Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3138362e3233332e32302e302f32342d3234203d3e20323632373737.roa
File:                     3138362e3233332e32302e302f32342d3234203d3e20323632373737.roa (raw, json)
Hash identifier:          965uqNpfDIcPfP1gvFAerVLFqEldSCYFyh+97Fva/eg=
Subject key identifier:   97:BE:92:F9:F8:DC:FF:4A:E4:94:C9:4E:A7:6F:45:75:AF:62:33:6F
Certificate issuer:       /CN=22D119B99101091409CB2C64663C9A0D0F94DC5F
Certificate serial:       3C554263913299AAEF178B3B2B73AED7DC51E0AB
Authority key identifier: 22:D1:19:B9:91:01:09:14:09:CB:2C:64:66:3C:9A:0D:0F:94:DC:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22D119B99101091409CB2C64663C9A0D0F94DC5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3138362e3233332e32302e302f32342d3234203d3e20323632373737.roa
Signing time:             Thu 06 Oct 2022 07:07:44 +0000
ROA not before:           Thu 06 Oct 2022 07:02:44 +0000
ROA not after:            Thu 05 Oct 2023 07:07:44 +0000
asID:                     262777
IP address blocks:        186.233.20.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:55:42:63:91:32:99:aa:ef:17:8b:3b:2b:73:ae:d7:dc:51:e0:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D119B99101091409CB2C64663C9A0D0F94DC5F
        Validity
            Not Before: Oct  6 07:02:44 2022 GMT
            Not After : Oct  5 07:07:44 2023 GMT
        Subject: CN=97BE92F9F8DCFF4AE494C94EA76F4575AF62336F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d2:eb:59:82:77:0f:4c:7e:23:53:6a:28:31:
                    38:dd:c7:13:8d:e2:0a:67:1c:f0:a3:82:3f:8c:04:
                    90:8f:67:49:03:d3:d7:e2:a1:84:4b:0e:0c:bd:b8:
                    71:1f:cd:ae:7e:c0:42:3c:36:e3:a8:97:e0:29:c0:
                    58:b5:e5:41:b8:85:97:fb:0c:46:1a:80:b1:ca:09:
                    12:6f:b6:ef:e4:b2:ed:70:db:c7:87:5a:59:70:da:
                    34:9f:b8:03:af:cd:95:8e:64:86:59:1c:2b:57:4b:
                    1f:c2:b2:3c:e4:05:2c:4b:84:0b:ff:72:d4:07:68:
                    ef:b9:6c:a2:6c:24:77:be:21:45:ca:ff:33:2b:f5:
                    4d:aa:05:39:c4:75:d0:54:21:c6:7a:c3:fe:42:4d:
                    fe:f0:4d:2a:c2:37:1f:c5:9d:80:9e:e8:cd:5e:2b:
                    c5:ae:54:40:76:7c:13:0e:b0:17:3f:97:f4:a7:23:
                    b0:96:41:4d:6c:e1:c1:96:d7:97:9b:3c:5b:08:e4:
                    48:a5:46:e3:66:e1:79:f6:5d:0a:0e:56:af:52:49:
                    7f:46:c3:60:38:1d:c8:86:ae:c6:45:7c:31:65:18:
                    ce:5a:3a:36:c3:89:64:f4:9c:63:9c:5f:29:18:ef:
                    bd:b9:0f:a4:99:65:62:65:d4:bc:bf:0e:a7:3b:17:
                    95:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:BE:92:F9:F8:DC:FF:4A:E4:94:C9:4E:A7:6F:45:75:AF:62:33:6F
            X509v3 Authority Key Identifier:
