Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/3133382e39342e3230322e302f32332d3233203d3e20323634313639.roa
File:                     3133382e39342e3230322e302f32332d3233203d3e20323634313639.roa (raw, json)
Hash identifier:          OGgvY2jWNU17oQQBiPkYAUwnIHqFiKnnsVdgNAX8mzI=
Subject key identifier:   7D:18:D7:D8:A9:4C:7B:DE:06:09:6C:92:A8:F5:73:26:B9:4F:58:B0
Certificate issuer:       /CN=108F95B401BD922625E878BB62A22549F5766415
Certificate serial:       3C729B9A4795714966801FB029AEE2865ACF413B
Authority key identifier: 10:8F:95:B4:01:BD:92:26:25:E8:78:BB:62:A2:25:49:F5:76:64:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/108F95B401BD922625E878BB62A22549F5766415.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/3133382e39342e3230322e302f32332d3233203d3e20323634313639.roa
Signing time:             Fri 28 Oct 2022 20:33:04 +0000
ROA not before:           Fri 28 Oct 2022 20:28:04 +0000
ROA not after:            Fri 27 Oct 2023 20:33:04 +0000
asID:                     264169
IP address blocks:        138.94.202.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:72:9b:9a:47:95:71:49:66:80:1f:b0:29:ae:e2:86:5a:cf:41:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=108F95B401BD922625E878BB62A22549F5766415
        Validity
            Not Before: Oct 28 20:28:04 2022 GMT
            Not After : Oct 27 20:33:04 2023 GMT
        Subject: CN=7D18D7D8A94C7BDE06096C92A8F57326B94F58B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:56:ce:12:fd:42:bb:46:6d:bb:7b:1c:4e:62:
                    05:d9:95:fc:2d:76:db:07:02:85:14:8b:6a:b5:5b:
                    90:92:81:ee:dd:c9:44:14:f9:9c:36:6a:71:18:9d:
                    39:fd:25:2f:c0:50:29:05:62:27:4f:b2:75:ea:fb:
                    7a:87:ba:55:38:27:09:b3:93:66:e4:26:21:27:32:
                    d3:0d:61:4c:41:ea:32:1a:e1:1a:fe:95:b0:1c:36:
                    f3:0c:92:7d:6d:78:73:fa:27:23:e1:33:b9:1c:d0:
                    3a:24:f1:51:d9:4c:9f:05:03:ab:42:9d:f2:b0:73:
                    0f:08:b3:95:c4:19:6a:d3:8e:74:a3:42:ec:26:b1:
                    d0:1a:61:f0:7b:b4:1b:99:cc:58:3a:d4:a5:4d:1f:
                    9b:89:9d:2e:27:73:fd:21:a1:07:0f:b6:9d:ee:c3:
                    a5:13:99:b3:d0:ab:28:25:0b:c2:bc:d5:87:58:98:
                    89:b0:45:37:eb:f5:f3:e4:e8:52:f3:49:0b:38:5b:
                    07:4d:7f:ad:54:85:cb:10:39:ac:50:2e:23:b9:fe:
                    be:6b:a8:3c:40:4e:f9:f7:2c:ec:fa:5b:12:36:a9:
                    5b:0a:93:d9:16:f7:5d:39:f3:29:18:99:31:a0:bf:
                    67:95:83:06:a8:45:6c:8b:e4:dc:49:17:90:14:9e:
                    21:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:18:D7:D8:A9:4C:7B:DE:06:09:6C:92:A8:F5:73:26:B9:4F:58:B0
            X509v3 Authority Key Identifier:
