Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e33302e302f32342d3234203d3e20323635343235.roa
File:                     3136382e3139352e33302e302f32342d3234203d3e20323635343235.roa (raw, json)
Hash identifier:          OCzuBnMVYYGKPUlgYk2j0N0SB06bD4LIJp3X0YXh13Q=
Subject key identifier:   2B:D9:68:9B:8D:CF:C2:E4:C6:0A:57:4E:75:91:EE:E2:4A:14:04:36
Certificate issuer:       /CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
Certificate serial:       12AA82EA62AAA0F869404EF27C0D04AF25985F02
Authority key identifier: 0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e33302e302f32342d3234203d3e20323635343235.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     265425
IP address blocks:        168.195.30.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:aa:82:ea:62:aa:a0:f8:69:40:4e:f2:7c:0d:04:af:25:98:5f:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject: CN=2BD9689B8DCFC2E4C60A574E7591EEE24A140436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f2:ec:af:ad:8c:0c:72:ff:d8:b6:7b:82:fa:
                    d6:8a:c8:05:ad:79:56:f4:66:60:ba:fe:eb:9d:7e:
                    fd:a4:d3:5f:1e:b2:32:1e:79:02:d0:e4:1a:83:3d:
                    ad:44:a6:9f:e3:78:0d:9b:9e:dd:03:11:7e:57:ca:
                    ad:2d:21:d8:c2:7e:7c:09:13:22:52:a8:b4:1a:c2:
                    86:01:7e:b0:da:14:e5:ee:65:e0:8c:73:92:17:31:
                    32:0e:0d:7d:91:ad:1a:27:df:59:aa:f7:f2:b8:13:
                    c0:04:60:66:ab:01:94:02:35:9f:b3:ff:f2:55:31:
                    b2:a6:7c:82:7e:bc:ed:a5:14:6d:5e:02:45:99:87:
                    a1:c9:84:0a:5d:07:77:77:17:fa:a4:a7:1b:10:c9:
                    97:0a:c7:13:a9:cf:c1:25:1a:b4:c3:58:13:fd:ad:
                    4c:77:00:c6:f3:26:b9:62:40:ee:95:25:6f:af:8a:
                    63:c8:f7:77:db:5b:a5:63:dc:34:22:76:1a:20:0a:
                    67:e7:a6:8d:86:a6:3a:f6:a8:b3:bc:8f:23:0d:3e:
                    cd:e7:b7:34:86:03:21:c1:aa:93:0c:8f:4e:d3:df:
                    4a:b8:82:a2:9c:cb:a7:c9:3d:cf:a2:c2:46:31:dc:
                    9c:77:94:c9:2f:96:cd:d4:ca:ba:6b:46:cf:31:06:
                    23:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D9:68:9B:8D:CF:C2:E4:C6:0A:57:4E:75:91:EE:E2:4A:14:04:36
            X509v3 Authority Key Identifier:
                keyid:0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e33302e302f32342d3234203d3e20323635343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:cc:a9:87:86:5a:de:e8:05:80:f2:73:b0:a2:c9:d4:5a:c2:
         42:7b:86:d5:67:3a:94:28:57:1e:59:ce:b0:7f:4d:e7:d7:e2:
