Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233382e302f32342d3234203d3e203631383531.roa
File:                     3137372e37352e3233382e302f32342d3234203d3e203631383531.roa (raw, json)
Hash identifier:          aQoYFlD+hwqNLQkEJUNRhGljtzXhQnU0NoS2t1uuRXs=
Subject key identifier:   87:DC:F7:3F:4E:52:70:EB:92:34:3F:FC:1B:0E:3B:C0:CF:48:EC:3D
Certificate issuer:       /CN=AFA55E041FA0E5D394A1480902275296B12C222A
Certificate serial:       2034E8BB6E6EEB10AE787040E7E0B0558EE55B97
Authority key identifier: AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233382e302f32342d3234203d3e203631383531.roa
Signing time:             Wed 26 Feb 2025 19:36:22 +0000
ROA not before:           Wed 26 Feb 2025 19:31:22 +0000
ROA not after:            Wed 25 Feb 2026 19:36:22 +0000
asID:                     61851
IP address blocks:        177.75.238.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:34:e8:bb:6e:6e:eb:10:ae:78:70:40:e7:e0:b0:55:8e:e5:5b:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFA55E041FA0E5D394A1480902275296B12C222A
        Validity
            Not Before: Feb 26 19:31:22 2025 GMT
            Not After : Feb 25 19:36:22 2026 GMT
        Subject: CN=87DCF73F4E5270EB92343FFC1B0E3BC0CF48EC3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:be:3b:42:ec:73:5b:74:c3:6f:aa:12:45:da:
                    83:2c:d6:fe:76:a7:be:51:23:99:53:ca:76:fc:2a:
                    50:24:b3:8c:3a:d9:6a:91:85:aa:e0:06:8b:35:42:
                    02:e6:45:f0:d2:2b:89:62:6d:26:48:4c:4b:dc:b5:
                    bc:1f:21:43:b0:41:11:dd:20:3c:ab:6f:c2:b7:e6:
                    8e:ee:29:f8:99:a9:2b:6a:4c:0f:19:d6:b4:4e:97:
                    30:48:6b:0c:cb:cd:8b:74:85:af:b0:7e:b8:7b:22:
                    d3:a9:65:c2:86:9e:43:86:17:af:7f:8f:2c:7a:49:
                    e7:36:79:4c:bc:4a:ee:77:e6:b0:0a:4b:8f:6b:23:
                    f1:e2:4a:0b:6f:81:85:74:59:3b:bb:44:79:32:a4:
                    62:b5:98:3f:78:ce:83:dd:bd:6f:f0:e8:14:a5:06:
                    92:76:0c:48:db:e9:65:5f:fc:01:f0:90:17:5f:cd:
                    bd:38:34:ba:9c:d2:5b:5f:14:ce:95:03:66:23:99:
                    e0:35:f3:fd:17:ac:34:e7:64:89:01:5c:82:9b:97:
                    05:e4:f0:41:48:45:05:16:0b:cd:7f:1d:2b:ca:85:
                    b3:93:f3:77:ba:9c:40:35:f4:28:ae:fa:29:18:6a:
                    8a:4c:df:56:ce:fd:18:75:a2:97:9f:53:bf:30:10:
                    d9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:DC:F7:3F:4E:52:70:EB:92:34:3F:FC:1B:0E:3B:C0:CF:48:EC:3D
            X509v3 Authority Key Identifier:
                keyid:AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/AFA55E041FA0E5D394A1480902275296B12C222A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233382e302f32342d3234203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:41:91:6c:6b:da:07:e2:47:fe:bb:00:59:fe:1c:b6:ca:c6:
         47:52:3e:3b:e4:f7:63:af:48:ac:36:28:35:c6:88:95:c3:e7:
         a9:4c:45:0b:00:e1:b9:e4:67:23:9d:0b:47:1d:3a:ff:b4:66:
         88:6a:07:dc:d3:1f:23:b5:2c:93:4c:98:98:be:c0:b9:04:c5:
         3f:79:89:52:33:eb:96:28:42:bd:b2:a3:b7:03:51:68:fd:69:
         02:f8:cc:c1:2b:38:01:3f:ae:ab:07:30:02:58:d4:ac:88:6a:
         0b:30:87:da:1e:5e:5f:19:a6:e2:56:44:25:78:e1:4a:1e:d0:
         71:43:b7:7f:6f:46:7f:29:5d:54:45:54:8c:63:98:cf:96:bd:
         ee:db:d1:ea:d7:74:9d:09:6e:5e:6e:54:ac:89:3f:76:1c:2f:
         e5:74:f2:f9:33:b8:45:c4:20:82:70:be:94:9b:06:a0:3b:39:
         28:f9:69:d1:01:03:8e:d3:2b:44:f7:b8:e9:1e:f6:f7:12:cd:
         2d:4c:45:2e:07:37:ce:98:6e:e2:81:58:34:3d:a8:ef:ed:62:
         af:22:54:53:2f:e4:8e:2a:52:81:bf:2a:d9:e6:2c:bd:ff:3c:
         28:1a:d9:ce:1d:8d:26:49:dc:ad:8f:79:91:c0:f3:45:5f:77:
         f0:7e:8f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:05:19 2025 by rpki-client