Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3139322e3233322e302f32332d3234203d3e203131343331.roa
File:                     3230302e3139322e3233322e302f32332d3234203d3e203131343331.roa (raw, json)
Hash identifier:          THbEG5k9l9IjnwE5UwWU6JBmKeUqXq0cKF6/XFSiSzk=
Subject key identifier:   B4:9D:F4:D8:D0:65:C6:52:B2:E5:C3:90:B3:D3:7E:D9:75:11:41:D4
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       1767AE09E7F886FA5BD6D3A450E06F3B838E4FA2
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3139322e3233322e302f32332d3234203d3e203131343331.roa
Signing time:             Mon 17 Mar 2025 17:44:04 +0000
ROA not before:           Mon 17 Mar 2025 17:39:04 +0000
ROA not after:            Mon 16 Mar 2026 17:44:04 +0000
asID:                     11431
IP address blocks:        200.192.232.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:67:ae:09:e7:f8:86:fa:5b:d6:d3:a4:50:e0:6f:3b:83:8e:4f:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Mar 17 17:39:04 2025 GMT
            Not After : Mar 16 17:44:04 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ed:56:a7:04:0e:e6:a8:93:c1:56:1d:bb:0d:
                    96:17:d0:c2:bd:27:cf:9b:e7:2f:03:ff:49:df:02:
                    23:ac:9d:42:cb:de:85:11:fa:64:ba:98:f8:60:a8:
                    c5:9b:06:8e:59:19:c9:6b:39:65:f7:dd:3c:d3:9c:
                    fc:b8:bd:13:90:e7:6b:cb:c6:69:8a:a6:11:cb:29:
                    b4:18:42:ac:d5:13:ec:1a:03:4b:74:dc:0a:58:3e:
                    29:ab:aa:89:ba:82:dd:4f:69:66:f3:61:78:88:51:
                    5d:b0:2c:8b:fb:23:0d:7f:34:3a:fa:de:79:54:b1:
                    8a:7f:6a:90:90:9e:a3:df:b4:98:41:82:00:24:c1:
                    72:e9:93:c7:c7:7c:ed:08:b1:56:69:d6:79:00:d3:
                    ce:59:bb:75:73:4a:ac:93:fe:60:62:f7:e2:54:ec:
                    91:cb:89:f5:68:2d:bd:6f:b9:89:7e:49:fc:5f:60:
                    a0:13:5b:79:39:e6:60:e4:8c:2a:f2:43:17:16:a8:
                    bd:f4:95:54:a1:5f:26:1f:7d:75:27:10:66:51:2f:
                    fc:60:05:99:6f:48:2c:4e:58:13:8b:fd:e7:33:44:
                    15:e5:bf:b8:17:58:cc:cb:9a:36:76:4b:5d:4f:46:
                    07:0b:4b:02:6b:96:53:73:a7:4f:d4:df:4f:98:83:
                    51:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:9D:F4:D8:D0:65:C6:52:B2:E5:C3:90:B3:D3:7E:D9:75:11:41:D4
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3139322e3233322e302f32332d3234203d3e203131343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:58:f9:f5:3d:d7:1f:07:ca:55:7d:29:14:e5:d2:81:86:4a:
         0e:ab:02:07:3c:42:35:75:e5:12:f7:d1:30:77:86:21:fb:bf:
         67:72:0f:26:76:73:56:44:6b:a1:a4:57:05:a4:70:26:93:08:
         1c:17:96:2c:33:99:e3:9e:29:17:d4:6e:a6:2a:7a:af:c7:5a:
         82:f4:81:be:4d:53:9b:8e:ed:62:70:3f:da:e8:3e:3a:9e:48:
         e1:86:d0:13:af:63:9d:c0:5b:ba:cc:65:fc:53:70:5f:15:e3:
         23:87:94:6e:1f:52:6a:39:a0:9b:6b:53:74:16:4c:e3:c8:a2:
         72:7c:62:76:21:08:6d:19:07:9b:8f:2f:95:4d:c1:9c:66:a7:
         1f:22:5f:92:65:51:d3:bf:fc:c3:a7:4a:94:a6:39:69:06:78:
         ee:ba:28:90:45:5d:c5:09:06:b6:49:3c:c2:3a:b0:00:f3:e8:
         1d:95:93:1a:b7:29:bd:c2:fc:fb:e6:42:a0:39:0a:d9:37:4a:
         b0:81:d0:8b:ac:ba:86:d1:78:c8:ed:0f:e5:7e:b4:37:ad:a5:
         0b:0c:56:2b:6b:c8:b4:a7:f4:e3:c8:67:8f:21:28:f5:99:24:
         2b:a9:2b:ea:af:ba:71:f6:bd:56:b7:eb:a8:a1:e5:24:6e:71:
         fa:33:b7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----