Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3138362e3233332e31382e302f32332d3233203d3e20323632373737.roa
File:                     3138362e3233332e31382e302f32332d3233203d3e20323632373737.roa (raw, json)
Hash identifier:          bqy+XSD9JMn8KgZeyOcCJBUD9uVltvUwiTTqG+OJMrU=
Subject key identifier:   C9:3F:34:D0:E6:56:18:75:2F:D9:77:21:E0:80:D3:5F:1A:71:F9:FA
Certificate issuer:       /CN=22D119B99101091409CB2C64663C9A0D0F94DC5F
Certificate serial:       49E85FDA97D1F28804857777BA79935DCCF624C2
Authority key identifier: 22:D1:19:B9:91:01:09:14:09:CB:2C:64:66:3C:9A:0D:0F:94:DC:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22D119B99101091409CB2C64663C9A0D0F94DC5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3138362e3233332e31382e302f32332d3233203d3e20323632373737.roa
Signing time:             Thu 06 Oct 2022 07:07:45 +0000
ROA not before:           Thu 06 Oct 2022 07:02:45 +0000
ROA not after:            Thu 05 Oct 2023 07:07:45 +0000
asID:                     262777
IP address blocks:        186.233.18.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e8:5f:da:97:d1:f2:88:04:85:77:77:ba:79:93:5d:cc:f6:24:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D119B99101091409CB2C64663C9A0D0F94DC5F
        Validity
            Not Before: Oct  6 07:02:45 2022 GMT
            Not After : Oct  5 07:07:45 2023 GMT
        Subject: CN=C93F34D0E65618752FD97721E080D35F1A71F9FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fb:47:bc:01:7c:91:27:ac:f5:f0:ce:ab:15:
                    e2:85:78:53:fe:99:5e:e8:7c:06:7f:36:2d:37:e4:
                    2b:34:4a:00:b3:3d:d8:9c:d2:2c:85:ba:aa:76:70:
                    c9:1b:2e:ec:70:9c:60:81:a7:f0:a4:fd:d6:8e:98:
                    4d:c6:a1:df:7a:b7:d5:33:1b:65:c2:ff:c4:5c:4e:
                    ef:15:e4:b5:43:23:6a:90:11:59:f9:dc:13:5f:7b:
                    5f:e2:92:e8:f2:0f:d7:ae:a5:72:3f:67:dd:05:8e:
                    ab:04:30:fc:fc:7c:ee:03:35:c4:5f:eb:6b:88:cf:
                    f9:ae:ba:b2:aa:02:11:db:ca:82:d5:eb:2c:0e:bc:
                    d8:e7:b0:ac:0f:37:a3:33:1f:fe:5e:fa:fa:97:0b:
                    f1:63:f4:1e:35:68:1a:72:49:65:21:ad:05:6f:f0:
                    d0:4b:4e:b8:46:25:8c:b2:58:05:36:79:3a:e5:48:
                    3c:59:c4:2a:ba:6b:cb:72:bf:29:92:11:e9:c1:7b:
                    29:d0:77:e1:2a:9e:45:20:26:fb:13:ff:9b:31:71:
                    9c:fe:e0:e9:6b:22:6e:d2:60:7b:b9:7d:f9:1a:b1:
                    e2:45:11:2a:5f:cd:01:33:ff:20:bf:3c:f8:7d:d6:
                    55:53:03:da:2e:5d:fb:f9:a5:96:0f:e4:86:43:f6:
                    87:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:3F:34:D0:E6:56:18:75:2F:D9:77:21:E0:80:D3:5F:1A:71:F9:FA
            X509v3 Authority Key Identifier:
                keyid:22:D1:19:B9:91:01:09:14:09:CB:2C:64:66:3C:9A:0D:0F:94:DC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/22D119B99101091409CB2C64663C9A0D0F94DC5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22D119B99101091409CB2C64663C9A0D0F94DC5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3138362e3233332e31382e302f32332d3233203d3e20323632373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:d7:3b:f6:99:96:03:1b:57:ab:0a:35:56:5f:e7:7c:53:0f:
         90:7c:5a:70:8d:a7:17:62:49:2f:00:70:67:43:1b:d1:ac:61:
         55:d3:78:80:7e:d7:db:d8:32:97:85:ee:b5:2e:15:20:a5:a9:
         b8:4d:12:23:51:79:51:c7:9b:ab:3b:ef:e9:24:94:2e:84:da:
         63:a3:69:db:3c:86:37:6b:b7:eb:d1:87:a3:7c:ff:a1:4c:a9:
         b1:f3:7f:1d:a9:05:9b:f9:b4:16:82:4a:45:0b:e4:8f:8d:5d:
         71:40:11:c0:e0:3c:59:8d:f2:01:ed:87:2f:31:f4:d1:cb:39:
         47:9c:e8:74:e1:19:76:71:64:be:c0:1d:5b:23:a0:9f:25:c4:
         0c:bf:c3:c6:c4:4e:12:ac:25:c6:e5:d8:42:c5:c7:ee:56:46:
         44:3c:35:8d:83:68:06:12:13:9f:c7:3b:56:8d:48:f1:7a:5a:
         e4:85:e7:32:7a:0f:a0:25:ed:9f:58:40:b3:ce:62:9a:e0:3c:
         84:34:d7:e7:5a:1c:f6:d5:4d:88:5c:91:35:46:72:72:a1:32:
         0e:8b:fa:5a:0a:ba:44:37:f7:10:8e:cd:96:a3:43:a9:1d:87:
         e8:2c:9a:67:ec:cb:41:ea:c9:49:6d:72:69:9e:38:d0:c6:34:
         78:b3:d3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:23:45 2025 by rpki-client