Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3138362e3233332e32312e302f32342d3234203d3e20323632373737.roa
File:                     3138362e3233332e32312e302f32342d3234203d3e20323632373737.roa (raw, json)
Hash identifier:          DzopTl35KMn4s5Qmpefrt0vMFKV91agSUDfeh0BgGAk=
Subject key identifier:   A7:DF:83:31:9D:0E:48:74:43:D4:66:6A:7B:48:9E:D2:C1:9C:A5:F7
Certificate issuer:       /CN=22D119B99101091409CB2C64663C9A0D0F94DC5F
Certificate serial:       26C610E68456E19284E0A060EDDCD464986F8220
Authority key identifier: 22:D1:19:B9:91:01:09:14:09:CB:2C:64:66:3C:9A:0D:0F:94:DC:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22D119B99101091409CB2C64663C9A0D0F94DC5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3138362e3233332e32312e302f32342d3234203d3e20323632373737.roa
Signing time:             Thu 06 Oct 2022 07:07:44 +0000
ROA not before:           Thu 06 Oct 2022 07:02:44 +0000
ROA not after:            Thu 05 Oct 2023 07:07:44 +0000
asID:                     262777
IP address blocks:        186.233.21.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c6:10:e6:84:56:e1:92:84:e0:a0:60:ed:dc:d4:64:98:6f:82:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D119B99101091409CB2C64663C9A0D0F94DC5F
        Validity
            Not Before: Oct  6 07:02:44 2022 GMT
            Not After : Oct  5 07:07:44 2023 GMT
        Subject: CN=A7DF83319D0E487443D4666A7B489ED2C19CA5F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:dc:a5:5a:73:e2:c6:a8:d9:88:03:a3:0f:80:
                    b3:52:ad:2a:61:d7:38:61:4d:4c:1a:71:e4:18:87:
                    68:23:88:ff:9a:f4:ea:e3:9d:19:b9:37:c5:ac:09:
                    b4:d5:0e:1c:cd:57:bd:5a:33:18:96:99:df:c1:48:
                    a0:70:46:ba:4f:61:3c:75:1a:24:5e:23:be:9a:a7:
                    c5:1a:2c:f0:a2:19:c6:9e:99:08:89:bc:14:6a:07:
                    e7:f0:c8:a8:06:68:87:c9:64:68:d5:64:98:c0:fb:
                    4b:61:96:5e:c2:7f:01:0c:6f:25:d2:80:7d:05:68:
                    b9:c5:16:d0:f1:d7:fe:55:f6:09:fd:46:80:a7:e8:
                    c6:7d:fe:72:3f:f5:57:df:5d:19:5c:4f:8f:10:21:
                    c1:ae:80:7e:c7:6c:89:29:7c:a0:e1:2e:b8:65:df:
                    d1:11:87:7e:26:24:19:6f:c7:53:59:1d:5c:77:a5:
                    8f:3a:55:a7:c1:b6:0b:4d:e2:c1:eb:8c:86:0c:04:
                    93:d9:ac:b2:4f:18:4f:c0:f8:84:1d:45:59:d7:04:
                    5d:de:76:c5:eb:b7:a2:d4:40:7d:ae:9c:49:42:00:
                    a2:71:e8:03:90:5f:2b:eb:f5:b7:da:8f:c6:22:3a:
                    71:a3:66:93:64:bc:23:48:e0:62:c6:fc:79:c8:24:
                    1d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:DF:83:31:9D:0E:48:74:43:D4:66:6A:7B:48:9E:D2:C1:9C:A5:F7
            X509v3 Authority Key Identifier:
                keyid:22:D1:19:B9:91:01:09:14:09:CB:2C:64:66:3C:9A:0D:0F:94:DC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/22D119B99101091409CB2C64663C9A0D0F94DC5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22D119B99101091409CB2C64663C9A0D0F94DC5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3138362e3233332e32312e302f32342d3234203d3e20323632373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:b7:84:bf:fe:75:92:6b:b9:f8:c7:1d:9e:31:97:43:ee:25:
         c5:e2:eb:39:20:1d:55:f9:8c:f6:ea:a9:e7:3d:1b:4c:dd:22:
         fc:08:b7:68:b8:0c:1d:da:ea:3e:f9:a9:03:67:9a:1d:46:f7:
         59:00:b0:44:48:ae:6e:cb:33:47:a1:16:f6:c4:1e:d7:34:af:
         c2:30:88:27:e0:7a:f8:a9:a1:a6:eb:98:bc:cb:d2:bc:3e:7f:
         80:01:ea:49:f7:6a:05:6c:cb:25:47:b9:b2:35:ff:60:d0:18:
         be:17:98:b7:ef:05:28:82:fe:c5:35:4e:44:6f:3e:e3:bc:41:
         e8:ad:56:11:a0:b6:87:99:92:a3:81:d1:60:d0:07:60:20:d9:
         42:1f:70:e8:53:1e:a1:0e:fe:13:6d:14:d6:86:d1:9e:e1:d9:
         e7:9b:05:49:f9:69:0a:30:39:ac:05:4e:a2:cc:f7:5b:21:4e:
         ef:1f:8d:88:46:14:76:72:7e:62:08:c1:7b:cf:97:52:74:9c:
         7b:67:ee:24:90:89:72:b4:e3:6a:c2:73:aa:f5:32:2d:65:9f:
         f5:40:33:db:05:40:66:f2:b6:bc:c6:39:71:46:c2:85:91:ce:
         75:76:f5:47:b1:4a:a3:ac:54:34:44:dc:e9:39:5a:e3:88:e0:
         1f:08:64:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:18:51 2025 by rpki-client