Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232342e302f32322d3232203d3e203631383531.roa
File:                     3137372e37352e3232342e302f32322d3232203d3e203631383531.roa (raw, json)
Hash identifier:          05tBq36KhRUeqFukK0ck27O9tlfDLHYDZG03L162l3o=
Subject key identifier:   95:42:4C:85:70:B8:18:4B:07:4C:6B:F0:E9:B9:F9:18:C8:20:41:EA
Certificate issuer:       /CN=AFA55E041FA0E5D394A1480902275296B12C222A
Certificate serial:       38AB47720045435D2D5119819B1B432005713519
Authority key identifier: AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232342e302f32322d3232203d3e203631383531.roa
Signing time:             Wed 26 Feb 2025 19:36:24 +0000
ROA not before:           Wed 26 Feb 2025 19:31:24 +0000
ROA not after:            Wed 25 Feb 2026 19:36:24 +0000
asID:                     61851
IP address blocks:        177.75.224.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ab:47:72:00:45:43:5d:2d:51:19:81:9b:1b:43:20:05:71:35:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFA55E041FA0E5D394A1480902275296B12C222A
        Validity
            Not Before: Feb 26 19:31:24 2025 GMT
            Not After : Feb 25 19:36:24 2026 GMT
        Subject: CN=95424C8570B8184B074C6BF0E9B9F918C82041EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bb:5d:32:18:54:a9:0c:9e:28:44:1b:56:4a:
                    2e:a9:89:96:c1:c3:41:05:56:32:35:67:4e:35:23:
                    ad:20:4e:6e:4c:98:9a:b8:97:a4:81:f0:1c:95:81:
                    83:41:bb:26:23:5a:ba:92:b5:ef:0d:01:44:d4:b8:
                    a3:c3:42:2f:42:e7:27:7e:91:ba:b9:c6:e7:a7:d6:
                    1a:79:72:ac:82:74:31:c2:74:ac:4b:34:32:e8:be:
                    11:c2:b5:bd:b9:92:64:40:22:c4:31:65:88:60:b4:
                    b9:13:fe:f3:db:bf:aa:68:02:82:ff:ce:01:50:95:
                    f5:b8:88:a1:ba:79:40:cb:95:db:8d:22:7e:b0:47:
                    bc:13:af:bb:0c:be:7a:30:7a:58:32:97:27:ba:65:
                    11:2a:1d:c9:6f:b7:7c:68:b3:eb:e6:82:3d:8b:99:
                    b4:96:3f:4a:8a:a4:dd:4c:0d:c1:0d:7d:5b:87:fd:
                    a8:e5:5c:23:0f:7a:b0:46:bf:0c:40:b3:0f:81:05:
                    3a:af:d8:8a:75:9b:59:b3:d7:84:c5:b2:7e:05:50:
                    21:fb:61:39:64:1d:71:bb:29:b6:34:19:a3:c1:f6:
                    c4:0f:36:24:46:df:c0:9e:f4:95:4e:c9:a2:d4:25:
                    6a:17:c8:3d:4b:16:d4:d0:94:94:ab:ed:c6:c1:4e:
                    87:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:42:4C:85:70:B8:18:4B:07:4C:6B:F0:E9:B9:F9:18:C8:20:41:EA
            X509v3 Authority Key Identifier:
                keyid:AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/AFA55E041FA0E5D394A1480902275296B12C222A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232342e302f32322d3232203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:9a:23:d9:cc:5f:49:09:05:df:7e:41:cd:cf:30:46:5a:28:
         da:5f:2f:bd:e8:8f:32:c1:b0:83:54:1c:91:37:2b:5b:99:5a:
         67:af:4f:2c:09:50:46:f3:20:d9:fa:2f:88:05:15:1d:45:26:
         79:1a:be:04:14:bf:bc:20:1b:4b:2c:ce:3f:52:a6:e8:f7:14:
         77:85:d1:19:5f:4d:25:1b:b8:a8:e6:77:1e:25:39:5e:c1:ba:
         2f:43:3a:76:71:c7:67:e9:5a:5d:2b:2d:49:4e:b8:73:49:37:
         31:db:5a:69:9e:b8:9d:88:1a:a9:f1:80:de:b2:35:87:a6:d9:
         0d:11:f3:17:a2:e9:32:88:c8:5e:8c:4d:88:ea:2a:d4:40:e8:
         09:fb:06:ae:71:ad:f4:97:21:5d:58:3e:8f:c3:55:c6:a3:7b:
         f4:31:64:73:a1:32:1a:96:fa:6c:41:67:bc:4a:f3:04:19:b1:
         d9:d0:72:8c:1c:c9:3d:99:e4:21:4a:6f:bc:d3:3f:47:80:be:
         26:ed:4e:e9:90:c8:c8:18:26:c6:8f:97:36:20:b7:39:b5:86:
         2c:18:c9:27:4d:7c:dc:a2:4a:71:f9:8e:6f:5c:46:6a:c9:1c:
         dc:44:59:ed:d0:ff:3d:7e:ee:6b:0a:23:e5:4f:26:13:4e:10:
         4f:60:aa:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:02:50 2025 by rpki-client