Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/3137372e33372e33302e302f32332d3233203d3e20323730353934.roa
File:                     3137372e33372e33302e302f32332d3233203d3e20323730353934.roa (raw, json)
Hash identifier:          jZMapOUe84nS0/HmSAfDLEi0KYVQyv8elBOcMNwdzlk=
Subject key identifier:   3A:C6:D8:7D:C1:4F:37:F1:67:D9:6C:F5:09:A8:2F:67:7B:80:4C:6D
Certificate issuer:       /CN=10BF39CEE477C23BE60BA999BA7B70171BFB2C10
Certificate serial:       54745CDD4E3D273B9339F2F03A1650E444F274EF
Authority key identifier: 10:BF:39:CE:E4:77:C2:3B:E6:0B:A9:99:BA:7B:70:17:1B:FB:2C:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/3137372e33372e33302e302f32332d3233203d3e20323730353934.roa
Signing time:             Wed 05 Mar 2025 20:59:46 +0000
ROA not before:           Wed 05 Mar 2025 20:54:46 +0000
ROA not after:            Wed 04 Mar 2026 20:59:46 +0000
asID:                     270594
IP address blocks:        177.37.30.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:74:5c:dd:4e:3d:27:3b:93:39:f2:f0:3a:16:50:e4:44:f2:74:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BF39CEE477C23BE60BA999BA7B70171BFB2C10
        Validity
            Not Before: Mar  5 20:54:46 2025 GMT
            Not After : Mar  4 20:59:46 2026 GMT
        Subject: CN=3AC6D87DC14F37F167D96CF509A82F677B804C6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bb:65:46:62:11:80:31:58:e1:11:b2:9b:30:
                    b2:4d:23:99:ee:70:3b:7c:05:6f:53:2c:b3:d3:57:
                    77:28:be:b7:e9:df:89:98:01:5a:42:c4:1d:3b:1f:
                    b8:1b:03:73:3a:86:38:fd:a1:c3:3d:c7:1f:42:57:
                    6c:6f:0a:01:ee:38:1e:be:aa:18:ec:25:58:f8:d5:
                    9f:60:80:a6:0c:70:c5:d3:17:9e:57:11:1c:6b:6b:
                    2f:da:82:27:78:e1:d3:ed:75:c9:00:e7:8b:8b:e1:
                    db:e5:38:9d:ad:26:2d:6c:f3:c1:9e:66:e4:9b:9d:
                    a5:2d:02:e9:06:91:7f:aa:db:9e:15:75:5e:c7:8d:
                    4a:ed:6f:7f:62:52:f4:12:01:8a:0e:e1:ff:8b:4c:
                    d6:8c:3e:24:1c:7f:75:a2:e5:59:54:4e:53:6f:f6:
                    b3:99:b9:c3:d2:a2:d1:be:2b:be:29:0d:99:cf:8c:
                    49:d4:45:2a:5a:e3:f0:89:58:ad:1b:7d:cb:04:78:
                    52:49:d8:b4:ae:a2:e6:4e:0f:6c:da:19:6a:77:98:
                    94:69:5d:92:4d:f9:d0:93:be:e9:45:9e:78:9a:a0:
                    ff:f5:05:ec:c2:b4:1a:d3:f9:6c:f8:d7:2e:45:cb:
                    10:fc:c1:04:55:48:35:76:b8:8d:12:8e:44:89:8a:
                    73:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C6:D8:7D:C1:4F:37:F1:67:D9:6C:F5:09:A8:2F:67:7B:80:4C:6D
            X509v3 Authority Key Identifier:
                keyid:10:BF:39:CE:E4:77:C2:3B:E6:0B:A9:99:BA:7B:70:17:1B:FB:2C:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/3137372e33372e33302e302f32332d3233203d3e20323730353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:7c:d9:64:81:24:a8:37:8d:7e:34:43:b5:3f:43:e8:ee:27:
         a8:48:b5:bd:fb:09:25:ad:81:71:9e:46:09:31:a2:96:71:1a:
         a3:02:04:76:91:4a:29:39:43:23:69:6a:0f:d7:ee:76:37:f2:
         ec:04:0f:71:f7:3e:cb:75:30:d3:5f:52:ec:37:92:38:e5:d2:
         26:bf:0c:77:32:68:f4:18:b5:ff:6b:8a:9c:ff:e0:88:23:d3:
         6a:9e:71:b3:91:d3:b6:a8:6d:79:28:53:a5:78:23:66:02:50:
         99:45:83:e0:91:2c:f7:96:1b:d4:08:ba:8e:b9:f0:96:13:f6:
         a5:f4:be:7a:1e:85:11:72:e9:6b:b8:3c:c0:e8:b9:04:26:e5:
         0b:96:3e:f2:75:0b:af:dc:7d:59:c7:9c:54:da:77:dc:1b:e8:
         bf:97:d6:f8:3f:d9:e8:07:36:75:2d:7f:06:9e:26:5b:5a:a3:
         72:2e:a2:36:be:a8:17:16:dd:12:8d:47:ef:74:90:c6:42:0e:
         c8:28:15:1e:60:e2:0a:a5:c6:e8:f0:8b:aa:56:d0:14:fc:f6:
         3c:6e:a5:47:ac:20:a9:76:79:ce:8b:62:36:ac:9f:b7:3b:2a:
         4b:26:ec:a5:3a:fa:d1:e9:6b:28:11:8a:af:09:ee:33:54:97:
         47:59:69:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:43:22 2025 by rpki-client