Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232342e302f32302d3230203d3e203631383531.roa
File:                     3137372e37352e3232342e302f32302d3230203d3e203631383531.roa (raw, json)
Hash identifier:          KooTd+Qpzqsi4P9+Qy32tYsj+auTVtpJ04p8vY1owyg=
Subject key identifier:   6A:87:EA:31:8A:2A:53:14:14:B1:41:11:26:D7:36:CD:F2:A7:3E:03
Certificate issuer:       /CN=AFA55E041FA0E5D394A1480902275296B12C222A
Certificate serial:       147C02D1D3BE20B4EFC30321B03E0C2C95C26AC7
Authority key identifier: AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232342e302f32302d3230203d3e203631383531.roa
Signing time:             Wed 26 Feb 2025 19:36:24 +0000
ROA not before:           Wed 26 Feb 2025 19:31:24 +0000
ROA not after:            Wed 25 Feb 2026 19:36:24 +0000
asID:                     61851
IP address blocks:        177.75.224.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:7c:02:d1:d3:be:20:b4:ef:c3:03:21:b0:3e:0c:2c:95:c2:6a:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFA55E041FA0E5D394A1480902275296B12C222A
        Validity
            Not Before: Feb 26 19:31:24 2025 GMT
            Not After : Feb 25 19:36:24 2026 GMT
        Subject: CN=6A87EA318A2A531414B1411126D736CDF2A73E03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:59:35:95:35:62:19:ec:3e:82:95:54:a2:07:
                    37:56:20:75:8f:0c:1d:79:3d:8e:99:41:cd:01:fe:
                    8c:29:c0:7d:61:f7:f0:dc:72:22:07:a6:c6:96:e8:
                    10:18:db:12:99:da:66:62:f0:e8:35:74:cb:0c:a8:
                    81:11:ac:13:9d:c8:ee:c8:16:22:66:80:b1:2d:55:
                    eb:cb:4a:48:f4:af:f8:94:95:60:73:32:29:2d:8b:
                    da:70:0c:9c:f1:e4:89:25:f1:b3:d9:68:e7:19:71:
                    a2:5f:78:28:3c:a3:eb:8e:1f:8d:54:dd:1e:b5:2a:
                    4b:50:4f:1f:ad:3f:bc:58:75:ba:22:02:cb:f3:d9:
                    e1:15:f9:7a:31:a2:55:62:39:7f:98:d8:0a:a0:03:
                    1a:5b:90:38:1b:da:b3:a8:4b:3b:79:a9:bb:a7:d9:
                    9c:ad:4a:9d:4e:cb:c4:51:69:88:6b:ad:fd:ae:3a:
                    e5:70:46:a7:3c:92:b4:dd:61:86:d8:cd:49:c2:18:
                    ba:22:98:37:39:3e:5e:7e:8c:56:41:c4:1d:6b:a1:
                    36:9c:37:bc:ca:72:33:e8:70:b9:29:91:46:9d:c6:
                    a4:86:82:cd:e3:ea:db:32:ee:a5:60:dc:b3:01:1f:
                    64:09:03:e7:6e:ec:d0:57:e8:22:f0:80:57:c4:4f:
                    5d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:87:EA:31:8A:2A:53:14:14:B1:41:11:26:D7:36:CD:F2:A7:3E:03
            X509v3 Authority Key Identifier:
                keyid:AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/AFA55E041FA0E5D394A1480902275296B12C222A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232342e302f32302d3230203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         60:49:91:dc:51:fb:1c:de:3d:90:1f:52:b1:b7:d9:24:9b:66:
         12:7b:c6:16:91:77:bc:3d:f2:2b:ed:26:5f:f2:00:19:cb:06:
         db:f7:69:09:26:d5:2d:f4:f3:ee:ff:8f:b8:f4:5d:6c:dc:c3:
         6f:5b:ba:2e:4b:73:da:19:c4:0e:73:49:22:74:bf:e0:07:5a:
         28:dd:05:e4:e6:53:87:5a:54:f9:03:39:f5:3e:1a:ce:c1:ff:
         06:1b:a5:41:3b:77:de:ad:7f:82:59:49:fe:9a:a4:db:db:50:
         d0:f5:3e:e9:1e:e7:d3:e6:1c:49:b8:c2:67:82:d4:d8:a4:d6:
         68:a7:c4:14:af:ea:fb:00:50:95:9a:0b:dd:10:87:a1:49:16:
         ec:38:10:17:39:ab:2c:ec:6a:c7:3b:dd:34:0e:23:db:25:a8:
         dd:27:e9:c2:1e:77:38:23:0a:33:4e:db:65:11:ca:a5:85:c6:
         3a:68:64:01:7a:9a:80:1f:f2:e6:f5:d9:e1:76:5a:9b:22:5f:
         66:07:bb:5d:4a:87:41:9a:a8:21:7a:a0:b9:d6:55:1c:34:ec:
         36:0f:7b:24:ae:80:69:1e:13:c3:3d:cf:09:ed:51:15:e7:11:
         8d:11:6b:2e:7c:f9:b8:6d:e6:d0:42:86:4b:ff:8f:be:6a:9e:
         7d:3e:81:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:05:17 2025 by rpki-client