Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232352e302f32342d3234203d3e203631383531.roa
File:                     3137372e37352e3232352e302f32342d3234203d3e203631383531.roa (raw, json)
Hash identifier:          8RLLWPoPHhhcvv6+bgNeg4kTRVydRRYzXmR6cKQeg+U=
Subject key identifier:   84:9C:F1:C8:79:1B:DD:8E:92:42:36:11:28:CD:CE:D8:E0:9F:03:89
Certificate issuer:       /CN=AFA55E041FA0E5D394A1480902275296B12C222A
Certificate serial:       39DDB3553D0140D10D010FB482499CAF1E2C4DED
Authority key identifier: AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232352e302f32342d3234203d3e203631383531.roa
Signing time:             Wed 26 Feb 2025 19:36:23 +0000
ROA not before:           Wed 26 Feb 2025 19:31:23 +0000
ROA not after:            Wed 25 Feb 2026 19:36:23 +0000
asID:                     61851
IP address blocks:        177.75.225.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:dd:b3:55:3d:01:40:d1:0d:01:0f:b4:82:49:9c:af:1e:2c:4d:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFA55E041FA0E5D394A1480902275296B12C222A
        Validity
            Not Before: Feb 26 19:31:23 2025 GMT
            Not After : Feb 25 19:36:23 2026 GMT
        Subject: CN=849CF1C8791BDD8E9242361128CDCED8E09F0389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:88:1f:c9:5b:e3:18:9d:2e:70:ae:eb:75:90:
                    19:d7:f8:9a:70:52:aa:03:7a:32:2a:51:9f:d4:7a:
                    f5:bf:58:e7:94:a6:80:ce:31:1f:f0:1a:62:80:6d:
                    27:70:18:1b:76:37:aa:97:12:55:20:e1:4e:f3:04:
                    0d:1c:51:65:f3:c6:15:d8:31:7f:dc:1e:47:9d:d3:
                    02:95:55:ca:33:39:bd:c6:3d:00:ae:5a:0c:c5:80:
                    53:5f:69:51:46:66:45:ee:24:a7:20:db:8c:4a:b4:
                    a0:db:3f:a1:c9:96:6f:0e:b3:37:b2:2f:f6:b2:38:
                    29:c5:9b:63:fb:7f:df:5a:9b:7f:ea:12:0a:9c:45:
                    c6:76:d9:a0:22:d0:e1:3d:59:ec:82:c6:69:1c:5f:
                    c5:86:26:68:f7:91:69:59:b9:6a:5e:7d:31:ff:bc:
                    1c:45:05:d0:8d:7c:d2:51:08:06:7c:cc:16:99:03:
                    41:4b:2f:fc:4b:fd:98:a3:cd:d3:83:8b:72:4f:74:
                    c0:a8:b8:d4:bc:b4:95:4a:56:9d:af:90:22:c9:35:
                    13:71:d8:1b:ae:13:b3:95:66:4d:dc:32:4f:c4:0b:
                    31:fe:ef:72:3b:d8:14:76:d5:a7:b9:58:0c:55:5a:
                    72:dd:7f:e0:20:ba:1e:57:8f:d2:e4:5c:36:dc:99:
                    c4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:9C:F1:C8:79:1B:DD:8E:92:42:36:11:28:CD:CE:D8:E0:9F:03:89
            X509v3 Authority Key Identifier:
                keyid:AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/AFA55E041FA0E5D394A1480902275296B12C222A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232352e302f32342d3234203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:7d:b5:40:c5:46:43:e7:ae:95:02:84:a8:60:aa:09:25:a7:
         eb:19:53:13:53:1c:6a:b6:24:63:5c:da:32:b8:f6:fc:f0:e8:
         f9:01:bf:df:6b:b8:73:19:97:f3:05:9d:c9:7a:fb:ef:d2:49:
         0e:04:c3:0c:58:ee:2b:17:75:ac:67:4e:15:37:d8:18:a2:2c:
         35:4f:1d:d4:11:c6:86:1e:8e:a6:99:82:df:85:4d:c3:f3:ec:
         ce:9c:28:60:15:0d:fa:af:23:2e:79:d0:ce:3d:1f:ef:a6:24:
         81:bf:3e:54:43:e1:5d:ed:fe:96:70:66:f4:d4:0e:2c:ea:20:
         81:75:1a:16:4e:5d:26:21:13:a1:e9:e6:d8:86:17:c8:b6:17:
         48:bd:29:dc:b6:9b:a2:51:84:aa:b0:48:bd:cb:e5:c0:12:31:
         73:03:57:6a:05:8b:2f:ca:12:44:52:db:a1:fd:96:38:e2:7b:
         2e:9f:90:2c:29:eb:07:9e:52:d4:fd:bb:6d:a6:9b:5d:9f:8e:
         21:77:6c:81:3e:35:1e:d9:fd:10:9b:5a:f2:e0:ad:45:05:e2:
         bc:2b:ae:37:8c:99:9e:0b:72:0a:3f:e1:5a:56:4a:08:b4:8d:
         79:2b:1b:ab:57:b0:ba:6a:43:a0:39:55:64:62:52:1a:3e:e7:
         7c:44:d8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:05:19 2025 by rpki-client