Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233352e302f32342d3234203d3e203631383531.roa
File:                     3137372e37352e3233352e302f32342d3234203d3e203631383531.roa (raw, json)
Hash identifier:          Oi1Vd9tKV6CTiJqAbZFS++OjtUck7nUUhupwztWBqqc=
Subject key identifier:   03:85:E2:DA:5E:FE:A4:E0:87:0A:D8:E6:D4:41:87:C8:57:E4:E9:FB
Certificate issuer:       /CN=AFA55E041FA0E5D394A1480902275296B12C222A
Certificate serial:       6F576A9BCC1FB2E384EA1D975FCE219BCCB82073
Authority key identifier: AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233352e302f32342d3234203d3e203631383531.roa
Signing time:             Wed 26 Feb 2025 19:36:25 +0000
ROA not before:           Wed 26 Feb 2025 19:31:25 +0000
ROA not after:            Wed 25 Feb 2026 19:36:25 +0000
asID:                     61851
IP address blocks:        177.75.235.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:57:6a:9b:cc:1f:b2:e3:84:ea:1d:97:5f:ce:21:9b:cc:b8:20:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFA55E041FA0E5D394A1480902275296B12C222A
        Validity
            Not Before: Feb 26 19:31:25 2025 GMT
            Not After : Feb 25 19:36:25 2026 GMT
        Subject: CN=0385E2DA5EFEA4E0870AD8E6D44187C857E4E9FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fb:1c:b1:84:b2:55:39:83:3d:b5:ed:ba:5d:
                    fc:4b:d5:dc:57:87:12:49:19:e5:be:42:52:a4:2f:
                    c0:40:03:b7:86:01:3d:78:3b:d9:ee:c5:6b:54:d3:
                    30:8a:aa:03:06:ce:9b:06:05:4f:e3:a2:b9:70:53:
                    55:3a:cf:0a:e0:ad:e5:aa:8b:37:a6:7f:8a:e9:c4:
                    a2:6e:61:97:27:70:16:02:93:cc:e3:f5:c4:34:c7:
                    14:e6:7d:d6:4b:e7:ce:ba:31:75:a9:af:21:55:a3:
                    53:bf:be:1b:6d:79:fc:17:be:2b:71:0f:ad:29:5f:
                    c9:bd:61:97:3d:3a:63:38:c1:09:c7:30:46:d8:c9:
                    b7:8c:22:dc:3d:35:91:35:3d:97:e3:44:67:9b:00:
                    fd:4d:50:c3:d3:e8:58:99:7e:33:5d:4d:ba:df:c1:
                    46:3b:25:9d:47:a7:47:7b:f7:05:b8:b9:87:b8:52:
                    1a:a6:e6:4d:91:dd:a0:a3:a6:b5:18:88:c6:eb:7d:
                    d0:bc:54:d6:1c:f0:01:d5:fe:76:69:29:76:28:0d:
                    95:5c:e2:b0:8a:90:5c:75:28:10:7d:a4:a2:02:ee:
                    8c:d5:c9:9c:8c:3a:68:cd:cb:ef:10:98:b4:8c:9a:
                    25:41:ec:50:b0:f5:81:36:4c:d1:3c:4e:ac:79:25:
                    07:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:85:E2:DA:5E:FE:A4:E0:87:0A:D8:E6:D4:41:87:C8:57:E4:E9:FB
            X509v3 Authority Key Identifier:
                keyid:AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/AFA55E041FA0E5D394A1480902275296B12C222A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233352e302f32342d3234203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:e5:e8:37:63:58:d0:31:75:d5:97:0e:6d:14:56:97:f8:fc:
