Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232372e302f32342d3234203d3e203631383531.roa
File:                     3137372e37352e3232372e302f32342d3234203d3e203631383531.roa (raw, json)
Hash identifier:          pPX5rBMtgZq4l6GIfAsYeci3o3bLKf4Z1+4YYabmbp4=
Subject key identifier:   F3:29:49:B8:A3:A7:CF:B2:9E:4E:17:31:90:B2:CC:5E:0E:03:29:44
Certificate issuer:       /CN=AFA55E041FA0E5D394A1480902275296B12C222A
Certificate serial:       490E8A8E177BAA19F8AB1480176DDA0EAA87370D
Authority key identifier: AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232372e302f32342d3234203d3e203631383531.roa
Signing time:             Wed 26 Feb 2025 19:36:20 +0000
ROA not before:           Wed 26 Feb 2025 19:31:20 +0000
ROA not after:            Wed 25 Feb 2026 19:36:20 +0000
asID:                     61851
IP address blocks:        177.75.227.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:0e:8a:8e:17:7b:aa:19:f8:ab:14:80:17:6d:da:0e:aa:87:37:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFA55E041FA0E5D394A1480902275296B12C222A
        Validity
            Not Before: Feb 26 19:31:20 2025 GMT
            Not After : Feb 25 19:36:20 2026 GMT
        Subject: CN=F32949B8A3A7CFB29E4E173190B2CC5E0E032944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0e:36:4a:03:95:2e:d6:3c:a8:3b:d6:b2:75:
                    56:2a:60:14:44:f8:8a:fd:62:c5:f6:a7:03:17:c5:
                    0e:e6:9c:ef:b3:a0:09:90:0d:ff:3f:47:f3:30:a3:
                    1d:45:cd:a6:65:0d:62:04:f4:5e:1f:35:54:e4:ff:
                    3f:56:aa:27:9e:6a:99:28:55:2b:43:51:39:5b:b0:
                    f1:88:2e:eb:e3:a9:1b:e2:4f:56:c6:39:b2:e0:e8:
                    20:89:64:59:9f:d6:98:67:69:07:d1:43:71:eb:0d:
                    c5:0d:a1:40:0f:08:71:bd:d8:00:c3:c6:aa:b3:4a:
                    ab:f9:cb:8f:82:d1:dc:70:07:04:e5:a8:1c:4e:d6:
                    91:43:b0:41:10:ea:11:7c:d4:13:7a:91:a6:f6:09:
                    e3:bb:9a:ac:8d:fe:da:60:51:89:5b:45:9c:4e:6d:
                    70:90:39:48:e8:97:51:cf:ee:b9:8c:3a:bc:0f:4e:
                    9c:57:91:87:e1:75:eb:77:08:a5:1a:5d:86:4c:ea:
                    81:fa:b5:7b:6d:d2:21:86:16:08:0d:6a:19:ba:f7:
                    b6:5c:22:64:32:a8:eb:c8:c4:99:00:90:07:b1:bc:
                    56:60:5c:a2:21:2c:b3:e2:88:b8:5b:30:7f:7a:62:
                    54:3b:3e:62:a8:46:cd:9f:a7:10:ef:99:20:49:17:
                    60:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:29:49:B8:A3:A7:CF:B2:9E:4E:17:31:90:B2:CC:5E:0E:03:29:44
            X509v3 Authority Key Identifier:
                keyid:AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/AFA55E041FA0E5D394A1480902275296B12C222A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232372e302f32342d3234203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:13:e7:87:ba:e2:e1:55:9f:e4:e8:06:b9:65:a5:ca:40:f1:
         df:40:a5:90:c3:11:72:01:d0:15:73:0d:96:df:7f:08:1a:a2:
         74:ee:d3:3c:00:0c:ab:a5:3c:1f:ee:f6:4e:ec:14:94:7e:91:
         4e:de:68:71:89:5e:eb:e1:58:f5:56:e9:ae:ce:bc:51:41:2e:
         eb:11:a9:13:c2:fd:7e:dd:9d:9f:4d:85:8c:9f:af:95:85:1b:
         c7:3c:e9:4b:57:43:44:25:b6:b5:73:d7:f0:f7:fd:31:da:4d:
         fe:6b:ef:30:3a:19:54:6c:4f:0c:39:c3:df:17:67:76:c8:ed:
         75:e5:5c:de:c8:cb:7d:54:21:79:9c:22:73:66:33:f5:c1:c4:
         f4:d1:36:19:88:91:3b:2c:6b:64:fb:25:ea:d0:ab:f6:6c:49:
         f4:17:a9:12:40:b4:f6:11:0a:a1:59:d3:92:e5:35:ea:e8:b2:
         60:f6:05:3c:bc:04:2f:eb:5b:dd:75:45:2e:52:16:02:10:b3:
         63:25:34:0b:90:0b:75:61:62:58:22:64:68:4d:2f:aa:3d:37:
         1a:ec:67:f5:83:33:50:60:8a:4f:a3:5d:33:84:f7:51:a0:0d:
         f1:9b:d7:fa:e9:47:4b:1c:b0:05:b3:ab:31:8c:16:cd:6d:de:
         dd:54:9c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:02:49 2025 by rpki-client