Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3138372e31362e3139322e302f31392d3332203d3e2030.roa
File:                     3138372e31362e3139322e302f31392d3332203d3e2030.roa (raw, json)
Hash identifier:          VUMZ4iSV+4//Tw6mlttR+3x2RTPNvyUILvXozwFlLOo=
Subject key identifier:   4E:04:1C:37:77:C8:C5:34:D9:8C:F8:FE:E3:89:58:1B:6D:53:DF:7B
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       25860B53D64C307B8ABF4365B6A86D732DA0AAE0
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3138372e31362e3139322e302f31392d3332203d3e2030.roa
Signing time:             Mon 17 Mar 2025 17:44:02 +0000
ROA not before:           Mon 17 Mar 2025 17:39:02 +0000
ROA not after:            Mon 16 Mar 2026 17:44:02 +0000
asID:                     0
IP address blocks:        187.16.192.0/19 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:86:0b:53:d6:4c:30:7b:8a:bf:43:65:b6:a8:6d:73:2d:a0:aa:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Mar 17 17:39:02 2025 GMT
            Not After : Mar 16 17:44:02 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:89:52:a9:cc:8b:fd:62:a6:4f:f8:08:9e:66:
                    58:ba:d8:ab:1a:84:9d:63:d2:5d:5b:5d:b1:9b:d4:
                    e6:46:a8:c0:10:78:5e:e7:4c:d6:f8:5f:c6:7f:ee:
                    c4:e1:b1:b8:d3:b1:c2:39:33:f3:3b:20:70:85:15:
                    3c:07:a7:f5:43:78:ad:82:ec:da:4a:15:0f:e3:fd:
                    76:22:1b:6c:2b:91:b2:55:07:e4:a2:c2:d0:d6:e6:
                    9d:3a:9a:7e:1e:3e:80:36:e6:0f:18:05:1c:24:98:
                    0d:54:ff:90:42:cd:f6:f3:06:3a:aa:df:7c:19:74:
                    e7:7c:9e:da:4e:2b:4e:dd:58:72:30:a7:f8:02:ee:
                    aa:ab:e0:6d:dd:bd:68:c4:73:8c:2d:cd:4b:df:73:
                    2e:47:70:20:e0:a0:65:3d:10:5c:96:73:d7:5c:2d:
                    67:cc:74:59:08:e7:72:1f:17:65:2f:3d:df:2e:0d:
                    f6:f7:81:1f:ec:1a:9f:ab:8d:fc:4f:84:f8:5d:4c:
                    f2:e0:f6:91:b0:34:e3:9b:4a:7b:28:3b:b5:5f:26:
                    b3:8f:43:e2:18:66:e2:8e:5a:28:b0:0f:6c:a2:c6:
                    82:ae:4c:84:ae:d2:e5:a9:bd:b2:1e:56:8b:c0:72:
                    b5:ad:fd:e4:ca:64:0e:76:b5:43:ab:cd:78:57:ea:
                    3c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:04:1C:37:77:C8:C5:34:D9:8C:F8:FE:E3:89:58:1B:6D:53:DF:7B
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3138372e31362e3139322e302f31392d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.16.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         49:8f:44:6f:a4:ec:92:1f:0b:66:31:90:48:45:2f:8f:45:25:
         7c:74:4b:3e:7e:db:c3:a8:85:f9:82:89:52:7f:87:53:8b:37:
         b6:01:2d:91:b6:45:5f:4a:d9:66:36:f3:43:0d:ea:b6:f0:51:
         8f:2e:d9:58:e1:d6:6d:ad:2e:9f:56:63:49:33:1e:8f:23:22:
         5e:89:af:3e:6d:6f:61:47:d8:01:28:b3:88:4b:57:5f:77:03:
         bb:9c:4c:19:9f:7c:7b:7c:45:0a:96:23:38:68:54:53:18:01:
         b9:8c:c3:73:2f:52:c2:ae:05:e0:20:19:cd:12:23:63:cf:90:
         89:96:c4:19:8f:23:56:84:ff:b4:d9:ad:9a:cf:38:c1:de:73:
         ff:03:e8:06:d3:3f:1a:2e:95:8e:33:0f:7a:0b:e6:ce:ee:55:
         7a:10:3b:63:d6:48:c0:c2:df:27:d9:0f:bd:a3:33:8a:cb:08:
         dd:5e:0b:df:ed:62:96:16:fb:ec:7f:99:d5:ca:c4:aa:20:01:
         ed:e5:af:1c:67:2f:1a:db:bd:0e:8f:8e:88:06:0c:36:86:c8:
         20:ab:29:aa:7a:9f:fc:77:2e:74:fc:17:45:dd:46:f8:62:36:
         c1:75:9f:e1:6b:9a:1f:01:93:1a:53:53:47:23:83:a4:68:76:
         13:dc:1a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:26:10 2025 by rpki-client