Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/3133382e39342e3230322e302f32342d3234203d3e20323634313639.roa
File:                     3133382e39342e3230322e302f32342d3234203d3e20323634313639.roa (raw, json)
Hash identifier:          sPHgcwK/gecq5yTdy7zUWX+qxw4DnPsCFrp2ZPXJxtg=
Subject key identifier:   D3:3D:FD:B4:98:3E:B7:95:CB:DC:52:40:3E:23:FA:20:91:8E:C1:E6
Certificate issuer:       /CN=108F95B401BD922625E878BB62A22549F5766415
Certificate serial:       51A932A4F24261BAEC700DA29EED22A3E0D0710C
Authority key identifier: 10:8F:95:B4:01:BD:92:26:25:E8:78:BB:62:A2:25:49:F5:76:64:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/108F95B401BD922625E878BB62A22549F5766415.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/3133382e39342e3230322e302f32342d3234203d3e20323634313639.roa
Signing time:             Fri 28 Oct 2022 20:33:06 +0000
ROA not before:           Fri 28 Oct 2022 20:28:06 +0000
ROA not after:            Fri 27 Oct 2023 20:33:06 +0000
asID:                     264169
IP address blocks:        138.94.202.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a9:32:a4:f2:42:61:ba:ec:70:0d:a2:9e:ed:22:a3:e0:d0:71:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=108F95B401BD922625E878BB62A22549F5766415
        Validity
            Not Before: Oct 28 20:28:06 2022 GMT
            Not After : Oct 27 20:33:06 2023 GMT
        Subject: CN=D33DFDB4983EB795CBDC52403E23FA20918EC1E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:27:9a:55:8b:38:32:ef:b5:22:1d:d5:ab:6f:
                    c0:32:44:28:1d:60:8d:6f:e5:27:ec:3d:a2:08:4f:
                    65:3f:66:9c:75:9d:f9:59:c5:a4:a3:e7:c2:3b:69:
                    37:35:63:29:e2:32:3d:fd:6f:c9:0f:b9:a2:ef:7d:
                    84:f5:34:c7:52:50:8e:ab:25:59:0e:47:00:66:5d:
                    c7:c5:ca:8c:98:a8:18:ca:c1:ff:16:e1:63:06:c4:
                    89:a0:e8:30:f6:3c:d5:95:a6:75:f9:1d:b1:72:4a:
                    0f:ef:ae:72:3e:5b:09:91:12:ca:d1:e4:c8:fe:08:
                    11:cb:1a:e5:72:41:ab:84:c9:d2:e5:92:76:8d:f4:
                    a9:a9:39:3d:d4:bd:b5:c0:68:b4:07:a1:5a:04:98:
                    a5:07:c7:19:90:ac:55:95:b3:44:1d:f9:13:ca:b9:
                    46:02:41:de:e7:ec:a1:f8:4d:57:aa:87:63:a1:25:
                    36:6b:e8:13:5f:24:3d:99:c0:d5:98:e0:25:f8:b7:
                    28:cb:ba:ad:aa:d7:f2:33:02:09:1d:7b:54:9d:94:
                    aa:d1:53:3e:0a:4e:73:66:70:1e:6f:ff:e6:58:11:
                    7d:0b:e3:f9:18:7f:bf:5b:f1:42:02:17:8d:60:74:
                    10:52:16:f9:3f:be:c6:76:87:38:33:ea:c4:a5:6b:
                    d3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3D:FD:B4:98:3E:B7:95:CB:DC:52:40:3E:23:FA:20:91:8E:C1:E6
            X509v3 Authority Key Identifier:
                keyid:10:8F:95:B4:01:BD:92:26:25:E8:78:BB:62:A2:25:49:F5:76:64:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/108F95B401BD922625E878BB62A22549F5766415.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/108F95B401BD922625E878BB62A22549F5766415.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/3133382e39342e3230322e302f32342d3234203d3e20323634313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:99:bb:c0:e3:55:46:bd:84:c6:96:c9:81:9e:a4:9d:55:6a:
         e5:a7:a5:76:af:0f:67:5b:57:b4:a4:97:d1:cd:e7:2b:e0:c1:
         7d:70:e9:73:96:ee:66:92:6a:de:17:eb:59:90:36:86:4f:99:
         d2:6a:39:84:fb:bf:c9:41:ef:7d:e0:85:5c:fc:b2:90:2c:c4:
         3a:2b:30:57:de:bc:5e:b5:ca:8d:8c:a1:a2:78:8a:e6:d4:81:
         b1:a4:44:b5:5d:ef:a1:49:f3:75:58:af:44:01:80:66:b9:cd:
         ce:e6:be:bf:f4:bd:9b:ed:ae:8e:a1:18:61:d0:16:89:5d:83:
         9b:c4:50:d1:ab:eb:e1:b0:ea:8e:31:77:0f:bb:db:af:4c:0a:
         83:da:e5:ef:4f:3d:1c:84:e5:30:c3:ca:e8:94:cb:1d:96:ea:
         64:5a:29:ab:46:2a:27:59:fd:af:c3:0f:f8:f9:72:87:f3:58:
         8d:a9:8d:1a:2d:5e:49:ef:72:5d:84:ea:73:be:b3:71:91:c3:
         31:86:55:5b:e8:00:fb:ef:d6:ba:15:84:45:bd:14:97:58:9f:
         b1:aa:5a:67:38:fc:93:01:cd:ef:e8:27:06:f6:55:1e:91:0b:
         95:62:78:a3:1c:df:f6:49:8a:d1:dd:1f:47:01:ac:20:55:cc:
         b4:d0:44:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:25:32 2025 by rpki-client