Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232342e302f32312d3231203d3e203631383531.roa
File:                     3137372e37352e3232342e302f32312d3231203d3e203631383531.roa (raw, json)
Hash identifier:          envufFtpabo4iXGn/z0RlFOpfbVIrxQhqezohZnp3W0=
Subject key identifier:   31:AA:E4:63:0E:F3:E4:5E:C4:FE:83:D4:46:93:4A:00:B7:8D:A3:1A
Certificate issuer:       /CN=AFA55E041FA0E5D394A1480902275296B12C222A
Certificate serial:       72C41EE5742D45B199BA4C9A247DCCF50A442B6C
Authority key identifier: AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232342e302f32312d3231203d3e203631383531.roa
Signing time:             Wed 26 Feb 2025 19:36:19 +0000
ROA not before:           Wed 26 Feb 2025 19:31:19 +0000
ROA not after:            Wed 25 Feb 2026 19:36:19 +0000
asID:                     61851
IP address blocks:        177.75.224.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c4:1e:e5:74:2d:45:b1:99:ba:4c:9a:24:7d:cc:f5:0a:44:2b:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFA55E041FA0E5D394A1480902275296B12C222A
        Validity
            Not Before: Feb 26 19:31:19 2025 GMT
            Not After : Feb 25 19:36:19 2026 GMT
        Subject: CN=31AAE4630EF3E45EC4FE83D446934A00B78DA31A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:20:f1:0a:89:3a:e2:95:92:c0:bd:83:3c:99:
                    29:3b:27:8d:62:fb:79:0d:e5:81:23:00:e7:9e:9e:
                    3f:66:a0:3d:a5:58:1f:8a:56:94:fb:7d:78:8d:eb:
                    38:e5:09:96:60:7c:de:7b:97:f2:0a:ee:8c:7c:60:
                    92:44:f2:90:52:e3:6c:b9:31:b5:61:ad:82:f7:43:
                    76:32:3c:20:25:ad:77:d2:2d:52:0c:c9:d4:60:5b:
                    26:ab:12:96:12:1d:28:41:cb:95:e3:c1:58:36:69:
                    b3:1f:73:a9:72:38:00:d5:86:6a:46:f7:a6:5c:ed:
                    cf:a1:c7:c7:02:5e:ad:cf:16:21:f7:28:eb:93:19:
                    6b:42:30:58:8d:75:a2:c5:54:e6:5e:c8:09:e9:16:
                    c9:9a:55:13:55:56:1d:06:e5:c3:fc:20:46:c9:13:
                    00:e4:4c:0c:a3:dc:63:da:f8:b8:21:ba:84:f7:45:
                    0a:3c:bb:6d:dc:25:c8:c7:d6:b2:63:33:14:67:bd:
                    a6:74:7e:ea:69:e8:ee:10:85:40:63:e5:83:29:c9:
                    02:4b:f9:2d:d3:c4:5d:85:dc:0d:5d:36:5e:8b:35:
                    e2:74:8a:eb:e8:e3:1f:42:23:f3:5d:74:9a:0e:51:
                    da:bb:a2:dc:22:06:23:49:b5:4c:a4:80:70:7c:9a:
                    ff:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:AA:E4:63:0E:F3:E4:5E:C4:FE:83:D4:46:93:4A:00:B7:8D:A3:1A
            X509v3 Authority Key Identifier:
                keyid:AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/AFA55E041FA0E5D394A1480902275296B12C222A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232342e302f32312d3231203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bf:eb:45:cb:96:b7:6c:ac:f4:3d:23:63:07:e5:8e:00:8d:db:
