Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/1/3136382e3139352e33302e302f32342d3234203d3e20323635343235.roa
File:                     3136382e3139352e33302e302f32342d3234203d3e20323635343235.roa (raw, json)
Hash identifier:          FcQ6sXuo0LggfvMGcu/8H56nxQo40DC5scnorApgt6E=
Subject key identifier:   B0:36:43:6E:30:21:C3:43:DA:1E:33:73:69:03:26:4E:6F:83:4A:24
Certificate issuer:       /CN=AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E
Certificate serial:       50FDB077409FB243A872795D5B85975F8CE4396C
Authority key identifier: AE:BE:4A:8C:0B:91:8A:62:DC:00:B5:C6:39:1F:F5:B6:DD:E2:9A:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/1/3136382e3139352e33302e302f32342d3234203d3e20323635343235.roa
Signing time:             Thu 18 Jan 2024 19:47:52 +0000
ROA not before:           Thu 18 Jan 2024 19:42:52 +0000
ROA not after:            Thu 16 Jan 2025 19:47:52 +0000
asID:                     265425
IP address blocks:        168.195.30.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:fd:b0:77:40:9f:b2:43:a8:72:79:5d:5b:85:97:5f:8c:e4:39:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E
        Validity
            Not Before: Jan 18 19:42:52 2024 GMT
            Not After : Jan 16 19:47:52 2025 GMT
        Subject: CN=B036436E3021C343DA1E33736903264E6F834A24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4d:ae:29:58:63:cc:dd:1a:1f:1a:f7:4e:2e:
                    07:b5:c6:88:47:02:8e:fb:b1:95:7e:f7:1f:ea:13:
                    63:15:8b:3b:da:ac:7e:61:08:0d:59:c0:ef:1e:69:
                    1a:1a:bb:be:66:77:f6:06:04:ba:84:c5:55:f5:56:
                    df:32:76:a7:40:f7:7d:6b:eb:3f:08:d9:fb:a9:b2:
                    2b:b6:b7:f2:bb:75:20:9a:db:7c:51:ba:52:67:53:
                    6e:4e:58:c0:41:00:a4:47:94:20:62:ed:07:66:84:
                    61:3c:08:b7:4d:00:e0:43:d8:7b:61:97:9e:28:72:
                    a7:60:fc:b9:3e:93:b2:c8:e2:e2:fb:da:08:c8:54:
                    1a:be:35:3a:1d:fb:c9:75:75:8d:59:2d:af:2e:cc:
                    89:2c:7a:36:1f:1f:5f:dd:a0:c3:44:4d:45:fa:fe:
                    51:9d:35:57:11:a5:d0:f1:7a:d9:99:05:53:2b:40:
                    fd:21:48:6f:ea:26:1f:93:c6:4d:0c:5a:72:5d:bd:
                    42:3a:48:de:e1:d6:4b:2d:85:2b:e4:f2:a7:7e:a2:
                    4a:12:30:b2:1d:ec:e1:5a:10:cc:17:04:cb:c6:22:
                    39:de:61:21:17:da:78:69:9c:5b:e7:85:b3:3a:f0:
                    33:b3:29:ec:7d:41:b0:a4:fb:06:4e:49:d7:9e:82:
                    3a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:36:43:6E:30:21:C3:43:DA:1E:33:73:69:03:26:4E:6F:83:4A:24
            X509v3 Authority Key Identifier:
                keyid:AE:BE:4A:8C:0B:91:8A:62:DC:00:B5:C6:39:1F:F5:B6:DD:E2:9A:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/1/AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/1/3136382e3139352e33302e302f32342d3234203d3e20323635343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:62:47:5a:08:a2:eb:23:6d:0f:65:f5:f1:3f:7c:c7:e8:96:
         95:e9:62:00:89:b2:ab:7b:8e:bd:59:9c:bc:29:46:34:92:2d:
         6d:99:07:f8:c2:fb:7f:71:4a:43:32:57:99:38:ee:b9:3e:76:
         b3:24:8f:e2:34:15:f1:b3:3e:10:54:49:0e:65:59:27:3d:a5:
         75:6b:7f:2c:1d:8d:7e:a5:11:64:58:dc:f7:31:3a:83:e7:e6:
         a8:d0:a2:0b:18:d5:49:77:97:dc:2a:33:79:61:18:f7:52:19:
         4f:c2:65:7a:45:e3:ad:53:f2:88:48:5a:55:ed:0a:f0:54:80:
         7b:06:00:90:c5:bd:7b:33:35:67:8d:a5:f3:37:95:ed:d9:a6:
         1c:6b:8d:bd:2b:31:f0:b6:6a:c0:36:79:52:1d:66:d5:e0:27:
         a0:8b:b3:fd:6b:3a:ca:70:7e:5f:c3:b8:d9:2f:8e:c0:fc:54:
         3f:ee:2d:2f:a3:98:a8:95:fd:ad:ae:4b:36:8b:86:51:67:33:
         8f:68:ed:3f:14:35:a6:52:a4:8d:eb:86:0a:04:7d:13:fe:4e:
         c5:c4:20:09:fe:71:ae:6b:3c:59:71:20:6f:63:db:6a:ca:55:
         22:33:cc:87:5c:ac:94:06:f3:36:ef:57:90:e6:54:70:dc:9b:
         b8:f1:27:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:01:13 2025 by rpki-client