Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3138362e3233332e31392e302f32342d3234203d3e20323632373737.roa
File:                     3138362e3233332e31392e302f32342d3234203d3e20323632373737.roa (raw, json)
Hash identifier:          492Ax8yaE/xqsN+4LWcFzQClMf4B+fePp4Vuk0TAJtc=
Subject key identifier:   B8:4B:32:FC:2D:10:51:85:89:9C:2F:F3:6A:61:14:6F:19:8C:0C:2F
Certificate issuer:       /CN=22D119B99101091409CB2C64663C9A0D0F94DC5F
Certificate serial:       1E61DE235360C90636909D4F7E52C98929EA6C9A
Authority key identifier: 22:D1:19:B9:91:01:09:14:09:CB:2C:64:66:3C:9A:0D:0F:94:DC:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22D119B99101091409CB2C64663C9A0D0F94DC5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3138362e3233332e31392e302f32342d3234203d3e20323632373737.roa
Signing time:             Mon 22 May 2023 14:34:04 +0000
ROA not before:           Mon 22 May 2023 14:29:04 +0000
ROA not after:            Mon 20 May 2024 14:34:04 +0000
asID:                     262777
IP address blocks:        186.233.19.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:61:de:23:53:60:c9:06:36:90:9d:4f:7e:52:c9:89:29:ea:6c:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D119B99101091409CB2C64663C9A0D0F94DC5F
        Validity
            Not Before: May 22 14:29:04 2023 GMT
            Not After : May 20 14:34:04 2024 GMT
        Subject: CN=B84B32FC2D105185899C2FF36A61146F198C0C2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4e:dc:fe:c4:05:e1:30:5c:3d:b5:02:10:97:
                    74:53:df:35:e2:ed:b0:81:61:4a:39:a9:f4:b5:4a:
                    b0:7a:ac:b4:d3:24:33:5d:41:d4:03:89:01:e0:39:
                    6e:bc:e0:fd:94:f0:65:24:b7:ab:f9:e4:8b:7b:af:
                    62:c6:30:be:bd:73:8a:39:b0:e2:b5:b6:3c:83:1e:
                    d8:29:ae:54:25:f3:3e:6b:d4:b8:d7:cb:a1:58:ca:
                    d2:7e:26:92:0f:05:84:74:c6:25:34:d3:66:74:dc:
                    e0:bf:bc:62:36:41:ad:a0:71:25:27:5f:1d:65:1f:
                    56:03:ec:02:73:5f:5b:23:d4:f0:57:f3:87:e9:64:
                    3a:a9:87:64:ff:e0:9d:5d:f7:8b:f3:d6:35:3e:84:
                    5f:c7:7f:1e:87:2f:5a:c4:44:9f:28:61:49:49:15:
                    51:bf:c1:5f:e9:4e:52:1c:bd:ea:cc:44:16:db:15:
                    09:27:ea:e7:e2:48:bd:3d:95:46:03:64:4f:aa:c8:
                    59:e8:aa:a4:63:c5:5a:08:63:e6:42:d3:6c:76:de:
                    5d:6f:df:72:05:2e:6c:de:6d:ae:3a:55:5b:ab:e6:
                    9c:3f:18:c0:8d:7b:47:1e:8a:52:32:71:c2:a5:fc:
                    f7:39:2a:70:a0:42:9a:dc:a6:b1:5b:5d:05:97:9f:
                    a2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:4B:32:FC:2D:10:51:85:89:9C:2F:F3:6A:61:14:6F:19:8C:0C:2F
            X509v3 Authority Key Identifier:
                keyid:22:D1:19:B9:91:01:09:14:09:CB:2C:64:66:3C:9A:0D:0F:94:DC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/22D119B99101091409CB2C64663C9A0D0F94DC5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22D119B99101091409CB2C64663C9A0D0F94DC5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3138362e3233332e31392e302f32342d3234203d3e20323632373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:4f:8b:c2:15:fa:48:63:3a:be:3d:02:3c:9b:18:73:ca:06:
         c7:a9:ca:d8:67:7c:47:a9:2d:46:79:a6:b2:7f:56:19:cf:13:
         c1:18:39:ce:32:d9:e9:ef:ed:86:68:24:c4:65:12:d4:98:48:
         0d:1d:7b:02:f9:57:3f:90:83:77:42:f8:ff:bb:4d:16:6e:1e:
         e5:9f:60:d4:85:fb:f2:41:37:d8:1b:ef:9b:dd:d8:a9:f7:7e:
         a7:05:78:a2:54:71:0e:30:98:c1:69:7b:44:1b:d7:3b:d1:92:
         01:d4:ad:db:ac:1f:ab:01:20:b6:25:4f:47:1c:61:93:74:b0:
         7f:08:eb:ad:0b:e2:fb:47:97:eb:16:8a:af:6e:59:84:1d:53:
         89:39:7d:c2:c1:d4:08:12:31:8c:3b:f2:e2:77:db:e3:c9:47:
         f8:8c:b6:f5:f5:16:ea:88:72:b1:d4:1b:27:26:2a:69:8a:d4:
         43:ba:0e:ef:5b:b0:c1:2c:0d:a1:e9:be:fe:88:a3:b5:dc:f8:
         74:d1:b7:3e:44:6d:3d:cb:a1:72:82:36:3c:7e:fd:e1:dc:5c:
         36:f6:99:27:a7:ef:a8:9d:0d:db:6a:92:d4:2a:5d:e9:69:71:
         8b:2b:ae:fb:a2:46:97:ec:12:8d:f7:d1:00:30:00:65:3e:11:
         90:a8:15:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:07:17 2025 by rpki-client