Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e32392e302f32342d3234203d3e20323635343235.roa
File:                     3136382e3139352e32392e302f32342d3234203d3e20323635343235.roa (raw, json)
Hash identifier:          68RQP2yM+06MNPnqd/qYQzS8B+kRQV5MWQe53XcDcs8=
Subject key identifier:   21:12:14:07:09:E7:1C:3C:78:23:3E:CA:FF:30:BB:B2:41:08:E6:AB
Certificate issuer:       /CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
Certificate serial:       5CD4433BDDB9BEEFE5B488D2ADA681467FB9ACFE
Authority key identifier: 0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e32392e302f32342d3234203d3e20323635343235.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     265425
IP address blocks:        168.195.29.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:d4:43:3b:dd:b9:be:ef:e5:b4:88:d2:ad:a6:81:46:7f:b9:ac:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=2112140709E71C3C78233ECAFF30BBB24108E6AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:68:ff:43:b4:49:59:c3:65:81:b4:06:14:e0:
                    eb:d8:ae:a8:0c:7b:f4:82:43:8d:54:e4:94:b7:32:
                    79:35:95:69:be:14:68:f7:8a:42:c8:ed:d4:09:df:
                    7f:27:ac:9c:4f:01:4b:f6:4d:3f:c4:c8:fe:0b:8f:
                    86:c4:13:37:8c:cd:fb:f4:74:62:4b:f6:81:80:67:
                    56:0f:62:b6:fe:fb:7a:50:c9:b0:1c:d4:d9:98:af:
                    c3:21:bf:fe:76:66:1e:36:38:0e:5d:a8:4b:b2:5d:
                    ad:d7:d5:05:12:28:9b:2d:d1:d5:74:3f:ca:8e:e8:
                    78:35:6f:9f:6d:51:c1:e9:90:dc:1b:cd:81:c0:c3:
                    45:a7:d2:d3:37:9c:3f:d6:3a:e9:69:8f:a4:56:69:
                    03:89:19:42:32:83:f1:4e:2f:89:0d:3f:3b:22:27:
                    e8:79:f0:5a:a3:36:3c:55:ac:ed:ff:3a:ce:41:75:
                    8d:33:78:d9:07:79:9f:e3:25:a4:76:fe:d1:9b:aa:
                    6f:9a:4a:f0:03:13:00:ba:c3:fe:5c:56:95:fb:3c:
                    4d:49:ce:84:85:aa:e3:8b:42:b8:af:80:53:b0:64:
                    ba:3b:b0:a2:dc:80:22:69:13:c5:f7:6b:8b:06:f7:
                    49:36:ea:dc:5a:e7:67:70:24:a6:c8:b7:e7:77:44:
                    fd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:12:14:07:09:E7:1C:3C:78:23:3E:CA:FF:30:BB:B2:41:08:E6:AB
            X509v3 Authority Key Identifier:
                keyid:0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e32392e302f32342d3234203d3e20323635343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:43:f6:5d:a0:39:9c:e3:cb:a4:38:28:d9:23:2c:cc:48:c3:
         e5:05:26:e6:3b:8c:9b:17:6d:52:cb:9e:21:cb:f0:d5:c2:89:
         8c:9d:f0:c0:00:fc:e6:82:53:39:d5:c4:09:15:b6:b9:d7:41:
         c1:8a:41:c3:b3:a8:a1:01:c1:2a:c4:d8:95:a0:fd:49:c5:70:
         37:5b:2b:38:ea:03:6a:94:00:f8:b2:93:2b:c5:b4:5b:a5:dc:
         98:19:29:24:3f:5d:8a:b0:37:f9:64:67:7b:e9:5e:8d:1a:a2:
         90:00:b9:e9:e6:cb:fc:9e:a1:4a:c2:bd:9c:a3:92:b5:ab:36:
         16:15:79:6a:ae:db:31:da:83:7f:5b:f6:c3:3b:39:81:26:c9:
         07:ce:de:e7:3f:49:26:6b:d8:ce:00:16:17:b9:9a:07:80:69:
         27:e5:67:4d:f4:98:19:ec:08:8e:cb:05:5b:fe:37:7f:62:64:
         34:29:e9:fb:1d:14:c0:57:99:c1:b4:a2:a4:43:5e:a2:7f:1d:
         3a:62:27:89:f1:a3:de:08:cc:00:f6:a5:2f:fc:73:e3:d3:6d:
         01:b4:c9:58:3f:2f:9a:7b:4b:71:83:09:4b:27:59:fb:35:85:
         61:9a:c3:37:37:d2:22:33:30:ad:9c:6e:26:14:68:89:ef:3b:
         ab:c6:a9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:21:54 2025 by rpki-client