Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233332e302f32342d3234203d3e203631383531.roa
File:                     3137372e37352e3233332e302f32342d3234203d3e203631383531.roa (raw, json)
Hash identifier:          BbWclMt1tRk6mT+pJZjNXUTKb3/KRPKfvfSwbpcSaMc=
Subject key identifier:   20:91:BC:B1:C8:69:BB:3A:F3:13:7D:40:2B:D3:78:2C:E2:C0:37:35
Certificate issuer:       /CN=AFA55E041FA0E5D394A1480902275296B12C222A
Certificate serial:       1748AD19968CA95211A9F245822A73270C98A3BA
Authority key identifier: AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233332e302f32342d3234203d3e203631383531.roa
Signing time:             Wed 26 Feb 2025 19:36:26 +0000
ROA not before:           Wed 26 Feb 2025 19:31:26 +0000
ROA not after:            Wed 25 Feb 2026 19:36:26 +0000
asID:                     61851
IP address blocks:        177.75.233.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:48:ad:19:96:8c:a9:52:11:a9:f2:45:82:2a:73:27:0c:98:a3:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFA55E041FA0E5D394A1480902275296B12C222A
        Validity
            Not Before: Feb 26 19:31:26 2025 GMT
            Not After : Feb 25 19:36:26 2026 GMT
        Subject: CN=2091BCB1C869BB3AF3137D402BD3782CE2C03735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d8:7f:bb:c1:01:66:58:da:f7:ba:63:b4:9a:
                    5d:e8:88:ef:51:5b:10:45:e9:3f:87:f0:dc:89:31:
                    a6:ea:d8:c2:c2:81:ed:7b:7d:95:31:26:5e:d8:5c:
                    e9:d4:bc:79:8e:44:2e:99:24:b1:0e:55:c6:67:54:
                    e6:f2:b1:fb:94:5c:c7:98:c1:a4:a7:41:ab:e5:74:
                    dd:98:2d:49:86:93:ec:2c:dc:3b:b7:80:5f:2f:dc:
                    6f:39:df:9c:9a:dd:9e:03:40:4f:f3:f6:7d:dd:a3:
                    36:da:30:93:5c:a2:8f:53:65:e0:fc:62:df:1f:08:
                    5a:61:91:7d:91:ce:89:3f:45:97:ca:a7:7e:96:51:
                    c0:f2:e7:a7:d9:cd:1a:d7:1f:b8:f5:3f:f4:5c:6a:
                    96:9a:07:5d:95:42:90:72:68:c1:fb:e9:d0:c6:7d:
                    fe:24:27:a3:ac:ae:72:df:f9:c3:4c:d3:b6:47:2a:
                    b7:e7:3d:f7:5e:d0:dd:ea:34:0b:1d:68:81:ab:d5:
                    21:11:36:88:a1:26:73:54:77:0e:40:36:19:39:71:
                    28:46:f1:8a:f2:01:4c:c9:97:af:98:05:4e:63:e6:
                    2a:2d:e3:aa:93:4d:bc:ef:18:61:ad:af:6e:e8:e7:
                    4a:1c:60:a5:0a:9a:dc:37:50:84:1e:cd:7c:5c:1e:
                    e4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:91:BC:B1:C8:69:BB:3A:F3:13:7D:40:2B:D3:78:2C:E2:C0:37:35
            X509v3 Authority Key Identifier:
                keyid:AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/AFA55E041FA0E5D394A1480902275296B12C222A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233332e302f32342d3234203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:9c:4b:e6:51:e2:60:24:e1:8a:40:5b:42:07:c6:12:eb:68:
         e4:d2:ca:45:de:0a:6a:aa:26:dc:ad:d4:74:cf:48:7e:ba:43:
         fe:a2:a0:6b:32:d3:c2:dd:6b:ef:5a:e4:16:30:78:4b:cd:6e:
         f9:d3:89:da:2c:e0:54:8f:4e:ca:1a:5a:51:50:ff:a5:6a:0e:
         22:ab:b1:de:79:61:23:10:c4:07:84:51:89:1c:c4:0e:b5:e6:
         09:79:a6:e0:22:4d:9d:91:c4:c7:3f:0a:61:4b:66:ae:87:c7:
         e9:93:71:a1:66:8d:72:2b:21:90:42:45:35:94:65:f8:22:95:
         e4:84:54:b6:88:e9:47:87:c1:c4:0a:cc:7d:15:56:a2:69:29:
         f0:2e:da:90:72:93:48:17:a6:6a:ce:a7:37:e2:b1:c8:84:a9:
         65:e5:77:4d:5f:dc:2d:1d:c6:f0:b7:b1:fb:11:a5:96:05:22:
         de:6b:ec:10:b8:ab:d1:ef:7c:46:44:57:fb:dd:63:d5:26:e7:
         8f:e3:f4:4d:39:0a:fb:58:4b:07:0c:fb:37:0f:e5:c8:5a:b0:
         ae:b4:66:e0:06:d5:b4:ec:7c:e7:4e:87:20:a2:23:9f:e2:64:
         87:4d:54:a8:76:f5:99:78:fa:1a:53:81:fa:84:56:12:61:fa:
         5d:c3:54:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:05:20 2025 by rpki-client