Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3138362e3233332e32332e302f32342d3234203d3e20323632373737.roa
File:                     3138362e3233332e32332e302f32342d3234203d3e20323632373737.roa (raw, json)
Hash identifier:          ArvD8A1DgJWCjJkVb1OeuaArPmjxnjXHwYTqetfsjWw=
Subject key identifier:   44:43:77:17:1F:64:26:C9:14:69:0D:2F:89:47:EF:48:55:F5:A6:C4
Certificate issuer:       /CN=22D119B99101091409CB2C64663C9A0D0F94DC5F
Certificate serial:       04DE5C135CBD5117D2EE98D585030BBE2BFB17A3
Authority key identifier: 22:D1:19:B9:91:01:09:14:09:CB:2C:64:66:3C:9A:0D:0F:94:DC:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22D119B99101091409CB2C64663C9A0D0F94DC5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3138362e3233332e32332e302f32342d3234203d3e20323632373737.roa
Signing time:             Mon 22 May 2023 14:34:04 +0000
ROA not before:           Mon 22 May 2023 14:29:04 +0000
ROA not after:            Mon 20 May 2024 14:34:04 +0000
asID:                     262777
IP address blocks:        186.233.23.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:de:5c:13:5c:bd:51:17:d2:ee:98:d5:85:03:0b:be:2b:fb:17:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D119B99101091409CB2C64663C9A0D0F94DC5F
        Validity
            Not Before: May 22 14:29:04 2023 GMT
            Not After : May 20 14:34:04 2024 GMT
        Subject: CN=444377171F6426C914690D2F8947EF4855F5A6C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:eb:3f:55:dd:7d:a8:ce:5c:89:45:e0:cf:c2:
                    ce:e0:8c:1c:d8:51:db:b4:b1:8b:cd:1d:1a:41:9e:
                    e2:27:8a:50:bd:e9:7f:eb:25:f2:b7:22:3b:4c:54:
                    b9:58:d7:3e:e8:b6:a1:f8:c8:57:c2:d8:f6:ba:7a:
                    b8:f6:9b:43:d3:0c:44:d1:59:a8:44:c7:9a:f8:5b:
                    75:bb:eb:7b:6a:95:b9:78:a5:dd:a2:b0:95:2c:98:
                    9a:45:d2:48:41:e3:fb:d1:83:f3:12:7b:56:67:bc:
                    d1:e7:df:9c:6b:79:80:1a:be:fe:a2:48:2c:2e:45:
                    6b:8b:00:a9:8e:dd:43:be:f0:16:3c:3e:c9:47:5c:
                    56:50:c3:d1:fc:a6:9c:3c:2d:e2:60:c9:fb:f7:6c:
                    d9:d5:d2:77:27:f5:84:ba:1c:69:88:26:3f:d7:b4:
                    27:eb:02:19:84:ac:ba:79:2f:e6:61:92:30:f5:66:
                    13:3f:ef:74:0c:b3:29:f8:b2:ee:2a:65:53:ca:11:
                    60:fd:7a:d0:d1:31:97:b4:98:e6:ca:6d:b4:71:65:
                    85:3c:2d:02:14:94:2c:a7:15:d6:e4:bb:c2:18:79:
                    b6:47:47:23:e3:d6:4a:b3:7f:e6:d8:2e:2c:d5:59:
                    ce:5c:6a:f9:08:86:02:4e:3a:5f:e3:19:fa:3b:2a:
                    e1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:43:77:17:1F:64:26:C9:14:69:0D:2F:89:47:EF:48:55:F5:A6:C4
            X509v3 Authority Key Identifier:
                keyid:22:D1:19:B9:91:01:09:14:09:CB:2C:64:66:3C:9A:0D:0F:94:DC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/22D119B99101091409CB2C64663C9A0D0F94DC5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22D119B99101091409CB2C64663C9A0D0F94DC5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3138362e3233332e32332e302f32342d3234203d3e20323632373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:dc:01:d3:6a:08:35:61:cf:84:cf:28:74:71:24:f3:6b:b3:
         1f:28:eb:c9:c8:82:62:51:58:50:ba:1a:24:d2:47:7e:6c:d0:
         dd:49:3d:73:26:4e:ab:e8:ad:da:27:76:52:a3:ab:2c:4b:a4:
         00:58:1b:2c:4e:58:ae:b5:81:31:99:9a:3f:bc:b9:0a:4c:4d:
         93:61:61:72:09:2f:8f:90:3e:92:94:8d:39:0f:41:de:92:b7:
         c6:a2:bb:36:ff:62:6d:d1:b1:04:7f:0c:a8:c1:f7:ce:11:1b:
         4b:a8:0a:00:d4:2e:00:0b:92:8b:05:c5:c0:a1:e5:1f:9e:a6:
         80:a7:78:9b:9a:c8:e8:72:e5:6e:de:8f:0a:df:9b:c1:17:11:
         59:8a:d8:bf:e9:48:57:a3:49:d0:e2:e5:0f:f2:db:db:b9:3d:
         9b:95:4e:f2:8d:64:df:ab:1f:0b:5c:c4:e3:a0:ce:26:f6:35:
         12:3c:ec:87:8d:db:1e:00:9a:7f:e4:36:e4:ad:7c:f6:e3:ea:
         40:88:4f:c5:15:bb:49:21:a8:5c:61:fe:2d:8a:97:c1:52:c6:
         c0:f0:f1:9d:61:45:0d:9b:6b:0d:37:dc:2e:2b:e2:6e:8a:0e:
         80:40:66:a9:7d:a9:09:09:50:60:23:ed:89:9c:6d:57:dc:5f:
         e0:e8:cf:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 21:52:49 2025 by rpki-client