Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3138362e3233332e31362e302f32312d3231203d3e20323632373737.roa
File:                     3138362e3233332e31362e302f32312d3231203d3e20323632373737.roa (raw, json)
Hash identifier:          y4BKTa4N/32sRvCic0Axed/wryi+6UAdVqN9OFAOib8=
Subject key identifier:   2D:EB:32:F2:A6:DE:DB:BF:CC:F8:53:47:38:0B:7E:E4:F5:E2:24:BF
Certificate issuer:       /CN=22D119B99101091409CB2C64663C9A0D0F94DC5F
Certificate serial:       0687F3DA5058BF97DD4C5888A84EB0EDC90AC80B
Authority key identifier: 22:D1:19:B9:91:01:09:14:09:CB:2C:64:66:3C:9A:0D:0F:94:DC:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22D119B99101091409CB2C64663C9A0D0F94DC5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3138362e3233332e31362e302f32312d3231203d3e20323632373737.roa
Signing time:             Thu 06 Oct 2022 07:07:45 +0000
ROA not before:           Thu 06 Oct 2022 07:02:45 +0000
ROA not after:            Thu 05 Oct 2023 07:07:45 +0000
asID:                     262777
IP address blocks:        186.233.16.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:87:f3:da:50:58:bf:97:dd:4c:58:88:a8:4e:b0:ed:c9:0a:c8:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D119B99101091409CB2C64663C9A0D0F94DC5F
        Validity
            Not Before: Oct  6 07:02:45 2022 GMT
            Not After : Oct  5 07:07:45 2023 GMT
        Subject: CN=2DEB32F2A6DEDBBFCCF85347380B7EE4F5E224BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fa:5f:ea:39:7d:4a:cf:41:15:c6:ff:27:55:
                    e5:af:39:13:67:cb:45:45:10:10:6a:40:e4:87:2b:
                    7d:59:9e:ec:59:9a:44:85:58:13:63:86:40:d0:1a:
                    91:ef:e9:a0:a7:4e:a4:98:3d:8d:60:82:f5:78:4a:
                    c8:c3:ec:ff:66:df:17:ea:7c:8c:d8:62:02:15:86:
                    50:8d:dd:2d:b3:b1:1f:ad:ac:68:13:07:32:43:58:
                    f3:b2:27:cd:73:48:ce:46:b7:ad:a9:10:4a:6e:a7:
                    ef:bd:ed:35:86:9f:11:4e:fd:3e:75:23:e4:ff:d9:
                    a3:78:6e:23:23:40:77:08:4c:ec:21:11:15:73:5a:
                    6f:9f:a1:cf:47:4c:48:64:b6:be:e9:ab:bc:f8:62:
                    fe:fc:d7:3b:d2:36:82:d4:00:b7:c4:06:f3:62:e8:
                    95:3d:fa:55:4c:97:b1:5d:35:ad:1e:a2:96:bf:cc:
                    1e:4b:68:13:cb:13:e7:d5:27:36:d8:55:c3:76:30:
                    62:c3:b3:e7:bd:1b:5a:11:86:52:93:ed:11:c8:bf:
                    9f:ce:ef:47:9d:74:94:4e:d5:03:fb:fe:24:aa:ee:
                    22:6e:65:ae:00:f6:7f:ee:3d:ff:e8:70:71:55:3c:
                    bb:6e:eb:fc:c7:9a:d2:dd:35:96:05:18:58:8c:4e:
                    e3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:EB:32:F2:A6:DE:DB:BF:CC:F8:53:47:38:0B:7E:E4:F5:E2:24:BF
            X509v3 Authority Key Identifier:
                keyid:22:D1:19:B9:91:01:09:14:09:CB:2C:64:66:3C:9A:0D:0F:94:DC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/22D119B99101091409CB2C64663C9A0D0F94DC5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22D119B99101091409CB2C64663C9A0D0F94DC5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3138362e3233332e31362e302f32312d3231203d3e20323632373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6e:7b:bf:e2:db:ee:98:b7:e3:6c:7c:06:60:21:9c:06:78:52:
         b8:93:1a:3a:8d:be:0e:c4:22:ae:bd:db:3e:a3:a4:ea:77:69:
         8d:a4:4a:48:b4:9b:4e:e0:f0:f1:04:61:79:b0:a6:8e:bf:7d:
         b1:e2:18:be:de:a2:0e:4a:cc:f0:b0:b1:78:44:35:f9:2b:d1:
         ad:a6:ac:9b:ae:12:dd:f4:60:d1:be:8f:62:2b:dd:cc:1c:61:
         de:9b:86:6e:26:f5:5c:8b:32:3b:eb:59:cd:09:c4:c0:02:23:
         a6:b5:24:f2:5d:7c:a2:76:69:1c:f4:93:49:32:68:df:14:3c:
         27:fb:f6:3f:5b:df:c2:35:a1:fc:f6:91:c4:1e:66:26:b5:2d:
         7e:29:b5:3c:cf:fc:43:a6:66:9b:26:b1:96:bb:e7:ea:b2:15:
         0d:19:88:a2:62:db:ff:4b:24:bd:59:98:78:17:e0:ed:1c:9f:
         40:96:f6:e7:1a:09:c7:d6:53:c0:01:8f:96:67:e3:d7:49:5a:
         a4:56:55:df:a2:84:12:f6:5f:6b:9a:f8:04:83:47:53:ec:a0:
         6e:b4:d1:af:ba:46:5e:53:d6:96:dd:e5:07:0e:11:3e:85:be:
         90:b9:aa:75:7f:1b:58:32:58:fa:a6:d1:6a:13:cd:51:9e:6c:
         5f:21:22:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:15:45 2025 by rpki-client