         5b:ae:7a:71:77:ee:a1:bc:ac:d9:91:04:3d:7e:6e:61:1d:be:
         e7:a1:0a:0d:cb:9a:b4:fb:03:23:9e:e3:27:9f:b7:96:47:97:
         aa:b4:96:5b:fb:2a:17:ec:63:90:16:d9:fc:fe:3b:e5:7b:a0:
         35:76:c0:e2:b1:38:d7:b8:14:49:f9:e6:30:73:ca:58:3e:8e:
         6f:9f:fc:de:f9:86:1d:97:a9:18:06:7f:d7:3a:26:b3:74:49:
         5b:66:be:db:78:d1:81:e1:4c:52:e5:6a:13:5f:45:f2:6c:d6:
         19:83:3c:f3:b0:c3:64:66:2a:16:5c:ac:1f:8b:e8:4a:8c:1d:
         2f:a4:0d:e6:5e:e6:09:ae:66:ea:33:cc:e1:c6:d6:40:f2:4c:
         05:ba:ba:7f:1a:10:21:fa:25:70:e7:d9:77:23:73:02:86:77:
         d8:ab:88:f3:94:d6:76:14:09:70:a4:59:03:a5:27:3a:57:c1:
         9a:36:b0:54:c5:ff:73:dc:83:69:28:51:a0:b0:4f:de:9c:43:
         0c:9d:ad:da:4c:43:f4:57:ac:01:b3:c0:ce:55:b9:90:59:c1:
         09:b5:04:e3:09:8c:54:f7:bd:28:cf:0e:1e:d2:f4:15:9d:5b:
         80:7c:d3:13
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcsQe5XQtRbGZukyaJH3M9QpEK2wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUZBNTVFMDQxRkEwRTVEMzk0QTE0ODA5MDIyNzUyOTZC
MTJDMjIyQTAeFw0yNTAyMjYxOTMxMTlaFw0yNjAyMjUxOTM2MTlaMDMxMTAvBgNV
BAMTKDMxQUFFNDYzMEVGM0U0NUVDNEZFODNENDQ2OTM0QTAwQjc4REEzMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7IPEKiTrilZLAvYM8mSk7J41i
+3kN5YEjAOeenj9moD2lWB+KVpT7fXiN6zjlCZZgfN57l/IK7ox8YJJE8pBS42y5
MbVhrYL3Q3YyPCAlrXfSLVIMydRgWyarEpYSHShBy5XjwVg2abMfc6lyOADVhmpG
96Zc7c+hx8cCXq3PFiH3KOuTGWtCMFiNdaLFVOZeyAnpFsmaVRNVVh0G5cP8IEbJ
EwDkTAyj3GPa+LghuoT3RQo8u23cJcjH1rJjMxRnvaZ0fupp6O4QhUBj5YMpyQJL
+S3TxF2F3A1dNl6LNeJ0iuvo4x9CI/NddJoOUdq7otwiBiNJtUykgHB8mv/pAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUMarkYw7z5F7E/oPURpNKALeNoxowHwYDVR0j
BBgwFoAUr6VeBB+g5dOUoUgJAidSlrEsIiowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU1lNzgyWWFacUV3V0YzdVBFSzlrR0g3b0E4a0FzRjlSa2lxdDZUZGpR
QjkvMC9BRkE1NUUwNDFGQTBFNUQzOTRBMTQ4MDkwMjI3NTI5NkIxMkMyMjJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGQTU1RTA0MUZBMEU1RDM5
NEExNDgwOTAyMjc1Mjk2QjEyQzIyMkEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlNZTc4MllhWnFFd1dGM3VQRUs5a0dIN29BOGtBc0Y5UmtpcXQ2VGRqUUI5LzAv
MzEzNzM3MmUzNzM1MmUzMjMyMzQyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNjMx
MzgzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsUvgMA0GCSqGSIb3DQEBCwUAA4IBAQC/60XLlrds
rPQ9I2MH5Y4Ajdtbrnpxd+6hvKzZkQQ9fm5hHb7noQoNy5q0+wMjnuMnn7eWR5eq
tJZb+yoX7GOQFtn8/jvle6A1dsDisTjXuBRJ+eYwc8pYPo5vn/ze+YYdl6kYBn/X
OiazdElbZr7beNGB4UxS5WoTX0XybNYZgzzzsMNkZioWXKwfi+hKjB0vpA3mXuYJ
rmbqM8zhxtZA8kwFurp/GhAh+iVw59l3I3MChnfYq4jzlNZ2FAlwpFkDpSc6V8Ga
NrBUxf9z3INpKFGgsE/enEMMna3aTEP0V6wBs8DOVbmQWcEJtQTjCYxU970ozw4e
0vQVnVuAfNMT
-----END CERTIFICATE-----
Generated at Wed Apr 9 20:02:49 2025 by rpki-client