Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3138362e3233332e32322e302f32342d3234203d3e20323632373737.roa
File:                     3138362e3233332e32322e302f32342d3234203d3e20323632373737.roa (raw, json)
Hash identifier:          GXqkBbQ8y3yhpnHkJdetjGzHcfb5X0GNRpQz/BhEFD8=
Subject key identifier:   52:E7:49:D5:B8:61:21:E0:AE:07:E9:5B:1A:BB:3D:52:39:CE:A6:3D
Certificate issuer:       /CN=22D119B99101091409CB2C64663C9A0D0F94DC5F
Certificate serial:       555FCF3FE84C6D75F7F6FB4A5B4C1BC41C36DD62
Authority key identifier: 22:D1:19:B9:91:01:09:14:09:CB:2C:64:66:3C:9A:0D:0F:94:DC:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22D119B99101091409CB2C64663C9A0D0F94DC5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3138362e3233332e32322e302f32342d3234203d3e20323632373737.roa
Signing time:             Mon 22 May 2023 14:34:05 +0000
ROA not before:           Mon 22 May 2023 14:29:05 +0000
ROA not after:            Mon 20 May 2024 14:34:05 +0000
asID:                     262777
IP address blocks:        186.233.22.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:5f:cf:3f:e8:4c:6d:75:f7:f6:fb:4a:5b:4c:1b:c4:1c:36:dd:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D119B99101091409CB2C64663C9A0D0F94DC5F
        Validity
            Not Before: May 22 14:29:05 2023 GMT
            Not After : May 20 14:34:05 2024 GMT
        Subject: CN=52E749D5B86121E0AE07E95B1ABB3D5239CEA63D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f4:6d:92:3a:75:b9:82:a8:39:75:22:32:bd:
                    f7:0c:2d:a6:66:30:20:0a:56:2e:6d:ad:b9:73:19:
                    90:7a:cb:d4:fd:bc:0a:f2:a0:bf:96:7e:70:30:ec:
                    03:e4:87:9b:b3:f3:be:1b:4f:9e:7a:d0:ae:75:09:
                    ba:9a:b8:be:89:06:70:49:57:57:63:74:f4:b0:17:
                    a2:e8:1e:43:59:8a:90:09:97:30:a8:db:a9:7e:76:
                    11:e7:4e:53:69:af:aa:5b:52:39:68:06:77:24:10:
                    b0:85:12:ae:70:4a:20:d6:19:df:c6:87:23:f8:86:
                    1d:47:53:fb:00:44:81:98:43:4a:04:77:b0:3f:79:
                    41:24:57:58:fd:87:d8:bd:39:eb:04:4f:71:ed:5a:
                    e0:a3:cc:a4:32:73:0c:29:b0:d4:43:ed:1e:49:53:
                    a0:8c:fa:a7:68:75:a9:dd:48:c8:80:4b:7c:6f:05:
                    ab:97:4a:00:0e:ef:39:59:aa:e5:79:5a:35:12:3f:
                    a9:c9:c2:1d:82:a0:29:aa:8b:c2:e3:c6:3d:3e:c6:
                    1d:44:9a:72:ea:80:18:c5:1b:70:4b:7a:ed:fb:b0:
                    e0:6c:6b:0b:89:41:32:58:8c:1e:5a:87:80:dc:a6:
                    7e:43:08:10:aa:96:3a:84:67:69:51:df:51:4c:b8:
                    5a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E7:49:D5:B8:61:21:E0:AE:07:E9:5B:1A:BB:3D:52:39:CE:A6:3D
            X509v3 Authority Key Identifier:
                keyid:22:D1:19:B9:91:01:09:14:09:CB:2C:64:66:3C:9A:0D:0F:94:DC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/22D119B99101091409CB2C64663C9A0D0F94DC5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22D119B99101091409CB2C64663C9A0D0F94DC5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3138362e3233332e32322e302f32342d3234203d3e20323632373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:fc:73:b6:ce:51:bf:b9:20:b4:08:4a:1e:a1:fb:1e:3c:28:
         b6:6e:a5:d8:59:e8:2c:8b:ee:7a:ed:94:53:dc:13:bb:e2:89:
         d2:89:ef:e9:e2:47:d1:f6:65:2e:72:50:54:e0:1c:6c:d6:01:
         ec:ec:86:4b:97:29:99:c6:f7:e8:ae:25:90:c6:a3:bc:4f:32:
         02:b2:92:29:b0:19:b9:02:a7:5c:3d:df:04:79:03:ff:70:39:
         4e:2a:a0:c3:34:08:a4:c3:25:6f:25:ab:65:51:9f:5b:83:4c:
         ed:bc:25:c1:ff:5b:f5:b3:ff:11:0e:cf:a0:96:f6:5c:26:8b:
         14:6c:85:46:75:3f:18:f1:c2:0e:b8:a4:d3:21:3c:15:be:6d:
         23:61:7a:2c:8f:77:c9:1f:cd:52:4b:00:f7:e9:4a:86:34:85:
         ac:51:96:d0:f8:2a:d2:65:cd:d3:16:e8:04:bf:6c:38:db:6b:
         50:26:1e:8e:70:7a:d1:04:f8:df:38:bb:58:9c:81:f5:c8:7d:
         7b:89:70:f0:53:1a:4f:55:05:62:89:f7:cd:9c:15:0f:74:fa:
         8c:32:f5:58:bb:09:95:18:39:8c:ac:18:ff:1b:b8:bc:55:00:
         b5:34:5f:bc:ea:ff:2a:73:8c:16:31:f6:02:99:a9:88:e4:ef:
         e1:3e:f0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:39:48 2025 by rpki-client