Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e33312e302f32342d3234203d3e20323635343235.roa
File:                     3136382e3139352e33312e302f32342d3234203d3e20323635343235.roa (raw, json)
Hash identifier:          SSvnKIou5tapPwYANrt1w6Bru2q0yrR/frue1eKNrWE=
Subject key identifier:   16:00:75:53:38:72:E8:77:21:EB:CD:70:17:46:31:7A:DE:5E:19:28
Certificate issuer:       /CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
Certificate serial:       20AF761DB193E5459A90808BD412353FF83E2E4A
Authority key identifier: 0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e33312e302f32342d3234203d3e20323635343235.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     265425
IP address blocks:        168.195.31.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:af:76:1d:b1:93:e5:45:9a:90:80:8b:d4:12:35:3f:f8:3e:2e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject: CN=160075533872E87721EBCD701746317ADE5E1928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:73:85:df:36:4c:2f:91:1e:10:ff:86:ec:5d:
                    94:ca:e5:5b:43:f8:f6:7b:6b:36:5f:ee:01:02:35:
                    65:d8:8b:cf:77:b2:35:09:ad:bf:98:c9:4e:98:89:
                    99:a0:ad:98:31:27:9b:df:52:de:ce:c4:b4:cc:5b:
                    06:e4:01:3b:44:a8:cd:aa:9d:9e:b9:0c:c5:09:14:
                    7b:6c:d2:03:f1:25:71:af:24:ee:97:f1:a6:60:cf:
                    bf:bc:97:ee:e7:37:00:e0:8c:ee:3b:bf:16:a1:06:
                    0a:7e:0c:dd:a7:8c:11:65:18:6a:9c:68:d5:a1:50:
                    c3:2b:11:de:b1:ec:02:7b:7e:b4:14:0f:46:3a:63:
                    28:da:d6:95:bb:25:f1:a0:c8:18:de:e2:2d:92:b5:
                    46:5c:e2:fc:54:e8:79:75:be:68:5d:22:46:27:19:
                    34:9c:cf:ff:f2:44:fb:68:8f:43:09:77:20:38:b0:
                    15:21:16:bb:d9:c9:82:44:97:bd:be:23:ab:c0:8f:
                    6e:91:18:6c:7f:28:c3:3f:65:e0:f0:d1:58:4f:05:
                    71:4b:09:5a:40:7c:87:0d:48:9d:ff:69:80:1a:0d:
                    2b:bb:2a:0a:e6:11:c8:b3:75:40:6b:f9:ba:b9:6e:
                    70:99:83:c0:cf:18:db:8f:e9:72:0d:45:f4:f2:22:
                    aa:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:00:75:53:38:72:E8:77:21:EB:CD:70:17:46:31:7A:DE:5E:19:28
            X509v3 Authority Key Identifier:
                keyid:0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e33312e302f32342d3234203d3e20323635343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:a4:19:9a:7b:bc:e0:fa:c1:8d:9b:97:8b:66:41:e6:5d:b2:
         95:42:a1:f9:eb:ea:60:e0:52:62:41:06:1b:cf:5a:a2:8f:20:
         5d:a7:88:33:7b:4f:39:11:7d:44:00:22:3d:76:71:e3:54:00:
         fe:f1:e5:07:05:c4:f0:c1:f4:5c:13:53:2d:f3:ec:97:d3:e0:
         1b:2d:45:18:44:05:75:22:f1:9d:05:e4:72:43:94:37:8b:71:
         43:e1:91:e4:74:3b:46:2c:97:a1:76:a2:e5:4d:39:67:21:fe:
         a5:fa:db:8e:08:f1:aa:64:fd:28:c8:04:0c:cd:b0:b5:52:d4:
         0c:f7:41:ac:95:06:a9:c9:50:11:6a:72:61:1d:7a:25:73:31:
         67:8d:a9:d8:e4:8b:d3:ae:e6:b0:f2:f6:a7:f5:6e:a4:b1:fa:
         4a:d1:cf:57:08:8f:d4:e2:ab:cc:14:16:a5:bc:22:a7:8f:47:
         d8:4c:92:a4:6e:4d:2a:78:bf:cb:1e:2a:ef:0e:b4:b7:fe:17:
         2a:f0:b7:90:87:82:5d:5b:a3:7a:44:6c:45:b4:08:b8:4a:b9:
         2e:f8:eb:a2:c7:e0:c8:16:e1:54:2a:bd:4c:70:93:76:35:13:
         08:8e:3c:3c:8e:f4:59:00:df:7a:29:51:2b:eb:d0:de:4d:e3:
         f4:9e:07:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:46:10 2025 by rpki-client