                keyid:10:8F:95:B4:01:BD:92:26:25:E8:78:BB:62:A2:25:49:F5:76:64:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/108F95B401BD922625E878BB62A22549F5766415.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/108F95B401BD922625E878BB62A22549F5766415.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/3133382e39342e3230322e302f32332d3233203d3e20323634313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:0f:dc:ea:9e:67:f9:15:e6:57:4a:de:e3:e5:8f:eb:4f:6c:
         66:fa:2f:4d:02:fd:32:e5:84:a1:db:cf:72:47:59:0b:9a:bc:
         66:d4:fd:03:5f:95:1d:36:f8:9d:27:e1:f2:26:86:11:e6:78:
         18:8a:1c:8a:41:11:f2:87:6e:db:69:c6:d8:28:20:4e:f4:87:
         d0:b9:d9:93:9d:bf:47:85:6f:d3:cd:8b:d9:4a:e6:9a:2a:59:
         8a:d7:12:96:f0:44:cd:55:37:87:51:03:9d:b5:7c:04:1d:be:
         45:66:29:a8:fe:c5:77:2b:84:53:05:4d:9f:86:d5:bb:ef:6a:
         6a:b1:7b:67:e4:0a:0b:9e:9d:6f:e0:f5:06:9d:2b:da:70:28:
         06:5c:24:d8:78:0b:80:15:3f:4c:e6:cf:cb:67:5f:39:4d:37:
         29:be:3c:e1:3a:91:db:a8:a8:54:08:9e:a1:f5:46:bd:e8:31:
         05:0d:58:64:20:e1:4b:f5:14:86:81:ce:eb:ff:f1:19:8f:82:
         d6:f7:d1:d4:44:04:9a:0a:24:d4:b7:bd:ba:93:a9:ab:f0:f3:
         c6:3d:a5:3f:75:53:d5:fd:ed:6f:4f:ee:2f:77:54:8e:5b:86:
         e3:ef:3a:68:5d:1f:b2:68:95:7d:26:23:21:4c:c4:9d:87:61:
         40:06:c2:c8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPHKbmkeVcUlmgB+wKa7ihlrPQTswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA4Rjk1QjQwMUJEOTIyNjI1RTg3OEJCNjJBMjI1NDlG
NTc2NjQxNTAeFw0yMjEwMjgyMDI4MDRaFw0yMzEwMjcyMDMzMDRaMDMxMTAvBgNV
BAMTKDdEMThEN0Q4QTk0QzdCREUwNjA5NkM5MkE4RjU3MzI2Qjk0RjU4QjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJVs4S/UK7Rm27exxOYgXZlfwt
dtsHAoUUi2q1W5CSge7dyUQU+Zw2anEYnTn9JS/AUCkFYidPsnXq+3qHulU4Jwmz
k2bkJiEnMtMNYUxB6jIa4Rr+lbAcNvMMkn1teHP6JyPhM7kc0Dok8VHZTJ8FA6tC
nfKwcw8Is5XEGWrTjnSjQuwmsdAaYfB7tBuZzFg61KVNH5uJnS4nc/0hoQcPtp3u
w6UTmbPQqyglC8K81YdYmImwRTfr9fPk6FLzSQs4WwdNf61UhcsQOaxQLiO5/r5r
qDxATvn3LOz6WxI2qVsKk9kW91058ykYmTGgv2eVgwaoRWyL5NxJF5AUniHfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUfRjX2KlMe94GCWySqPVzJrlPWLAwHwYDVR0j
BBgwFoAUEI+VtAG9kiYl6Hi7YqIlSfV2ZBUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEpzblBtVnFnZHpjODJYb1ZjWHY0ZlRLZjlSUWl6ZER6U1BlcmNITVhu
WWgvMC8xMDhGOTVCNDAxQkQ5MjI2MjVFODc4QkI2MkEyMjU0OUY1NzY2NDE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEwOEY5NUI0MDFCRDkyMjYy
NUU4NzhCQjYyQTIyNTQ5RjU3NjY0MTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhKc25QbVZxZ2R6YzgyWG9WY1h2NGZUS2Y5UlFpemREelNQZXJjSE1YblloLzAv
MzEzMzM4MmUzOTM0MmUzMjMwMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzQzMTM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGKXsowDQYJKoZIhvcNAQELBQADggEBAFsP3Oqe
Z/kV5ldK3uPlj+tPbGb6L00C/TLlhKHbz3JHWQuavGbU/QNflR02+J0n4fImhhHm
eBiKHIpBEfKHbttpxtgoIE70h9C52ZOdv0eFb9PNi9lK5poqWYrXEpbwRM1VN4dR
A521fAQdvkVmKaj+xXcrhFMFTZ+G1bvvamqxe2fkCguenW/g9QadK9pwKAZcJNh4
C4AVP0zmz8tnXzlNNym+POE6kduoqFQInqH1Rr3oMQUNWGQg4Uv1FIaBzuv/8RmP
gtb30dREBJoKJNS3vbqTqavw88Y9pT91U9X97W9P7i93VI5bhuPvOmhdH7JolX0m
IyFMxJ2HYUAGwsg=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:25 2023 by rpki-client on console.sobornost.net