Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233392e302f32342d3234203d3e203631383531.roa
File:                     3137372e37352e3233392e302f32342d3234203d3e203631383531.roa (raw, json)
Hash identifier:          I82xTG9/nKa508yVGJTxvIrRtaZXvuvG93xDYvEp8q4=
Subject key identifier:   A7:21:18:24:FF:B3:88:72:BA:9B:09:E2:90:9D:C8:16:CD:86:B0:1F
Certificate issuer:       /CN=AFA55E041FA0E5D394A1480902275296B12C222A
Certificate serial:       27611BA5650BEA470A5CCFC3964FF5015E17CA8C
Authority key identifier: AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233392e302f32342d3234203d3e203631383531.roa
Signing time:             Wed 26 Feb 2025 19:36:21 +0000
ROA not before:           Wed 26 Feb 2025 19:31:21 +0000
ROA not after:            Wed 25 Feb 2026 19:36:21 +0000
asID:                     61851
IP address blocks:        177.75.239.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:61:1b:a5:65:0b:ea:47:0a:5c:cf:c3:96:4f:f5:01:5e:17:ca:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFA55E041FA0E5D394A1480902275296B12C222A
        Validity
            Not Before: Feb 26 19:31:21 2025 GMT
            Not After : Feb 25 19:36:21 2026 GMT
        Subject: CN=A7211824FFB38872BA9B09E2909DC816CD86B01F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5a:c0:07:6d:d6:4e:d2:10:0f:85:63:1b:75:
                    8d:8b:cf:b0:ea:0d:49:c5:3d:fb:c5:e9:54:5d:b6:
                    43:0e:e3:4b:1c:9d:63:ea:e7:0d:b5:0a:55:b7:13:
                    8b:9a:2d:43:d0:20:16:8a:f3:61:11:c8:c9:d5:2d:
                    6a:01:f4:e1:ac:dc:fe:d8:58:bd:4a:56:7b:af:37:
                    e0:aa:ae:bc:8d:1d:69:39:30:4f:a7:b8:b7:6a:7e:
                    59:06:ae:19:3e:d8:24:d5:0b:65:b8:be:0b:c2:6e:
                    b1:6d:6b:91:17:99:05:fd:45:03:99:10:b4:70:9c:
                    27:d2:1f:17:48:94:6a:b3:f2:06:d3:d7:16:64:3d:
                    be:cb:29:a9:2a:5f:6c:00:17:59:1e:e9:a7:9b:2f:
                    fd:02:ef:72:a3:01:ee:21:a6:2f:a9:90:73:df:ff:
                    eb:e4:e1:66:19:93:1e:b5:4a:09:ba:ce:54:34:dc:
                    5b:02:71:eb:bf:04:fd:81:bc:88:73:79:ea:17:75:
                    03:46:5e:e4:3d:34:98:3b:9f:97:c1:7b:c8:07:ec:
                    e7:2a:76:09:e2:f1:ef:4d:fe:a3:9d:73:a1:6d:8b:
                    86:f9:a6:2f:2d:84:ef:f6:33:18:93:a1:56:64:2b:
                    d3:3b:aa:3a:60:be:df:12:4e:74:18:98:e9:37:c6:
                    eb:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:21:18:24:FF:B3:88:72:BA:9B:09:E2:90:9D:C8:16:CD:86:B0:1F
            X509v3 Authority Key Identifier:
                keyid:AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/AFA55E041FA0E5D394A1480902275296B12C222A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233392e302f32342d3234203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:b4:79:ea:7b:4e:95:fc:e2:41:6e:22:d8:41:62:e6:c6:4f:
         11:60:bc:5b:1a:96:02:57:1c:ed:73:f1:bc:cf:b8:58:d2:d1:
         82:76:19:d5:b1:07:dc:a9:f7:11:25:e4:4d:4b:54:e4:02:7c:
         62:59:32:b5:55:ac:2f:cb:bc:84:78:22:fd:a6:0a:2c:a9:98:
         af:7c:0b:8b:29:7f:db:ec:d5:75:12:1e:16:20:e2:f4:94:9a:
         3d:dc:27:31:e6:2b:0d:c9:d2:0c:17:d9:0f:cd:43:58:33:04:
         a6:e2:e4:d4:f1:9d:4c:51:cd:78:4a:6a:c9:6c:62:2f:f6:d7:
         04:fd:4b:24:7a:b8:72:43:3e:e7:27:ac:7e:01:97:33:19:97:
         7a:5c:3a:e3:55:8b:a6:a4:51:a9:a6:65:2f:28:eb:76:40:3e:
         59:3c:11:16:2d:3d:13:ba:0c:94:0c:89:9e:e7:3d:d9:9f:8f:
         82:57:94:a8:b9:72:3c:b0:6e:10:ce:b1:14:72:6e:b8:3c:0f:
         ea:3b:15:6c:cb:37:ce:99:f6:bb:94:ce:9f:37:fe:65:aa:fe:
         77:ad:41:8b:f2:53:e7:72:5f:c8:f0:d2:08:59:d2:fb:a1:91:
         b9:f5:a4:99:ab:da:3b:60:61:6e:17:db:a6:79:17:5a:be:83:
         7a:3a:bb:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:05:18 2025 by rpki-client