                keyid:22:D1:19:B9:91:01:09:14:09:CB:2C:64:66:3C:9A:0D:0F:94:DC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/22D119B99101091409CB2C64663C9A0D0F94DC5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22D119B99101091409CB2C64663C9A0D0F94DC5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3138362e3233332e32302e302f32342d3234203d3e20323632373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:28:c5:b2:00:4d:05:d3:d3:8c:1b:06:01:ed:ef:7c:ed:9e:
         93:50:09:43:33:e2:ba:fc:97:83:0d:ab:2e:a9:2f:7e:93:a6:
         57:f8:4a:29:5e:b9:3b:f5:c4:bd:b3:73:82:92:4a:09:fa:e7:
         c3:4d:1b:2d:70:2b:9e:f4:7c:34:59:39:16:5f:1f:d6:87:29:
         41:67:19:7e:26:7f:00:ac:09:35:2b:d6:9c:e0:e3:01:7f:d2:
         20:16:f3:96:56:42:23:0f:ee:36:23:84:61:76:9b:9c:62:e3:
         ba:32:78:2c:b6:9d:34:81:26:14:47:be:e1:b9:08:32:ca:a0:
         92:27:88:7b:9c:b2:0e:e9:44:16:4d:a4:3e:20:9a:23:5e:eb:
         89:5e:da:8d:3f:fd:96:2a:8b:ab:c3:03:5d:ac:08:8b:5f:66:
         78:7d:9f:3c:db:d5:dd:12:6f:dd:97:01:9c:57:8d:e6:6d:55:
         72:fe:d4:55:0f:cb:97:c8:f6:2a:7d:e4:1c:27:ba:86:67:40:
         4f:c9:07:80:c1:9c:90:5a:3e:78:c1:38:45:ef:2b:26:0a:86:
         88:c7:44:ae:54:b8:28:a1:cf:81:ea:17:44:53:fc:f9:7c:dc:
         fc:b4:19:4d:0b:53:3f:16:c4:bb:15:4f:79:b2:9f:92:84:ca:
         8c:21:21:9f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPFVCY5EymarvF4s7K3Ou19xR4KswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJEMTE5Qjk5MTAxMDkxNDA5Q0IyQzY0NjYzQzlBMEQw
Rjk0REM1RjAeFw0yMjEwMDYwNzAyNDRaFw0yMzEwMDUwNzA3NDRaMDMxMTAvBgNV
BAMTKDk3QkU5MkY5RjhEQ0ZGNEFFNDk0Qzk0RUE3NkY0NTc1QUY2MjMzNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK0utZgncPTH4jU2ooMTjdxxON
4gpnHPCjgj+MBJCPZ0kD09fioYRLDgy9uHEfza5+wEI8NuOol+ApwFi15UG4hZf7
DEYagLHKCRJvtu/ksu1w28eHWllw2jSfuAOvzZWOZIZZHCtXSx/CsjzkBSxLhAv/
ctQHaO+5bKJsJHe+IUXK/zMr9U2qBTnEddBUIcZ6w/5CTf7wTSrCNx/FnYCe6M1e
K8WuVEB2fBMOsBc/l/SnI7CWQU1s4cGW15ebPFsI5EilRuNm4Xn2XQoOVq9SSX9G
w2A4HciGrsZFfDFlGM5aOjbDiWT0nGOcXykY7725D6SZZWJl1Ly/Dqc7F5VzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUl76S+fjc/0rklMlOp29Fda9iM28wHwYDVR0j
BBgwFoAUItEZuZEBCRQJyyxkZjyaDQ+U3F8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2FVUzZqVzlKblFDVFM3akUyaTNMS1V0aGZub3hLV3ZrdWh2amdWQlpN
S2IvMC8yMkQxMTlCOTkxMDEwOTE0MDlDQjJDNjQ2NjNDOUEwRDBGOTREQzVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzIyRDExOUI5OTEwMTA5MTQw
OUNCMkM2NDY2M0M5QTBEMEY5NERDNUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dhVVM2alc5Sm5RQ1RTN2pFMmkzTEtVdGhmbm94S1d2a3VodmpnVkJaTUtiLzAv
MzEzODM2MmUzMjMzMzMyZTMyMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNzM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC66RQwDQYJKoZIhvcNAQELBQADggEBALEoxbIA
TQXT04wbBgHt73ztnpNQCUMz4rr8l4MNqy6pL36Tplf4SileuTv1xL2zc4KSSgn6
58NNGy1wK570fDRZORZfH9aHKUFnGX4mfwCsCTUr1pzg4wF/0iAW85ZWQiMP7jYj
hGF2m5xi47oyeCy2nTSBJhRHvuG5CDLKoJIniHucsg7pRBZNpD4gmiNe64le2o0/
/ZYqi6vDA12sCItfZnh9nzzb1d0Sb92XAZxXjeZtVXL+1FUPy5fI9ip95BwnuoZn
QE/JB4DBnJBaPnjBOEXvKyYKhojHRK5UuCihz4HqF0RT/Pl83Py0GU0LUz8WxLsV
T3myn5KEyowhIZ8=
-----END CERTIFICATE-----
Generated at Fri Feb 21 13:21:04 2025 by rpki-client