Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/3137372e33372e32382e302f32322d3232203d3e20323730353934.roa
File:                     3137372e33372e32382e302f32322d3232203d3e20323730353934.roa (raw, json)
Hash identifier:          KWppXTqmgTsfYVtQwBA0L55uv+geHmhw9Ux5utAeIAg=
Subject key identifier:   1F:8F:30:82:A9:97:8B:93:45:D5:B2:1F:93:B0:54:A4:5B:FF:4A:AC
Certificate issuer:       /CN=10BF39CEE477C23BE60BA999BA7B70171BFB2C10
Certificate serial:       052AD0DC25DFF57D498FE4A684874A76A3E0985D
Authority key identifier: 10:BF:39:CE:E4:77:C2:3B:E6:0B:A9:99:BA:7B:70:17:1B:FB:2C:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/3137372e33372e32382e302f32322d3232203d3e20323730353934.roa
Signing time:             Wed 05 Mar 2025 20:59:46 +0000
ROA not before:           Wed 05 Mar 2025 20:54:46 +0000
ROA not after:            Wed 04 Mar 2026 20:59:46 +0000
asID:                     270594
IP address blocks:        177.37.28.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:2a:d0:dc:25:df:f5:7d:49:8f:e4:a6:84:87:4a:76:a3:e0:98:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BF39CEE477C23BE60BA999BA7B70171BFB2C10
        Validity
            Not Before: Mar  5 20:54:46 2025 GMT
            Not After : Mar  4 20:59:46 2026 GMT
        Subject: CN=1F8F3082A9978B9345D5B21F93B054A45BFF4AAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f8:b5:1d:7b:63:94:9d:f8:06:7c:9e:c6:42:
                    94:57:86:e6:a4:f7:97:63:7a:0d:17:7d:0d:03:dc:
                    0e:e0:bf:4b:8e:7f:b1:c9:66:4d:64:3e:60:c8:aa:
                    67:d4:cf:9b:a8:7a:d1:9a:a9:aa:8e:e8:bf:66:c9:
                    6d:f8:1d:32:e5:a2:15:2e:09:2a:63:7b:1d:ef:a3:
                    a5:86:61:66:b4:ae:f4:7d:6b:a3:a3:cd:47:7b:30:
                    f7:5b:8f:1b:d8:de:54:50:0e:b3:78:c3:0e:a9:b6:
                    e3:9d:38:a4:b5:e8:d1:f0:de:61:0d:fe:d9:3d:3e:
                    1a:6e:fd:2a:84:40:df:a2:32:f7:8d:c1:8d:da:97:
                    4d:75:a3:8b:ee:44:9f:8a:0c:61:45:dc:ba:ba:6a:
                    6b:1c:e5:ee:87:de:96:15:ff:b8:96:1d:82:81:a6:
                    93:ec:ab:79:de:da:3e:0e:5f:46:de:cd:e3:c5:34:
                    84:99:fa:f6:da:5e:a8:eb:2e:ba:f0:da:42:c6:64:
                    fa:ff:09:45:52:de:25:36:de:5a:46:1f:7d:da:93:
                    46:3c:ad:b7:94:15:16:11:e1:e6:88:ae:ec:0b:88:
                    a4:ff:96:2c:8c:0f:18:7d:d6:62:70:7b:dd:7a:5e:
                    61:08:a9:4e:ad:27:ba:af:54:8c:11:0f:00:d2:aa:
                    1e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8F:30:82:A9:97:8B:93:45:D5:B2:1F:93:B0:54:A4:5B:FF:4A:AC
            X509v3 Authority Key Identifier:
                keyid:10:BF:39:CE:E4:77:C2:3B:E6:0B:A9:99:BA:7B:70:17:1B:FB:2C:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/3137372e33372e32382e302f32322d3232203d3e20323730353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:dc:93:46:72:80:0f:dc:0d:55:1b:40:a9:fc:f2:fe:5f:75:
         e5:13:be:e6:68:5c:85:1f:36:e8:50:ac:13:b6:1b:6e:a3:e9:
         8d:dd:31:df:cc:a6:14:ef:da:df:18:c7:f6:76:fe:38:c0:74:
         23:2d:5f:e4:bc:42:3d:a3:4e:cc:f0:00:0d:a0:10:3b:00:9c:
         17:8e:8e:62:03:21:4e:fd:26:d8:36:99:8e:e6:b6:ac:b7:dc:
         4a:a6:71:cc:15:2c:d0:a5:20:15:c6:a0:c0:32:ac:8e:27:c3:
         2c:28:c3:a9:64:95:f3:b3:ca:2d:78:14:53:9a:ed:35:7a:f7:
         b0:79:13:3e:88:9a:5f:68:2d:62:0f:a9:90:38:bd:0d:0e:ba:
         c6:13:08:0f:57:72:4f:0f:16:b6:8a:1a:b0:90:32:27:4e:83:
         8b:f0:8e:83:7e:e0:dd:cb:96:70:55:c2:37:e1:03:df:f8:a0:
         24:a4:21:43:da:48:0e:c9:61:82:18:4e:97:38:58:58:b9:65:
         f6:2e:e9:6b:44:41:f9:a4:13:9e:64:d0:51:b4:b1:87:7f:d5:
         78:6a:40:2d:be:54:be:ea:c5:ee:e4:28:24:f0:97:2e:12:f4:
         0a:99:dd:63:4e:75:00:94:de:89:07:3d:95:2c:50:3a:eb:16:
         66:0c:ca:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:39:07 2025 by rpki-client