         6a:f4:66:ae:e4:0c:05:63:e9:62:9f:5c:46:39:3e:11:c9:3b:
         6f:f5:2c:8e:17:33:99:ad:ce:28:89:99:16:79:56:ec:56:fd:
         17:79:4a:c1:bd:a6:0c:c9:df:46:9d:36:15:e3:09:a6:6c:4c:
         35:a5:f4:06:86:1a:dd:42:47:93:99:13:92:a7:a4:0a:97:64:
         0b:13:87:c8:6c:05:dd:11:55:dc:39:70:51:6b:f1:07:9f:c2:
         af:5a:cd:ba:c5:8a:64:0d:b2:41:31:ac:47:94:36:43:fa:0b:
         02:df:b6:ba:98:af:54:41:2d:e8:19:53:04:a4:06:2e:ca:d3:
         6d:98:cc:95:45:0b:ce:d8:e0:fd:92:5b:46:68:c0:0c:62:b6:
         05:e3:fb:34:13:5b:f0:a1:9e:73:ff:bf:4d:ed:01:98:17:74:
         55:07:8d:39:8d:cb:d4:a6:63:0f:e1:2d:89:e0:c5:63:80:53:
         8c:00:c2:9f:91:b7:4a:f5:2d:5b:4e:f9:75:c3:f8:c4:8c:bd:
         57:a2:28:66:28:e3:a7:6e:ea:8c:ff:cf:67:75:c6:4b:56:32:
         e7:df:b3:a7:24:b5:24:bc:d3:19:dc:21:5c:ab:33:35:f2:f4:
         6f:ed:8b:38
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUb1dqm8wfsuOE6h2XX84hm8y4IHMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUZBNTVFMDQxRkEwRTVEMzk0QTE0ODA5MDIyNzUyOTZC
MTJDMjIyQTAeFw0yNTAyMjYxOTMxMjVaFw0yNjAyMjUxOTM2MjVaMDMxMTAvBgNV
BAMTKDAzODVFMkRBNUVGRUE0RTA4NzBBRDhFNkQ0NDE4N0M4NTdFNEU5RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS+xyxhLJVOYM9te26XfxL1dxX
hxJJGeW+QlKkL8BAA7eGAT14O9nuxWtU0zCKqgMGzpsGBU/jorlwU1U6zwrgreWq
izemf4rpxKJuYZcncBYCk8zj9cQ0xxTmfdZL5866MXWpryFVo1O/vhttefwXvitx
D60pX8m9YZc9OmM4wQnHMEbYybeMItw9NZE1PZfjRGebAP1NUMPT6FiZfjNdTbrf
wUY7JZ1Hp0d79wW4uYe4Uhqm5k2R3aCjprUYiMbrfdC8VNYc8AHV/nZpKXYoDZVc
4rCKkFx1KBB9pKIC7ozVyZyMOmjNy+8QmLSMmiVB7FCw9YE2TNE8Tqx5JQfDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUA4Xi2l7+pOCHCtjm1EGHyFfk6fswHwYDVR0j
BBgwFoAUr6VeBB+g5dOUoUgJAidSlrEsIiowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU1lNzgyWWFacUV3V0YzdVBFSzlrR0g3b0E4a0FzRjlSa2lxdDZUZGpR
QjkvMC9BRkE1NUUwNDFGQTBFNUQzOTRBMTQ4MDkwMjI3NTI5NkIxMkMyMjJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGQTU1RTA0MUZBMEU1RDM5
NEExNDgwOTAyMjc1Mjk2QjEyQzIyMkEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlNZTc4MllhWnFFd1dGM3VQRUs5a0dIN29BOGtBc0Y5UmtpcXQ2VGRqUUI5LzAv
MzEzNzM3MmUzNzM1MmUzMjMzMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzgzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsUvrMA0GCSqGSIb3DQEBCwUAA4IBAQAd5eg3Y1jQ
MXXVlw5tFFaX+Pxq9Gau5AwFY+lin1xGOT4RyTtv9SyOFzOZrc4oiZkWeVbsVv0X
eUrBvaYMyd9GnTYV4wmmbEw1pfQGhhrdQkeTmROSp6QKl2QLE4fIbAXdEVXcOXBR
a/EHn8KvWs26xYpkDbJBMaxHlDZD+gsC37a6mK9UQS3oGVMEpAYuytNtmMyVRQvO
2OD9kltGaMAMYrYF4/s0E1vwoZ5z/79N7QGYF3RVB405jcvUpmMP4S2J4MVjgFOM
AMKfkbdK9S1bTvl1w/jEjL1XoihmKOOnbuqM/89ndcZLVjLn37OnJLUkvNMZ3CFc
qzM18vRv7Ys4
-----END CERTIFICATE-----
Generated at Wed Apr 9 20:05:20 2025 by rpki-client