Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232382e302f32322d3232203d3e203631383531.roa
File:                     3137372e37352e3232382e302f32322d3232203d3e203631383531.roa (raw, json)
Hash identifier:          ewOO7SblcCoSLUo2tAt7/SV+1LutqvEXg7nyv948IOU=
Subject key identifier:   2C:3D:28:F1:9A:A8:08:B9:C3:88:77:07:45:B8:9C:DC:B0:3C:1A:6D
Certificate issuer:       /CN=AFA55E041FA0E5D394A1480902275296B12C222A
Certificate serial:       19041E882A96FC83EE4A0AA919459A7E97FF6BB0
Authority key identifier: AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232382e302f32322d3232203d3e203631383531.roa
Signing time:             Wed 26 Feb 2025 19:36:24 +0000
ROA not before:           Wed 26 Feb 2025 19:31:24 +0000
ROA not after:            Wed 25 Feb 2026 19:36:24 +0000
asID:                     61851
IP address blocks:        177.75.228.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:04:1e:88:2a:96:fc:83:ee:4a:0a:a9:19:45:9a:7e:97:ff:6b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFA55E041FA0E5D394A1480902275296B12C222A
        Validity
            Not Before: Feb 26 19:31:24 2025 GMT
            Not After : Feb 25 19:36:24 2026 GMT
        Subject: CN=2C3D28F19AA808B9C388770745B89CDCB03C1A6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:94:86:3c:44:6d:0c:ac:12:1b:ef:e1:0a:0a:
                    82:97:d7:9f:1e:f7:6e:d0:77:12:87:60:2a:bd:03:
                    14:77:ce:27:4d:aa:c6:79:4f:d6:3e:16:3c:72:ed:
                    cb:9f:63:5e:1e:25:39:a9:27:7b:34:f6:67:a5:d0:
                    47:11:2a:07:d0:41:97:72:3a:33:9f:cc:54:6e:34:
                    59:cf:cd:ec:b7:65:29:0a:60:4b:56:59:a9:51:13:
                    79:62:16:d9:ca:f1:58:39:3c:96:cd:49:da:e4:44:
                    5c:cd:c2:4e:15:ff:eb:89:1b:5a:53:eb:d1:7b:d2:
                    51:d1:51:ed:c9:b9:d1:0c:20:4d:a3:a1:e1:94:73:
                    90:b4:16:a1:3a:32:c8:76:c7:79:5c:b9:d4:ff:8f:
                    3d:de:f7:df:2b:13:ac:4b:b9:0b:8b:5b:cb:71:0f:
                    13:ea:54:4a:07:01:41:c9:31:35:40:ce:a8:a8:d0:
                    8b:72:a8:c5:d1:56:af:ca:f8:03:99:95:07:62:12:
                    cb:01:a2:39:33:a5:9e:91:ce:bf:e1:03:80:0f:aa:
                    e4:f5:5f:1b:0f:5f:d8:1c:80:76:4e:13:7a:46:58:
                    e2:f8:ba:dd:04:98:ee:96:57:fc:5d:0a:9a:c8:02:
                    6d:ef:eb:fa:88:02:e9:77:3a:f7:ec:8d:3f:35:5c:
                    8c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:3D:28:F1:9A:A8:08:B9:C3:88:77:07:45:B8:9C:DC:B0:3C:1A:6D
            X509v3 Authority Key Identifier:
                keyid:AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/AFA55E041FA0E5D394A1480902275296B12C222A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232382e302f32322d3232203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:a0:21:c2:ce:1f:49:ad:ea:49:12:4a:af:10:4f:03:05:26:
         24:8f:36:be:38:f5:34:7b:07:61:ea:7b:27:a6:c8:4b:4d:d2:
         56:3c:f5:8f:9a:d8:fa:cc:0f:33:41:fc:ba:2f:0b:25:53:cb:
         3e:76:e3:92:d7:e7:b4:78:15:f9:90:cc:fa:bf:37:27:94:5a:
         ea:6c:8c:29:39:f7:8f:96:c1:d0:54:b5:46:9e:42:fd:e5:85:
         66:8b:8e:ce:83:6c:e0:95:f1:82:2f:9b:02:b6:68:6e:39:15:
         ff:67:86:ea:45:e9:3a:19:2a:37:c6:f0:2a:41:df:8f:53:e1:
         c6:e4:01:cb:b9:82:88:cf:0b:04:ea:1c:dd:29:02:ca:ac:42:
         0f:0b:c2:89:96:0a:4f:84:b3:ba:42:8e:46:b2:ee:27:c1:c7:
         80:e5:ed:17:ee:ec:7c:e3:5f:e7:d7:dc:e6:90:9c:91:16:36:
         d9:11:e4:1e:dc:1a:61:5a:65:d6:6c:4f:94:31:46:12:cc:b5:
         ce:3b:5e:1b:46:a0:e1:40:5e:ed:e5:25:69:e5:9d:a2:c5:fe:
         6a:c7:d0:01:ad:59:2b:5d:3f:5e:5d:28:cd:a4:91:e5:4b:18:
         20:f0:fc:90:d3:e8:97:c1:3f:cd:39:03:52:0b:a5:89:a8:10:
         f3:e5:0f:b2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUGQQeiCqW/IPuSgqpGUWafpf/a7AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUZBNTVFMDQxRkEwRTVEMzk0QTE0ODA5MDIyNzUyOTZC
MTJDMjIyQTAeFw0yNTAyMjYxOTMxMjRaFw0yNjAyMjUxOTM2MjRaMDMxMTAvBgNV
BAMTKDJDM0QyOEYxOUFBODA4QjlDMzg4NzcwNzQ1Qjg5Q0RDQjAzQzFBNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqlIY8RG0MrBIb7+EKCoKX158e
927QdxKHYCq9AxR3zidNqsZ5T9Y+Fjxy7cufY14eJTmpJ3s09mel0EcRKgfQQZdy
OjOfzFRuNFnPzey3ZSkKYEtWWalRE3liFtnK8Vg5PJbNSdrkRFzNwk4V/+uJG1pT
69F70lHRUe3JudEMIE2joeGUc5C0FqE6Msh2x3lcudT/jz3e998rE6xLuQuLW8tx
DxPqVEoHAUHJMTVAzqio0ItyqMXRVq/K+AOZlQdiEssBojkzpZ6Rzr/hA4APquT1
XxsPX9gcgHZOE3pGWOL4ut0EmO6WV/xdCprIAm3v6/qIAul3OvfsjT81XIx9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQULD0o8ZqoCLnDiHcHRbic3LA8Gm0wHwYDVR0j
BBgwFoAUr6VeBB+g5dOUoUgJAidSlrEsIiowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU1lNzgyWWFacUV3V0YzdVBFSzlrR0g3b0E4a0FzRjlSa2lxdDZUZGpR
QjkvMC9BRkE1NUUwNDFGQTBFNUQzOTRBMTQ4MDkwMjI3NTI5NkIxMkMyMjJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGQTU1RTA0MUZBMEU1RDM5
NEExNDgwOTAyMjc1Mjk2QjEyQzIyMkEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlNZTc4MllhWnFFd1dGM3VQRUs5a0dIN29BOGtBc0Y5UmtpcXQ2VGRqUUI5LzAv
MzEzNzM3MmUzNzM1MmUzMjMyMzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNjMx
MzgzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsUvkMA0GCSqGSIb3DQEBCwUAA4IBAQAcoCHCzh9J
repJEkqvEE8DBSYkjza+OPU0ewdh6nsnpshLTdJWPPWPmtj6zA8zQfy6LwslU8s+
duOS1+e0eBX5kMz6vzcnlFrqbIwpOfePlsHQVLVGnkL95YVmi47Og2zglfGCL5sC
tmhuORX/Z4bqRek6GSo3xvAqQd+PU+HG5AHLuYKIzwsE6hzdKQLKrEIPC8KJlgpP
hLO6Qo5Gsu4nwceA5e0X7ux841/n19zmkJyRFjbZEeQe3BphWmXWbE+UMUYSzLXO
O14bRqDhQF7t5SVp5Z2ixf5qx9ABrVkrXT9eXSjNpJHlSxgg8PyQ0+iXwT/NOQNS
C6WJqBDz5Q+y
-----END CERTIFICATE-----
Generated at Wed Apr 9 20:00:19 2025 by rpki-client