Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e32382e302f32342d3234203d3e20323635343235.roa
File:                     3136382e3139352e32382e302f32342d3234203d3e20323635343235.roa (raw, json)
Hash identifier:          dq/+8oOd5VUasJ5fSEIwYjwyyDp/VhN13OR1io5e43U=
Subject key identifier:   E2:0C:A3:EB:87:7E:02:71:2E:FA:96:4C:BE:EC:26:4A:EA:D5:CE:FB
Certificate issuer:       /CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
Certificate serial:       315662C5615C582CD7034F643B96BD6F85D8FFAB
Authority key identifier: 0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e32382e302f32342d3234203d3e20323635343235.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     265425
IP address blocks:        168.195.28.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:56:62:c5:61:5c:58:2c:d7:03:4f:64:3b:96:bd:6f:85:d8:ff:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=E20CA3EB877E02712EFA964CBEEC264AEAD5CEFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:07:1d:bd:58:b4:5c:19:8b:2f:3e:ea:b8:74:
                    02:5a:63:e3:ef:b4:d4:38:5c:d8:d6:61:29:e0:61:
                    65:6d:32:9b:24:9e:a7:f8:13:ae:43:af:75:18:a7:
                    4d:ee:94:8f:03:11:52:65:78:a7:54:4a:44:ce:4e:
                    6c:0b:51:51:cf:0a:30:69:a5:a2:47:da:cc:61:f9:
                    89:4d:d8:25:a8:88:12:51:04:ba:ee:c7:56:5c:f9:
                    9a:08:f9:0b:d2:65:8a:c3:bf:89:38:87:ed:df:ac:
                    a0:2f:3f:3a:2d:9d:fb:39:9d:09:8b:27:5a:68:53:
                    f1:12:1b:7c:6c:66:f2:2f:a1:db:2a:10:f0:cc:49:
                    34:b7:6d:a4:49:23:7d:e7:1c:a0:20:c4:78:a2:2f:
                    a6:1e:80:b2:9f:61:21:00:ce:ec:ba:41:3a:5d:e6:
                    71:67:49:d6:65:5c:33:f5:23:34:93:52:d3:c6:b5:
                    a9:75:49:d7:e0:85:5a:ae:85:4f:19:84:bc:bc:b8:
                    6e:c6:8b:8e:d8:12:12:a9:e5:1d:7d:8c:2d:5b:75:
                    6f:9d:6a:40:67:ed:78:d3:af:ea:69:12:eb:60:8f:
                    92:49:e5:87:1e:bb:13:26:1a:c1:79:12:93:aa:9a:
                    1f:32:06:71:20:a3:69:00:62:19:2b:f3:49:14:54:
                    6c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:0C:A3:EB:87:7E:02:71:2E:FA:96:4C:BE:EC:26:4A:EA:D5:CE:FB
            X509v3 Authority Key Identifier:
                keyid:0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e32382e302f32342d3234203d3e20323635343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:a6:8b:4d:57:f1:72:d2:b6:72:50:18:ce:4b:55:c2:19:8b:
         44:a4:38:7f:f4:3b:47:03:8e:0e:5b:af:60:c4:f2:ab:ff:d9:
         4d:c4:89:13:aa:06:ca:5c:ca:fb:fe:d8:5b:03:27:dc:21:5b:
         77:14:a3:06:4f:42:a4:17:23:80:37:69:18:56:e5:e0:dc:62:
         72:ee:03:10:d0:87:51:15:ae:11:52:21:da:bf:4d:8c:7b:08:
         38:d6:96:ad:6e:35:68:14:16:b3:29:db:b4:9e:24:de:59:38:
         e0:d0:f1:eb:42:47:43:ad:51:44:00:6b:15:06:08:b1:52:6b:
         8b:ef:93:20:7a:67:66:e7:e5:c4:61:ec:f4:07:3b:74:4e:55:
         30:79:5e:6a:d7:cd:a5:f8:74:d0:05:cc:28:a0:99:c4:83:31:
         be:77:8a:bb:e7:fa:7d:16:25:e4:3b:93:2e:6f:86:7b:b9:b4:
         1b:14:e8:f1:ac:35:9e:09:0f:be:06:ac:94:70:8d:92:ea:ea:
         77:13:71:a1:4d:ba:cf:9f:2b:a4:26:4a:3b:02:43:21:1c:67:
         a8:72:c2:16:c3:83:b8:ec:1c:b1:29:ee:be:93:5d:ff:c3:4a:
         63:5e:b7:9a:f6:58:55:9c:7c:36:43:c5:e6:f5:59:4a:5a:c6:
         9a:74:9f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:44:36 2025 by rpki-client