Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/3137372e33372e33302e302f32342d3234203d3e20323730353934.roa
File:                     3137372e33372e33302e302f32342d3234203d3e20323730353934.roa (raw, json)
Hash identifier:          Ey7RS6ZvA9Mg77sUwDuoQ8ZDRjfaKl8xEJ8Pcs9LN8I=
Subject key identifier:   10:5A:94:15:4D:CB:AD:D9:18:0E:3C:4E:CD:69:EA:96:C5:0B:DA:34
Certificate issuer:       /CN=10BF39CEE477C23BE60BA999BA7B70171BFB2C10
Certificate serial:       4C09B1B699A797DE108FA00FA0D525DF3731BDB1
Authority key identifier: 10:BF:39:CE:E4:77:C2:3B:E6:0B:A9:99:BA:7B:70:17:1B:FB:2C:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/3137372e33372e33302e302f32342d3234203d3e20323730353934.roa
Signing time:             Wed 05 Mar 2025 20:59:46 +0000
ROA not before:           Wed 05 Mar 2025 20:54:46 +0000
ROA not after:            Wed 04 Mar 2026 20:59:46 +0000
asID:                     270594
IP address blocks:        177.37.30.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:09:b1:b6:99:a7:97:de:10:8f:a0:0f:a0:d5:25:df:37:31:bd:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BF39CEE477C23BE60BA999BA7B70171BFB2C10
        Validity
            Not Before: Mar  5 20:54:46 2025 GMT
            Not After : Mar  4 20:59:46 2026 GMT
        Subject: CN=105A94154DCBADD9180E3C4ECD69EA96C50BDA34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:4f:f4:8b:34:b8:e9:d9:fa:21:b2:4d:e4:ea:
                    c2:19:36:33:3b:3a:27:71:e0:d5:a9:6d:36:f0:ba:
                    0f:f2:13:cf:5b:33:89:c9:ac:e1:54:08:b6:a6:9b:
                    18:b0:2f:30:44:e8:c0:17:c4:b3:52:fa:46:52:4a:
                    cf:ff:82:52:e8:4d:41:91:61:ab:be:b9:29:c2:d1:
                    9a:c9:bc:66:38:6a:c9:4f:4b:0c:a4:92:db:23:f9:
                    fc:66:f2:38:f9:9b:e0:7e:0a:47:a9:1d:02:3b:c3:
                    2b:c4:e9:06:ca:10:cc:d6:75:84:ad:77:cb:f3:e1:
                    5c:af:11:36:ff:03:7c:21:10:ca:a6:85:6c:39:29:
                    96:15:af:93:95:12:aa:34:df:e9:47:d7:07:b3:d5:
                    a9:f0:1e:8e:71:f9:ca:38:52:da:e1:71:76:1c:4b:
                    5a:e5:b1:27:1b:d2:01:34:1c:f1:27:b9:b4:a1:4e:
                    9b:8c:e5:6d:53:8f:67:69:02:c0:a5:c4:ff:28:9a:
                    cc:85:44:6b:59:8b:2f:e7:89:a3:9b:9c:39:bc:62:
                    cf:36:05:ef:af:5b:fb:0c:99:6f:88:da:18:d8:f3:
                    89:48:f6:e3:3b:69:27:07:33:23:20:fd:6c:1f:06:
                    32:9f:47:b2:26:15:54:55:72:12:bb:9d:68:42:b3:
                    55:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:5A:94:15:4D:CB:AD:D9:18:0E:3C:4E:CD:69:EA:96:C5:0B:DA:34
            X509v3 Authority Key Identifier:
                keyid:10:BF:39:CE:E4:77:C2:3B:E6:0B:A9:99:BA:7B:70:17:1B:FB:2C:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/3137372e33372e33302e302f32342d3234203d3e20323730353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:6c:03:2b:42:3e:db:1f:23:36:bd:5d:9e:67:3e:67:73:d9:
         5e:6d:bb:d4:1a:bd:1d:ad:14:2b:cc:e8:28:22:4c:29:fd:8b:
         11:94:67:41:ad:9f:04:e6:77:44:0c:b8:92:a4:81:7b:87:f7:
         c6:f2:fe:20:e3:a2:1f:b0:ec:d7:fb:b4:42:36:bd:44:d8:4a:
         b1:f4:b4:8e:73:9f:16:41:71:d1:14:f1:53:59:de:11:60:5f:
         79:d1:a5:ba:b6:70:04:6e:fa:09:f9:77:52:d6:21:4d:38:4e:
         f3:4f:83:91:a4:4b:81:01:be:13:2a:ea:5a:ec:43:f4:f2:1e:
         ad:4a:af:ff:cd:37:b4:38:b2:cb:c7:40:0f:2b:a4:ce:15:ed:
         b5:63:a7:79:1a:6f:7e:17:6e:f4:72:ba:5e:b1:27:f1:5f:1c:
         14:00:1b:f6:98:ee:2d:0b:86:a3:7c:53:ae:8e:75:8c:b4:08:
         a1:19:55:1b:9e:e5:60:28:09:06:0e:04:7c:c5:30:43:5f:aa:
         82:20:2d:9a:9c:5b:59:52:f1:79:d9:85:17:de:84:03:ae:67:
         14:f5:6f:47:d5:1d:ed:8a:41:75:69:09:fc:0e:9e:92:de:a1:
         f6:4a:49:3a:73:99:bf:d9:dd:72:c5:83:27:96:e6:0b:f1:98:
         45:06:13:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:17:33 2025 by rpki-client