Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232392e302f32342d3234203d3e203631383531.roa
File:                     3137372e37352e3232392e302f32342d3234203d3e203631383531.roa (raw, json)
Hash identifier:          5FmOtuy68DyfItBxQCCf6zYS/jlo49so2kagWJB7r8A=
Subject key identifier:   B1:6B:6A:13:E1:C0:E3:39:D2:73:BC:02:94:AD:BF:44:D3:3A:E2:13
Certificate issuer:       /CN=AFA55E041FA0E5D394A1480902275296B12C222A
Certificate serial:       09A1E3F85C5A5812F35142A7ACF52B2D0F932315
Authority key identifier: AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232392e302f32342d3234203d3e203631383531.roa
Signing time:             Wed 26 Feb 2025 19:36:20 +0000
ROA not before:           Wed 26 Feb 2025 19:31:20 +0000
ROA not after:            Wed 25 Feb 2026 19:36:20 +0000
asID:                     61851
IP address blocks:        177.75.229.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:a1:e3:f8:5c:5a:58:12:f3:51:42:a7:ac:f5:2b:2d:0f:93:23:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFA55E041FA0E5D394A1480902275296B12C222A
        Validity
            Not Before: Feb 26 19:31:20 2025 GMT
            Not After : Feb 25 19:36:20 2026 GMT
        Subject: CN=B16B6A13E1C0E339D273BC0294ADBF44D33AE213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:51:d9:97:7a:9e:06:19:03:c6:62:d7:bc:97:
                    a4:e5:65:e9:d9:ac:8c:c0:90:54:de:ce:29:70:f6:
                    db:b0:82:69:20:cb:36:bb:1e:3d:68:8d:d0:ca:89:
                    4a:b6:a0:a8:82:a0:d3:23:d7:80:2e:e2:9a:84:9a:
                    9c:b6:db:e4:96:87:ca:e5:f9:9c:49:9d:58:be:6c:
                    30:62:61:17:b5:9b:ae:ae:d6:08:59:19:70:37:86:
                    ce:03:9a:e4:32:16:a2:15:27:25:18:f8:a7:a4:b9:
                    a5:52:31:3d:9f:55:73:af:1e:c5:31:41:12:8c:ea:
                    8b:ad:ba:de:25:ed:be:a4:a3:21:3e:0d:fc:bf:3b:
                    a9:44:79:e7:36:e3:03:87:ec:9d:29:7f:ca:83:a7:
                    fb:64:8a:89:e9:d6:49:1f:a5:ba:88:d0:e6:3f:f0:
                    b8:ae:e0:cd:42:0c:55:f2:fb:b3:1a:c1:cc:a5:46:
                    e6:b0:cb:ec:1d:5c:ef:09:ed:4f:54:c6:63:d0:2c:
                    b1:60:50:28:63:a6:40:bc:fa:26:12:27:b3:80:cf:
                    30:f2:80:1a:64:9b:9f:fe:e4:bd:6b:ed:36:5d:8c:
                    c5:15:92:ac:fc:38:f8:44:b9:9c:18:33:18:60:c4:
                    6b:a9:0b:77:78:a9:0c:88:21:0d:96:1c:73:df:d0:
                    83:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:6B:6A:13:E1:C0:E3:39:D2:73:BC:02:94:AD:BF:44:D3:3A:E2:13
            X509v3 Authority Key Identifier:
                keyid:AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/AFA55E041FA0E5D394A1480902275296B12C222A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232392e302f32342d3234203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:33:fa:be:b0:79:59:00:e0:ea:09:3d:0a:69:2c:0e:50:36:
         b6:06:b6:0b:a2:5b:41:0e:61:a4:e4:68:33:96:7c:18:27:f0:
         da:16:74:35:65:70:7a:46:16:9c:51:63:dd:bc:7d:d6:4d:47:
         0d:11:13:e8:0f:f0:4b:47:d7:8b:bc:8a:d8:49:09:0a:df:8e:
         f1:06:65:de:36:30:c3:cf:bb:ec:34:84:37:b2:3f:3d:32:dd:
         b2:13:27:4d:03:e2:d8:c1:ad:9f:a3:d8:a4:3c:ef:d2:42:77:
         f1:64:33:4f:47:8c:95:78:08:74:77:fa:d1:7d:86:7e:fd:c9:
         ed:12:69:23:14:51:f2:ab:9e:df:49:7c:9c:2c:3a:4f:4b:d3:
         7f:a9:08:ea:71:fc:c9:3a:62:90:fc:5a:d4:ba:de:5f:d1:9a:
         cf:b4:ba:a9:d0:7d:e1:f4:00:50:7b:57:d5:ab:0e:0c:d2:2f:
         2f:b2:70:85:f5:5a:c9:35:15:94:8e:a6:53:b7:98:22:bb:0c:
         cd:a6:94:33:cb:ff:88:32:41:b3:b3:50:9c:c2:f3:46:2f:bf:
         43:e5:e3:10:73:ae:e6:dd:18:75:58:ff:ed:dd:3a:47:8d:0f:
         aa:45:ce:ca:67:e5:b3:14:5e:2d:85:69:27:73:a1:a4:b5:d0:
         1c:17:ad:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:02:47 2025 by rpki-client