Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233322e302f32312d3231203d3e203631383531.roa
File:                     3137372e37352e3233322e302f32312d3231203d3e203631383531.roa (raw, json)
Hash identifier:          GLWs2Au+X/0AfFHyU7jTFKVUXR9/Vlkg8Dm5FiWAIYw=
Subject key identifier:   BE:56:44:22:99:FF:82:82:3C:F5:71:45:35:8C:AA:9E:86:6C:66:B5
Certificate issuer:       /CN=AFA55E041FA0E5D394A1480902275296B12C222A
Certificate serial:       70453246B9ADC55983FDBA8E98AA7861D8EDE3F6
Authority key identifier: AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233322e302f32312d3231203d3e203631383531.roa
Signing time:             Wed 26 Feb 2025 19:36:27 +0000
ROA not before:           Wed 26 Feb 2025 19:31:27 +0000
ROA not after:            Wed 25 Feb 2026 19:36:27 +0000
asID:                     61851
IP address blocks:        177.75.232.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:45:32:46:b9:ad:c5:59:83:fd:ba:8e:98:aa:78:61:d8:ed:e3:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFA55E041FA0E5D394A1480902275296B12C222A
        Validity
            Not Before: Feb 26 19:31:27 2025 GMT
            Not After : Feb 25 19:36:27 2026 GMT
        Subject: CN=BE56442299FF82823CF57145358CAA9E866C66B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:80:fe:9e:b3:55:53:e0:25:d6:bd:f3:f6:56:
                    d6:14:7e:77:5b:cb:e5:4a:9b:ab:53:b3:cd:ed:7d:
                    a0:23:9d:1f:6e:e9:c9:14:77:01:ef:9e:3b:d0:1a:
                    e1:8e:52:f1:91:32:e1:ae:69:41:e7:f3:92:db:4d:
                    35:00:60:18:65:82:a8:d1:98:30:73:7d:86:ef:f1:
                    dc:63:b0:5a:60:9d:38:31:22:d0:63:e9:fd:22:42:
                    b7:24:86:93:28:f8:a5:02:8f:52:53:f0:ab:16:41:
                    2b:b7:31:1e:00:96:e2:0c:43:22:aa:a8:15:08:2a:
                    02:7c:03:3b:32:7d:33:a4:5e:2c:f3:5a:cb:9e:25:
                    f4:e1:26:aa:05:e6:5f:85:a9:ca:85:90:0b:64:1e:
                    c5:00:13:e8:ff:bc:90:cd:83:bf:d7:7a:8b:be:45:
                    62:3f:0b:a8:5e:ae:a0:c1:f1:62:c1:d0:d6:95:0b:
                    1b:13:0c:69:2b:16:55:56:09:7d:0a:30:a7:df:95:
                    75:a0:76:01:7e:31:a9:a7:a4:d6:8b:9b:06:9a:26:
                    0d:4c:2d:f4:a9:29:c0:b4:a9:fc:9e:35:bb:46:31:
                    43:ca:10:14:6e:ff:8d:01:c5:8d:fb:42:34:b4:04:
                    06:ef:2e:66:99:5f:1e:33:74:7c:dd:4e:5e:ec:f7:
                    19:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:56:44:22:99:FF:82:82:3C:F5:71:45:35:8C:AA:9E:86:6C:66:B5
            X509v3 Authority Key Identifier:
                keyid:AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/AFA55E041FA0E5D394A1480902275296B12C222A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233322e302f32312d3231203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         75:0f:ef:e1:f6:ac:ae:8f:5b:c6:da:3d:56:78:95:84:52:e9:
         2f:12:d1:fe:dd:75:b0:4d:6c:3e:9d:d4:cf:98:87:57:85:da:
         f4:45:7e:f4:74:88:ca:93:da:04:b2:33:bc:50:be:64:d5:ea:
         21:e8:48:39:36:9f:44:c5:67:63:0b:3a:0d:bd:71:b8:a6:2d:
         c4:0b:96:29:ea:89:8d:e0:7b:38:17:6c:21:88:8d:e2:3b:f0:
         81:b2:1c:32:60:1b:8a:90:96:d4:25:02:a8:42:47:7f:5e:b0:
         70:79:af:74:9a:4b:43:43:8f:7a:ca:16:54:b8:b8:b1:e6:2f:
         a5:a7:32:dc:20:e8:19:d5:ed:11:ff:07:95:74:4e:3f:a5:05:
         13:8d:14:a7:d9:06:92:be:40:21:09:a7:8a:a8:99:47:71:d0:
         46:43:4f:c7:07:c0:64:22:33:d7:85:98:59:bc:d4:d1:c5:3f:
         5f:31:92:79:e1:bb:6f:bc:bc:b8:82:31:99:7e:a8:9c:e2:8d:
         00:80:5a:1d:fe:64:ac:bf:3e:f4:66:47:f1:21:8b:67:5d:6c:
         1b:16:ac:d1:ac:2c:46:be:a0:53:40:6c:29:2e:b0:dc:22:a9:
         36:c9:a8:32:2c:1a:01:d9:1c:2e:94:39:b7:69:4e:1f:56:b2:
         03:13:97:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 06:10:27 2025 by rpki-client