Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232342e302f32342d3234203d3e203631383531.roa
File:                     3137372e37352e3232342e302f32342d3234203d3e203631383531.roa (raw, json)
Hash identifier:          9qFwsGaL6uirJAz75MpEb7br4tBpI3HSuBRNe3ZbZCQ=
Subject key identifier:   E6:8D:1F:8C:74:5D:F4:EB:05:06:EE:38:C3:0D:A1:49:00:A4:75:CA
Certificate issuer:       /CN=AFA55E041FA0E5D394A1480902275296B12C222A
Certificate serial:       7A36DEE3986FF410DFBDEDBB1388D8A5F5B9939D
Authority key identifier: AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232342e302f32342d3234203d3e203631383531.roa
Signing time:             Wed 26 Feb 2025 19:36:19 +0000
ROA not before:           Wed 26 Feb 2025 19:31:19 +0000
ROA not after:            Wed 25 Feb 2026 19:36:19 +0000
asID:                     61851
IP address blocks:        177.75.224.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:36:de:e3:98:6f:f4:10:df:bd:ed:bb:13:88:d8:a5:f5:b9:93:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFA55E041FA0E5D394A1480902275296B12C222A
        Validity
            Not Before: Feb 26 19:31:19 2025 GMT
            Not After : Feb 25 19:36:19 2026 GMT
        Subject: CN=E68D1F8C745DF4EB0506EE38C30DA14900A475CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5a:10:29:bf:21:57:e1:ef:83:0a:88:aa:07:
                    a9:5d:cc:93:5b:f4:62:5a:90:20:3a:23:a0:6f:19:
                    6b:46:71:c8:1f:d6:9f:91:bc:c9:a1:2e:a7:72:b4:
                    da:82:f4:13:8e:bd:69:25:30:45:e9:de:6f:12:56:
                    42:38:b7:96:d2:ea:4a:9d:81:9f:09:e8:32:c2:b6:
                    01:00:5b:fc:a6:fc:71:2a:a4:c1:08:60:0f:b1:a3:
                    31:ca:02:30:7f:f7:db:9f:47:db:d0:33:5e:ca:be:
                    17:a4:e3:45:7a:5c:84:3d:9b:15:ba:47:c3:ae:ae:
                    1e:ea:3c:68:af:59:42:b8:5b:ca:8a:13:d5:e6:fe:
                    81:49:96:11:1b:d9:ae:5e:01:72:f7:fa:08:4d:46:
                    17:f0:93:47:22:86:c9:64:e8:09:4e:24:ee:1e:61:
                    9d:7d:82:e9:6f:20:09:63:8f:15:b7:20:88:1a:e3:
                    62:de:5e:cf:fa:46:9b:05:2f:90:45:93:40:c5:87:
                    06:60:de:da:cf:48:ab:4d:12:f9:39:f3:49:a9:b7:
                    cf:3e:e1:7e:22:99:22:19:c3:72:f7:b3:aa:53:86:
                    d8:66:f0:58:38:11:f2:e4:a5:bf:57:b7:69:e6:c2:
                    22:09:ab:bb:2e:aa:e6:e9:cb:09:78:dc:d9:03:02:
                    25:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8D:1F:8C:74:5D:F4:EB:05:06:EE:38:C3:0D:A1:49:00:A4:75:CA
            X509v3 Authority Key Identifier:
                keyid:AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/AFA55E041FA0E5D394A1480902275296B12C222A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232342e302f32342d3234203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:87:25:19:9e:c4:7a:37:72:09:b8:e1:31:28:27:33:f9:55:
         a2:66:45:1d:5a:3c:a4:c5:24:db:70:5e:db:a1:05:41:d6:46:
         8e:d8:cf:39:b6:24:e8:4e:5f:7f:bc:49:31:96:ab:86:26:eb:
         86:9e:e9:76:0c:c6:84:19:89:ee:fb:b4:3e:16:02:be:d7:52:
         70:b9:82:5c:66:47:29:90:17:45:2b:4a:d3:4d:37:e8:bd:53:
         51:7b:1e:c0:02:41:c7:b2:26:f9:f5:b0:fa:f1:de:bb:9f:0e:
         bb:67:c6:44:a7:f3:5f:3d:ff:45:75:f8:7b:7a:87:a1:42:f5:
         13:f9:b0:1e:23:91:7a:21:9a:2b:22:2e:6c:98:5c:30:a2:64:
         dd:a4:da:f7:df:90:1d:48:61:3d:81:64:ff:10:d8:58:a4:38:
         68:31:5e:2d:de:a5:7f:56:6b:98:fc:2c:f1:a9:cd:00:2f:54:
         f2:13:a8:b3:1a:c0:3f:68:d1:06:3e:08:86:30:73:6d:ea:55:
         d4:87:df:43:55:49:f1:24:af:ff:77:7a:4a:03:0b:78:70:cb:
         87:0e:e6:ba:81:a7:6e:9e:56:47:0d:e8:61:1b:79:6c:9d:71:
         6c:9c:e9:21:79:3d:da:71:7e:eb:9e:3f:5f:d4:f5:04:cb:a3:
         63:ee:5c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:05:21 2025 by rpki-client