         e7:15:59:99:9f:b5:70:d1:31:4f:b6:23:f3:0f:d5:86:a0:e6:
         23:8b:25:5b:fb:ff:0b:02:a9:fd:74:cf:0f:92:f8:ff:47:b0:
         d9:34:11:2f:b6:87:9b:d4:99:45:42:85:74:3c:48:24:75:88:
         9f:ec:f5:21:8d:6a:bb:b9:e1:90:55:be:59:e4:72:a4:2c:f0:
         bd:5f:e2:86:71:e9:f8:04:3f:5c:8b:87:a8:a2:e0:57:f9:64:
         32:e1:e8:36:d2:b0:dd:d2:45:7d:53:ab:00:43:71:ae:3b:a1:
         93:fe:a5:13:17:df:19:f0:b7:a4:c6:ad:e1:7c:07:1e:25:01:
         c5:db:cd:3c:64:52:c7:f2:f2:11:19:df:f1:f4:b6:f9:51:1a:
         6b:2d:bb:9b:12:39:85:ab:73:ed:3d:12:bd:ea:6f:22:c3:72:
         4a:ef:3b:3b:90:38:eb:ea:ce:0e:0b:5d:27:78:5d:a7:c4:c5:
         c9:7d:31:08:da:a6:da:de:e2:6c:7b:3e:ac:67:1d:77:aa:a2:
         f6:ff:7e:59:c0:16:88:f6:d4:0e:85:f7:34:be:d5:e6:ac:af:
         65:9e:bd:8d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEqqC6mKqoPhpQE7yfA0EryWYXwIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEIwNkQzQkQ0MkFFMjk1RjE3Q0Y1MkQ1OEE1QkEzMEJD
RTkxQkZGOTAeFw0yNTAzMDUxODU1MDFaFw0yNjAzMDQxOTAwMDFaMDMxMTAvBgNV
BAMTKDJCRDk2ODlCOERDRkMyRTRDNjBBNTc0RTc1OTFFRUUyNEExNDA0MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz8uyvrYwMcv/YtnuC+taKyAWt
eVb0ZmC6/uudfv2k018esjIeeQLQ5BqDPa1Epp/jeA2bnt0DEX5Xyq0tIdjCfnwJ
EyJSqLQawoYBfrDaFOXuZeCMc5IXMTIODX2RrRon31mq9/K4E8AEYGarAZQCNZ+z
//JVMbKmfIJ+vO2lFG1eAkWZh6HJhApdB3d3F/qkpxsQyZcKxxOpz8ElGrTDWBP9
rUx3AMbzJrliQO6VJW+vimPI93fbW6Vj3DQidhogCmfnpo2Gpjr2qLO8jyMNPs3n
tzSGAyHBqpMMj07T30q4gqKcy6fJPc+iwkYx3Jx3lMkvls3UyrprRs8xBiPfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUK9lom43PwuTGCldOdZHu4koUBDYwHwYDVR0j
BBgwFoAUCwbTvUKuKV8Xz1LVilujC86Rv/kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUVXMVM1RnNhTUhpNE5vWjlGeVF1S3lpeU14Q3VQZzZVeGlQNng1QTdV
NGgvMi8wQjA2RDNCRDQyQUUyOTVGMTdDRjUyRDU4QTVCQTMwQkNFOTFCRkY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBCMDZEM0JENDJBRTI5NUYx
N0NGNTJENThBNUJBMzBCQ0U5MUJGRjkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVFVzFTNUZzYU1IaTROb1o5RnlRdUt5aXlNeEN1UGc2VXhpUDZ4NUE3VTRoLzIv
MzEzNjM4MmUzMTM5MzUyZTMzMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzNDMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACowx4wDQYJKoZIhvcNAQELBQADggEBAGjMqYeG
Wt7oBYDyc7CiydRawkJ7htVnOpQoVx5ZzrB/TefX4ucVWZmftXDRMU+2I/MP1Yag
5iOLJVv7/wsCqf10zw+S+P9HsNk0ES+2h5vUmUVChXQ8SCR1iJ/s9SGNaru54ZBV
vlnkcqQs8L1f4oZx6fgEP1yLh6ii4Ff5ZDLh6DbSsN3SRX1TqwBDca47oZP+pRMX
3xnwt6TGreF8Bx4lAcXbzTxkUsfy8hEZ3/H0tvlRGmstu5sSOYWrc+09Er3qbyLD
ckrvOzuQOOvqzg4LXSd4XafExcl9MQjaptre4mx7PqxnHXeqovb/flnAFoj21A6F
9zS+1easr2WevY0=
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:58:20 2025 by rpki-client