Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/3133382e39342e3230332e302f32342d3234203d3e20323634313639.roa
File:                     3133382e39342e3230332e302f32342d3234203d3e20323634313639.roa (raw, json)
Hash identifier:          kv6uvucT3tPzzmiK9C3G5jj5erjxzUesCJkJlnS75/o=
Subject key identifier:   F7:0C:94:00:8B:7A:ED:F6:93:E8:EA:0D:D4:B5:EF:2B:51:B4:85:76
Certificate issuer:       /CN=108F95B401BD922625E878BB62A22549F5766415
Certificate serial:       39D2117E47E55AC1B36D8AE299071FEB7E8A675A
Authority key identifier: 10:8F:95:B4:01:BD:92:26:25:E8:78:BB:62:A2:25:49:F5:76:64:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/108F95B401BD922625E878BB62A22549F5766415.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/3133382e39342e3230332e302f32342d3234203d3e20323634313639.roa
Signing time:             Fri 28 Oct 2022 20:33:08 +0000
ROA not before:           Fri 28 Oct 2022 20:28:08 +0000
ROA not after:            Fri 27 Oct 2023 20:33:08 +0000
asID:                     264169
IP address blocks:        138.94.203.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:d2:11:7e:47:e5:5a:c1:b3:6d:8a:e2:99:07:1f:eb:7e:8a:67:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=108F95B401BD922625E878BB62A22549F5766415
        Validity
            Not Before: Oct 28 20:28:08 2022 GMT
            Not After : Oct 27 20:33:08 2023 GMT
        Subject: CN=F70C94008B7AEDF693E8EA0DD4B5EF2B51B48576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:df:9d:10:c8:4c:0d:31:d3:e0:17:8f:fc:e7:
                    20:64:e3:32:4a:94:5f:36:ab:39:ba:65:a9:8b:4a:
                    d9:c2:09:a6:76:4e:34:47:cb:9a:35:e8:f9:ba:19:
                    76:cf:e8:fb:59:26:38:92:4d:25:b5:30:be:15:c3:
                    df:36:6e:8e:c5:a8:04:bd:93:f1:0b:1c:df:57:24:
                    3b:e6:3e:81:22:07:d3:4b:8e:70:97:e6:8d:a6:6b:
                    ce:33:ca:33:3d:6f:4b:26:c4:0d:ee:d1:ff:6c:95:
                    98:f7:c8:90:58:78:53:8c:91:86:b2:5c:ae:26:fa:
                    fe:b0:11:77:b7:52:8b:bc:69:ad:2b:fa:3e:2a:01:
                    75:45:8d:80:77:54:b9:39:7d:09:6a:0d:17:ce:36:
                    2a:fc:b1:ba:81:24:20:b2:51:fb:d1:01:1f:36:c3:
                    11:1d:3b:37:e8:75:c6:a7:2d:91:21:66:29:07:55:
                    b3:96:52:0b:b2:30:3b:e3:ee:e1:74:1c:cb:99:1b:
                    bb:d0:f5:05:d5:8c:c8:4d:01:8b:94:1e:5a:89:58:
                    a2:2c:c6:7e:27:fe:a8:a0:22:8a:98:2b:17:ec:40:
                    93:16:9c:79:54:be:b1:72:79:79:fd:78:d2:a0:25:
                    36:ea:e7:85:fc:6e:28:36:cb:6a:ed:19:43:ff:21:
                    16:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:0C:94:00:8B:7A:ED:F6:93:E8:EA:0D:D4:B5:EF:2B:51:B4:85:76
            X509v3 Authority Key Identifier:
                keyid:10:8F:95:B4:01:BD:92:26:25:E8:78:BB:62:A2:25:49:F5:76:64:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/108F95B401BD922625E878BB62A22549F5766415.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/108F95B401BD922625E878BB62A22549F5766415.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/3133382e39342e3230332e302f32342d3234203d3e20323634313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:6d:37:f6:63:03:85:fd:02:35:88:d0:8f:1d:04:8e:49:96:
         86:13:41:ec:10:4c:2f:c5:23:30:9a:aa:67:7c:df:4b:34:f7:
         f7:83:57:c1:e2:51:e4:86:2d:bf:06:8a:7b:75:09:0d:9a:68:
         28:0b:45:41:79:6f:c6:d4:8f:eb:20:6c:c8:50:21:17:27:11:
         4f:99:5d:29:60:c2:1d:e2:0f:0a:db:2b:1b:2d:e5:57:8b:fd:
         cc:8e:8d:f1:f2:4e:d4:95:61:45:b7:97:6a:e5:63:b8:bb:92:
         25:64:e5:5f:59:3c:59:af:e9:0d:ae:62:ff:b9:43:83:02:c5:
         e1:1b:c6:94:77:8a:5c:99:a1:e3:92:54:46:e5:9f:4a:7b:ff:
         d8:28:19:80:eb:7d:47:2e:0d:25:39:b2:0c:1f:e5:a1:b7:dd:
         aa:32:04:fd:d8:80:0a:fe:0e:47:0c:24:80:5c:52:2f:15:07:
         8f:b4:72:c4:25:32:f7:c2:c8:45:0b:75:aa:8d:fa:2a:5c:cd:
         d2:75:9e:16:7d:a1:a6:39:b5:92:21:3c:a9:f2:da:1e:cb:b3:
         21:2c:c4:e4:07:f2:4c:8c:02:45:8b:c8:b9:2e:ca:09:b5:cd:
         f6:f5:27:48:0c:72:b5:d0:6e:a4:05:02:4c:ec:2e:00:a2:45:
         da:1a:69:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:14:57 2025 by rpki-client