Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233372e302f32342d3234203d3e203631383531.roa
File:                     3137372e37352e3233372e302f32342d3234203d3e203631383531.roa (raw, json)
Hash identifier:          xVaK7oF+UELYNIqCJ1WiyB7oXpV+VR/srBMe4ZDsFbU=
Subject key identifier:   1E:6F:C7:76:C4:4A:83:CB:27:DB:9D:35:D9:37:24:9B:8D:AE:0C:C7
Certificate issuer:       /CN=AFA55E041FA0E5D394A1480902275296B12C222A
Certificate serial:       161B818AA938EB4BCCBD8F8CFD29E0636C039712
Authority key identifier: AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233372e302f32342d3234203d3e203631383531.roa
Signing time:             Wed 26 Feb 2025 19:36:23 +0000
ROA not before:           Wed 26 Feb 2025 19:31:23 +0000
ROA not after:            Wed 25 Feb 2026 19:36:23 +0000
asID:                     61851
IP address blocks:        177.75.237.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:1b:81:8a:a9:38:eb:4b:cc:bd:8f:8c:fd:29:e0:63:6c:03:97:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFA55E041FA0E5D394A1480902275296B12C222A
        Validity
            Not Before: Feb 26 19:31:23 2025 GMT
            Not After : Feb 25 19:36:23 2026 GMT
        Subject: CN=1E6FC776C44A83CB27DB9D35D937249B8DAE0CC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3b:69:d6:63:c1:7c:a1:49:26:e4:9f:de:b4:
                    30:69:38:d5:df:5a:d6:59:01:de:d6:2c:eb:67:f0:
                    1d:d3:82:49:27:cc:a0:94:00:c7:4a:7e:78:5b:53:
                    24:fc:0a:cb:3c:56:0a:61:a1:b9:2f:d7:78:8e:3a:
                    40:2b:51:a7:59:b6:77:12:3a:16:59:2c:24:df:47:
                    e2:6b:59:52:ac:bd:80:73:2f:24:3e:7b:76:3a:c8:
                    fd:8e:d6:69:9a:e4:7c:9f:dd:86:60:d9:5a:38:1f:
                    42:62:cf:59:a4:53:bb:a9:63:7b:5b:7b:52:52:47:
                    bb:21:05:43:3b:b0:12:31:60:ea:2d:35:2b:82:82:
                    f4:0b:60:9b:d4:11:dd:01:4a:f5:11:5c:2c:61:5b:
                    a7:5b:95:22:ac:59:7d:88:84:7b:21:3e:7c:01:79:
                    fb:53:67:eb:29:15:8a:73:27:f1:fb:0e:22:3e:c7:
                    d1:60:c6:8b:e3:7d:47:1e:e4:14:ee:56:27:0b:a2:
                    34:f0:37:e7:09:90:8e:5f:c5:8f:fa:70:1a:89:2a:
                    cf:d4:51:46:69:a8:3e:72:7b:b1:d5:5e:86:db:c4:
                    d2:ad:8b:5e:f8:e4:4a:f3:68:b3:8b:f1:26:58:da:
                    44:87:90:cd:6a:08:c2:55:a9:3d:8e:19:15:ff:ab:
                    53:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:6F:C7:76:C4:4A:83:CB:27:DB:9D:35:D9:37:24:9B:8D:AE:0C:C7
            X509v3 Authority Key Identifier:
                keyid:AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/AFA55E041FA0E5D394A1480902275296B12C222A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233372e302f32342d3234203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:f2:43:98:8a:e3:24:06:34:72:65:23:95:5e:15:a8:78:2a:
