Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3138362e3233332e31372e302f32342d3234203d3e20323632373737.roa
File:                     3138362e3233332e31372e302f32342d3234203d3e20323632373737.roa (raw, json)
Hash identifier:          5ZN2gDqWkbvvCObOpzVuicy/OhIN2Fn9xBBCmAlHIkY=
Subject key identifier:   D5:B5:96:D2:B5:29:09:79:26:03:15:A6:C8:A1:7E:6A:E0:AA:E1:A1
Certificate issuer:       /CN=22D119B99101091409CB2C64663C9A0D0F94DC5F
Certificate serial:       0597C4BFD175ADB7C7D2534481D0C05C1553B938
Authority key identifier: 22:D1:19:B9:91:01:09:14:09:CB:2C:64:66:3C:9A:0D:0F:94:DC:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22D119B99101091409CB2C64663C9A0D0F94DC5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3138362e3233332e31372e302f32342d3234203d3e20323632373737.roa
Signing time:             Mon 22 May 2023 14:34:05 +0000
ROA not before:           Mon 22 May 2023 14:29:05 +0000
ROA not after:            Mon 20 May 2024 14:34:05 +0000
asID:                     262777
IP address blocks:        186.233.17.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:97:c4:bf:d1:75:ad:b7:c7:d2:53:44:81:d0:c0:5c:15:53:b9:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D119B99101091409CB2C64663C9A0D0F94DC5F
        Validity
            Not Before: May 22 14:29:05 2023 GMT
            Not After : May 20 14:34:05 2024 GMT
        Subject: CN=D5B596D2B5290979260315A6C8A17E6AE0AAE1A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ef:71:20:9e:6d:15:4e:5c:53:e2:6e:a7:19:
                    dc:fa:cb:e7:ab:6f:01:ca:73:76:81:72:d1:84:65:
                    c6:46:d9:f8:26:30:bf:a2:94:59:d2:cf:99:55:4c:
                    96:31:3c:30:0f:f7:15:f8:45:8f:bc:df:83:4a:79:
                    d4:6f:a9:16:a1:33:d6:54:ba:04:cd:ee:ed:ae:1f:
                    ee:52:6a:b6:77:84:29:ee:9e:9c:bb:98:a7:47:64:
                    d4:88:8c:8d:4e:15:c3:f3:b3:e5:15:6d:8c:1e:58:
                    df:b9:87:e7:39:b4:86:ea:b1:2b:f3:ba:fa:b0:de:
                    1f:0e:fa:b7:ea:00:ff:1a:c6:24:f4:56:ea:44:e9:
                    31:8b:41:b5:b5:aa:ea:8d:5a:b5:7f:89:3e:31:03:
                    cf:e1:e8:db:7e:94:cd:4b:86:70:d3:cf:8a:08:09:
                    ea:a3:7b:5e:ed:49:22:29:bc:66:7a:56:87:2f:e1:
                    89:94:ba:5e:91:86:0b:20:f5:57:0a:28:ac:4a:56:
                    6f:d9:ac:2b:d5:7e:09:9a:02:ed:e1:2c:13:41:0a:
                    92:ac:e3:ad:1e:e0:2d:94:5f:51:7e:bb:92:4d:0d:
                    4a:e3:b0:02:e0:a4:e6:f4:75:34:58:7a:d4:4f:f2:
                    73:3d:4a:82:e8:a3:d3:fd:77:e8:68:d8:8f:83:e6:
                    bf:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B5:96:D2:B5:29:09:79:26:03:15:A6:C8:A1:7E:6A:E0:AA:E1:A1
            X509v3 Authority Key Identifier:
                keyid:22:D1:19:B9:91:01:09:14:09:CB:2C:64:66:3C:9A:0D:0F:94:DC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/22D119B99101091409CB2C64663C9A0D0F94DC5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22D119B99101091409CB2C64663C9A0D0F94DC5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3138362e3233332e31372e302f32342d3234203d3e20323632373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:e9:8a:2c:59:92:4a:20:87:58:8e:68:dc:51:1e:04:be:f7:
         dd:e1:e7:33:3b:3a:ad:23:d2:45:34:c1:d3:77:be:50:2a:00:
         f5:dc:02:b9:cf:b3:16:2e:af:7f:16:8d:12:a4:c0:c8:75:95:
         d9:71:0c:70:77:47:94:b4:d9:be:eb:27:5f:ac:2b:1d:f1:19:
         be:52:d9:eb:03:10:64:e9:fe:83:88:7b:71:41:fd:bc:5a:4d:
         77:72:6e:35:ad:55:61:12:15:54:bc:fe:aa:ab:fc:79:6a:66:
         72:d7:33:f3:84:b9:6a:a0:23:bd:a9:a2:61:d3:57:41:b6:fa:
         21:7b:0d:1c:4c:0f:87:d9:41:b5:ac:35:86:4c:4c:77:c5:74:
         ba:1b:ef:59:9f:67:14:65:ae:a0:72:bd:6b:47:8d:6d:65:55:
         fb:2b:27:e3:4b:66:a0:ea:30:8c:c7:6b:f6:c5:28:aa:9e:66:
         49:3d:b6:34:21:ca:84:fa:6c:dc:7e:23:37:20:59:3a:b2:ae:
         52:bc:8e:d1:b9:cb:d5:2d:77:03:42:fb:45:b2:10:9e:04:ab:
         92:1b:f2:fb:d2:77:d6:22:8a:cf:eb:fe:ac:01:2e:db:a7:2d:
         22:9b:98:f3:c5:9e:e1:2f:1f:42:c5:a9:b8:3a:d8:e1:86:03:
         85:c3:5a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 04:31:43 2025 by rpki-client