Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3138392e34302e302f32332d3234203d3e203238333435.roa
File:                     3230302e3138392e34302e302f32332d3234203d3e203238333435.roa (raw, json)
Hash identifier:          DuJVTRMTlZMlaeBYTm8myB1HQQpm9jlLVhCKaSoeZHM=
Subject key identifier:   BD:5B:86:08:5F:E4:C2:86:90:A3:93:EB:DA:F0:59:F8:8A:74:B4:68
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       5CDF427F3AB9F5AA8B251EBD9CF3A3F14CD586A1
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3138392e34302e302f32332d3234203d3e203238333435.roa
Signing time:             Mon 17 Mar 2025 17:44:01 +0000
ROA not before:           Mon 17 Mar 2025 17:39:01 +0000
ROA not after:            Mon 16 Mar 2026 17:44:01 +0000
asID:                     28345
IP address blocks:        200.189.40.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:df:42:7f:3a:b9:f5:aa:8b:25:1e:bd:9c:f3:a3:f1:4c:d5:86:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Mar 17 17:39:01 2025 GMT
            Not After : Mar 16 17:44:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a9:26:c3:c9:3a:87:aa:5b:ca:3c:a3:48:78:
                    40:39:a5:fb:43:6d:ae:32:00:7a:7d:61:fc:b7:2e:
                    46:0a:6a:33:9e:00:16:14:72:73:c0:d0:82:6f:1b:
                    ff:6b:f0:ad:b2:65:99:b7:93:9e:08:73:87:d2:c6:
                    40:d2:49:9b:8d:8d:7c:77:7e:09:8d:ed:89:27:72:
                    93:01:33:a3:5e:40:62:a1:2d:2b:99:30:46:82:ca:
                    f8:02:cb:1a:11:a6:fc:55:61:0c:ae:bd:96:6e:41:
                    59:91:a1:d2:74:15:c1:4e:7f:b9:fc:a0:63:94:c6:
                    33:6b:d5:76:7b:96:57:90:60:eb:dc:f9:bf:de:db:
                    4c:72:80:ae:11:d6:64:b7:0c:13:ca:82:e9:80:30:
                    c2:1e:b7:f0:0e:fe:2e:f8:44:b8:a4:de:b7:23:8a:
                    63:32:0f:f1:08:fb:71:50:ac:7c:75:1e:1b:16:37:
                    b4:98:05:a5:ea:7a:a4:58:5b:fc:7f:6e:4d:d6:d8:
                    67:9b:c4:86:00:9c:fb:00:f0:36:67:7f:a5:4c:e5:
                    23:f4:43:a4:c2:12:b3:b7:ce:70:71:92:d2:cf:cb:
                    06:98:48:d1:a2:ad:44:d1:b4:5a:ec:91:40:68:ba:
                    9a:e8:9b:0e:49:8c:75:fa:02:1d:06:b5:6a:56:ca:
                    9d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:5B:86:08:5F:E4:C2:86:90:A3:93:EB:DA:F0:59:F8:8A:74:B4:68
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3138392e34302e302f32332d3234203d3e203238333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.189.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c6:fe:b0:91:3d:d5:87:17:1b:05:96:82:c8:a8:60:0b:4d:32:
         08:87:e6:af:be:6a:68:fc:84:85:01:81:b9:bc:88:4a:23:8a:
         53:a2:58:9f:09:16:04:df:64:0a:bc:94:03:9c:50:17:f1:45:
         04:94:b1:b2:ca:bd:c8:f1:33:11:87:03:71:58:6b:dd:0a:e5:
         75:4c:f5:6f:c1:37:05:1f:7d:c4:40:67:78:3b:3f:3d:3b:0e:
         64:da:4d:71:b7:e7:aa:1f:55:59:66:f9:12:89:b2:a0:20:ed:
         b5:4d:2e:c7:fe:8d:6c:14:f9:ce:f8:b5:d0:c4:63:bb:99:21:
         c0:04:80:01:e7:17:7f:78:be:81:5a:15:6f:7a:8b:b8:63:7f:
         f0:44:99:27:98:85:c7:7a:4a:73:8e:c5:82:14:af:bf:b2:ba:
         33:48:b9:41:48:1f:f1:6f:44:b4:b6:9f:27:4a:9f:f2:05:33:
         15:04:93:42:f1:54:1c:53:3e:f3:78:d6:7e:45:42:44:86:20:
         e7:fc:05:1c:2c:93:dc:6d:c5:8e:7c:07:21:d1:06:b0:16:b8:
         4f:01:37:69:64:36:97:ef:a3:5c:07:74:cd:ca:2d:73:36:f6:
         82:05:52:cf:6e:67:35:97:28:5c:f7:c1:cb:a1:ed:73:43:83:
         9c:41:9a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----