         01:10:fa:d3:fa:f1:ec:17:19:94:46:bc:fe:88:89:67:89:9f:
         3d:54:fb:e3:d1:2a:10:cf:1a:0e:ca:34:e1:ea:61:e9:f3:76:
         f7:0b:0d:18:04:66:12:67:4f:56:21:6c:01:5c:28:89:aa:09:
         61:30:73:1c:0e:99:d4:a3:68:34:29:dd:57:08:ba:a2:a0:0e:
         bc:3c:dc:3e:37:3f:f5:68:9a:5c:7e:6a:f0:bb:80:37:84:31:
         a2:f7:89:13:5f:3a:e2:dd:2e:96:cf:62:ac:9a:c9:cd:d8:e4:
         18:bf:06:ba:59:07:a6:31:cf:d4:92:86:33:ba:ce:56:e8:50:
         c4:a6:59:e9:87:78:6f:bf:d2:9e:8e:1f:bd:69:3d:73:f1:53:
         5f:92:92:74:68:53:6e:ad:6b:c9:b8:d1:9b:7f:11:d0:e6:0a:
         4d:8d:5b:df:7e:7f:bc:11:eb:d5:86:cb:cd:77:a9:e4:2c:1e:
         bc:6f:81:be:d2:8a:35:88:2e:c2:fd:db:22:25:50:4a:3d:ef:
         17:37:cd:54:34:2a:a7:66:60:3b:2b:5a:fe:c0:3c:d1:c7:b7:
         2c:a3:6f:c4:dc:19:19:1d:c5:b7:6d:69:bc:21:81:fb:b2:34:
         96:4d:ee:c2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUFhuBiqk460vMvY+M/SngY2wDlxIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUZBNTVFMDQxRkEwRTVEMzk0QTE0ODA5MDIyNzUyOTZC
MTJDMjIyQTAeFw0yNTAyMjYxOTMxMjNaFw0yNjAyMjUxOTM2MjNaMDMxMTAvBgNV
BAMTKDFFNkZDNzc2QzQ0QTgzQ0IyN0RCOUQzNUQ5MzcyNDlCOERBRTBDQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5O2nWY8F8oUkm5J/etDBpONXf
WtZZAd7WLOtn8B3TgkknzKCUAMdKfnhbUyT8Css8Vgphobkv13iOOkArUadZtncS
OhZZLCTfR+JrWVKsvYBzLyQ+e3Y6yP2O1mma5Hyf3YZg2Vo4H0Jiz1mkU7upY3tb
e1JSR7shBUM7sBIxYOotNSuCgvQLYJvUEd0BSvURXCxhW6dblSKsWX2IhHshPnwB
eftTZ+spFYpzJ/H7DiI+x9FgxovjfUce5BTuVicLojTwN+cJkI5fxY/6cBqJKs/U
UUZpqD5ye7HVXobbxNKti1745ErzaLOL8SZY2kSHkM1qCMJVqT2OGRX/q1MbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUHm/HdsRKg8sn25012Tckm42uDMcwHwYDVR0j
BBgwFoAUr6VeBB+g5dOUoUgJAidSlrEsIiowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU1lNzgyWWFacUV3V0YzdVBFSzlrR0g3b0E4a0FzRjlSa2lxdDZUZGpR
QjkvMC9BRkE1NUUwNDFGQTBFNUQzOTRBMTQ4MDkwMjI3NTI5NkIxMkMyMjJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGQTU1RTA0MUZBMEU1RDM5
NEExNDgwOTAyMjc1Mjk2QjEyQzIyMkEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlNZTc4MllhWnFFd1dGM3VQRUs5a0dIN29BOGtBc0Y5UmtpcXQ2VGRqUUI5LzAv
MzEzNzM3MmUzNzM1MmUzMjMzMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzgzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsUvtMA0GCSqGSIb3DQEBCwUAA4IBAQC38kOYiuMk
BjRyZSOVXhWoeCoBEPrT+vHsFxmURrz+iIlniZ89VPvj0SoQzxoOyjTh6mHp83b3
Cw0YBGYSZ09WIWwBXCiJqglhMHMcDpnUo2g0Kd1XCLqioA68PNw+Nz/1aJpcfmrw
u4A3hDGi94kTXzri3S6Wz2KsmsnN2OQYvwa6WQemMc/UkoYzus5W6FDEplnph3hv
v9Kejh+9aT1z8VNfkpJ0aFNurWvJuNGbfxHQ5gpNjVvffn+8EevVhsvNd6nkLB68
b4G+0oo1iC7C/dsiJVBKPe8XN81UNCqnZmA7K1r+wDzRx7cso2/E3BkZHcW3bWm8
IYH7sjSWTe7C
-----END CERTIFICATE-----
Generated at Wed Apr 9 20:05:21 2025 by rpki-client