Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/3133382e39342e3230312e302f32342d3234203d3e20323634313639.roa
File:                     3133382e39342e3230312e302f32342d3234203d3e20323634313639.roa (raw, json)
Hash identifier:          SoK85hYqKHQxcyYauHFOlBU4qWD/H+Utqetd80GT+Ps=
Subject key identifier:   24:4A:00:7B:9E:24:C3:B2:09:56:0E:78:B0:5F:3D:31:B2:47:4F:08
Certificate issuer:       /CN=108F95B401BD922625E878BB62A22549F5766415
Certificate serial:       3FF5BB2B546FB277C6C71C5990EB3E356970A1AC
Authority key identifier: 10:8F:95:B4:01:BD:92:26:25:E8:78:BB:62:A2:25:49:F5:76:64:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/108F95B401BD922625E878BB62A22549F5766415.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/3133382e39342e3230312e302f32342d3234203d3e20323634313639.roa
Signing time:             Fri 28 Oct 2022 20:33:02 +0000
ROA not before:           Fri 28 Oct 2022 20:28:02 +0000
ROA not after:            Fri 27 Oct 2023 20:33:02 +0000
asID:                     264169
IP address blocks:        138.94.201.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:f5:bb:2b:54:6f:b2:77:c6:c7:1c:59:90:eb:3e:35:69:70:a1:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=108F95B401BD922625E878BB62A22549F5766415
        Validity
            Not Before: Oct 28 20:28:02 2022 GMT
            Not After : Oct 27 20:33:02 2023 GMT
        Subject: CN=244A007B9E24C3B209560E78B05F3D31B2474F08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e0:05:c9:16:b1:3d:cd:29:64:c0:c7:7f:e3:
                    da:87:1d:de:f5:e8:be:70:2c:c6:ee:f5:07:f8:b5:
                    37:ad:e0:ee:07:ec:bb:7e:ad:5b:c9:2d:54:27:3c:
                    53:e5:1d:3a:bd:4d:87:7c:b3:96:04:83:df:07:0f:
                    94:03:dc:b0:44:24:1d:17:aa:74:06:55:93:6d:b2:
                    c9:14:77:71:55:ee:c1:a3:22:65:dd:c6:f1:49:e1:
                    a9:d4:3e:a4:d9:3d:27:e6:5d:df:f1:4a:dc:39:af:
                    49:75:a1:31:43:ee:e0:bd:0f:2f:14:35:0c:c3:a8:
                    a6:da:95:f0:65:69:b4:a8:0b:14:31:4b:16:58:e7:
                    40:c7:08:4c:35:d8:71:ad:a1:6a:bd:42:54:5e:ba:
                    f4:78:47:fa:f3:d2:7a:4b:46:22:ec:a2:e7:61:33:
                    8c:5c:84:4a:95:da:d8:40:b3:6e:db:6c:0b:98:af:
                    61:c7:12:06:75:52:68:6e:e7:61:09:04:50:90:2c:
                    82:1d:09:89:33:94:fe:87:1f:ea:10:79:cb:ba:2b:
                    42:0d:a3:2f:8a:c4:d1:6d:e7:36:1d:88:ff:51:51:
                    d7:74:76:b8:40:a1:16:2c:4f:12:85:21:41:e9:71:
                    3d:09:be:dd:30:d4:b9:33:ce:4a:58:50:31:78:fe:
                    34:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:4A:00:7B:9E:24:C3:B2:09:56:0E:78:B0:5F:3D:31:B2:47:4F:08
            X509v3 Authority Key Identifier:
                keyid:10:8F:95:B4:01:BD:92:26:25:E8:78:BB:62:A2:25:49:F5:76:64:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/108F95B401BD922625E878BB62A22549F5766415.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/108F95B401BD922625E878BB62A22549F5766415.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/3133382e39342e3230312e302f32342d3234203d3e20323634313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:df:f3:ad:fa:3c:96:74:90:78:c2:6d:ae:a6:d4:61:31:31:
         58:de:b4:e4:dd:f9:54:35:8a:61:07:5a:f8:8e:19:58:ed:b2:
         c9:69:3b:61:73:00:7b:54:94:cc:18:aa:79:76:ab:ee:8e:64:
         af:2f:9e:78:63:41:4b:51:f7:3e:c3:f3:65:e1:81:f7:99:38:
         44:b9:d6:a9:26:9b:dd:89:56:8c:59:e8:77:4f:e2:b9:15:90:
         20:03:e6:f2:98:e6:ba:cd:de:43:e7:e0:a8:ff:1d:83:5b:6c:
         0a:8e:30:48:ec:69:85:fe:36:57:2d:93:6e:eb:94:3e:77:18:
         6f:ce:b9:fb:44:c7:69:ed:40:9c:bc:9a:f4:4b:f5:6e:c8:43:
         48:09:5e:86:ec:45:88:4d:88:63:40:a2:d8:38:b1:1f:00:c3:
         d8:85:8c:52:b2:79:a8:b5:6d:14:fd:76:65:58:35:bd:84:6e:
         6f:2f:68:11:93:ca:4f:94:3e:51:a5:d5:91:75:41:4c:9c:b3:
         02:fa:61:74:17:a9:17:a1:fe:7c:a4:0e:5b:67:84:c4:84:05:
         04:82:f3:46:82:59:11:0b:26:73:45:0f:21:51:40:44:0c:3e:
         56:b0:40:33:ec:ae:e6:89:5c:93:f7:e0:d2:e0:ec:63:8a:38:
         95:6d:35:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:52:58 2025 by rpki-client