:a7:c3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org