Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233362e302f32322d3232203d3e203631383531.roa
File:                     3137372e37352e3233362e302f32322d3232203d3e203631383531.roa (raw, json)
Hash identifier:          L7oGXIKwA6Goo/b8+3+bcuyu3wmrz1SaAwll2td8M6M=
Subject key identifier:   D0:B9:52:34:D6:C1:57:E7:8D:EA:78:2A:2F:F0:8C:18:81:9B:14:1E
Certificate issuer:       /CN=AFA55E041FA0E5D394A1480902275296B12C222A
Certificate serial:       499B157ADF73190B67C2E4A5F2EBD39263917D27
Authority key identifier: AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233362e302f32322d3232203d3e203631383531.roa
Signing time:             Wed 26 Feb 2025 19:36:26 +0000
ROA not before:           Wed 26 Feb 2025 19:31:26 +0000
ROA not after:            Wed 25 Feb 2026 19:36:26 +0000
asID:                     61851
IP address blocks:        177.75.236.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:9b:15:7a:df:73:19:0b:67:c2:e4:a5:f2:eb:d3:92:63:91:7d:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFA55E041FA0E5D394A1480902275296B12C222A
        Validity
            Not Before: Feb 26 19:31:26 2025 GMT
            Not After : Feb 25 19:36:26 2026 GMT
        Subject: CN=D0B95234D6C157E78DEA782A2FF08C18819B141E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:77:4f:3b:5e:76:46:72:a7:c2:db:ef:3d:42:
                    40:02:27:ad:33:0c:bb:b2:84:30:4a:3b:18:7f:9b:
                    12:aa:76:10:9b:1e:a3:61:fc:70:32:e1:0f:3b:9c:
                    cc:8e:23:df:88:19:1f:f2:fc:3c:11:17:7c:41:d2:
                    a3:02:bb:0c:18:54:6d:43:38:9a:b2:55:c5:ca:42:
                    40:77:aa:a6:63:4a:ab:c8:97:2d:60:20:1a:11:8b:
                    d1:d5:fc:fe:8d:a8:ef:6b:47:dc:24:d7:f4:91:c7:
                    1d:50:e3:6c:ad:ea:8c:78:a0:33:59:4e:ff:12:8f:
                    2b:f0:69:34:3b:25:c5:9d:2d:3f:78:27:b3:70:2f:
                    dc:0e:64:ba:9a:f3:29:6d:ac:46:43:f4:c7:04:64:
                    e4:f3:e3:42:fc:e9:4b:62:ae:0f:1f:c2:5d:86:27:
                    86:71:34:32:29:12:2a:d3:7f:e5:90:f5:49:9d:a6:
                    2c:aa:d1:bc:e5:1a:e2:77:51:08:5d:5d:bc:57:1a:
                    3b:64:41:f1:58:39:5e:5e:d9:46:dd:c5:dc:0a:5b:
                    e8:07:47:1b:4e:f3:6d:2a:01:23:bc:f1:6d:dc:ef:
                    8e:22:c0:b0:d9:07:0d:6d:df:de:fe:6d:c1:05:16:
                    76:44:ee:b3:27:a2:bf:45:6b:07:f0:a9:7e:7a:fe:
                    35:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B9:52:34:D6:C1:57:E7:8D:EA:78:2A:2F:F0:8C:18:81:9B:14:1E
            X509v3 Authority Key Identifier:
                keyid:AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/AFA55E041FA0E5D394A1480902275296B12C222A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233362e302f32322d3232203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:2a:57:14:7e:d3:9a:47:dc:c2:e8:61:1c:b5:10:32:2e:ed:
         35:d4:b5:3e:ba:73:f0:d0:b6:ae:93:41:78:67:3b:db:33:00:
         91:31:78:b5:fc:3b:fb:23:a8:49:73:70:da:42:f6:d3:c6:4c:
         01:95:8f:12:56:4b:bc:53:e3:b2:cf:7a:35:f8:87:72:39:4c:
         f3:aa:a9:86:f4:f3:41:04:1c:f5:51:bb:55:55:5b:9d:e0:12:
         e5:79:31:52:39:40:42:d7:3a:03:1b:32:be:44:f5:83:56:f8:
         b6:c0:2f:40:7d:d5:e6:69:77:08:57:be:06:8c:da:3f:40:46:
         c2:39:6b:99:82:ca:c3:d5:24:70:d6:98:a6:43:fc:78:66:b6:
         6c:45:ae:2e:2e:78:15:03:2d:ea:0c:08:de:67:c2:5a:05:d8:
         8c:d1:e0:9f:b8:63:0e:3e:d0:2b:67:8d:8a:1a:89:d2:ce:62:
         9c:85:a6:70:46:37:91:c4:66:34:91:10:98:4f:57:0c:2e:bf:
         88:2a:6b:b9:e3:8f:59:e5:d1:2b:8a:3d:4e:f4:ac:61:fb:a7:
         85:c7:2c:f4:ba:d3:c0:3c:cc:58:38:ac:35:be:18:a1:da:ec:
         a7:da:68:98:d8:e8:25:e4:b1:8b:d3:d7:eb:9a:44:77:5e:fd:
         9b:fe:63:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:00:19 2025 by rpki-client