Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3135382e302f32332d3234203d3e203238333435.roa
File:                     3230302e3231392e3135382e302f32332d3234203d3e203238333435.roa (raw, json)
Hash identifier:          HsisPFLFDrdRbNaeTEm342nshHmaCuRYmXPuoq40WEc=
Subject key identifier:   A1:8D:4C:5B:3E:96:71:38:72:CF:2F:1E:43:C4:88:AC:5F:50:86:0B
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       1EE33AB7ED3D9EF3727006CAEC603E5CDC2E2ADA
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3135382e302f32332d3234203d3e203238333435.roa
Signing time:             Mon 17 Mar 2025 17:44:00 +0000
ROA not before:           Mon 17 Mar 2025 17:39:00 +0000
ROA not after:            Mon 16 Mar 2026 17:44:00 +0000
asID:                     28345
IP address blocks:        200.219.158.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:e3:3a:b7:ed:3d:9e:f3:72:70:06:ca:ec:60:3e:5c:dc:2e:2a:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Mar 17 17:39:00 2025 GMT
            Not After : Mar 16 17:44:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cd:b2:9c:e2:21:d2:3d:a2:35:27:33:39:05:
                    3d:c8:17:21:cd:f5:8e:b4:b4:81:36:17:0f:53:5e:
                    88:6a:67:b0:64:d4:73:c2:59:de:73:61:a7:4b:92:
                    52:36:58:60:cd:80:41:e0:2c:d9:00:4d:83:f2:86:
                    11:1a:88:96:7f:db:81:99:02:d6:60:aa:66:46:56:
                    bd:ac:5f:29:fa:1e:e5:6e:3a:62:0a:da:a1:4a:ef:
                    71:22:b2:ea:7b:2a:09:db:8d:9d:17:c8:cb:2f:76:
                    c0:d9:06:e0:af:9c:7c:7f:3c:56:0a:40:80:40:71:
                    0d:77:67:a0:98:66:48:17:3c:45:dc:39:e9:4c:bb:
                    da:0e:d8:3c:c9:72:7d:fb:dd:26:da:61:58:c7:ab:
                    2d:33:9e:ca:c3:1b:5e:6e:c7:64:76:c6:70:4d:36:
                    0d:68:61:43:22:de:60:bb:13:06:d1:cd:db:db:92:
                    04:74:be:84:2e:25:a0:35:66:f6:5f:65:1c:33:54:
                    41:8b:31:c6:f6:14:2c:62:30:56:95:91:ae:a4:f3:
                    2a:61:0b:95:d2:73:85:ed:e7:34:59:d0:49:67:8e:
                    cf:22:99:e4:2d:f0:23:0c:85:bd:ee:bd:18:03:29:
                    c9:8e:75:c2:71:02:57:13:cf:a5:b3:01:bc:2e:bf:
                    7f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8D:4C:5B:3E:96:71:38:72:CF:2F:1E:43:C4:88:AC:5F:50:86:0B
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3135382e302f32332d3234203d3e203238333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:13:b4:82:d4:79:8f:7b:4e:9e:76:7b:0b:7f:9e:a7:b9:3f:
         10:fd:53:11:0c:36:cb:9a:34:bf:89:78:c0:11:4d:37:9b:6f:
         ae:d3:41:ac:30:3c:03:10:7c:f2:62:11:ba:af:26:43:18:67:
         1b:9a:07:cf:1c:47:86:74:58:ae:3f:00:5c:21:99:49:c4:df:
         93:c1:4c:83:74:63:7f:76:18:84:22:76:49:98:db:a8:c4:64:
         a0:94:01:bf:9a:58:23:0e:97:c0:d2:58:85:e5:1f:79:a5:f5:
         b0:7d:7c:be:6d:2d:c4:06:32:30:72:5f:3d:e9:54:82:ac:88:
         6f:3b:e2:2e:32:1d:e8:cf:8a:f3:0e:37:99:3b:44:13:20:0e:
         0f:47:a0:cf:a3:7f:fe:e7:df:18:00:11:26:9c:a7:99:cd:a0:
         e5:80:a9:07:76:4d:f3:5c:ad:89:b8:47:5e:8e:ef:94:ee:49:
         49:6e:60:3e:3c:f0:73:ec:cf:fc:a4:17:29:3f:a9:15:91:f7:
         7b:2a:2c:a5:93:76:3e:aa:3d:d8:eb:05:09:63:0f:3a:42:3b:
         8a:7b:a6:bc:7e:fd:23:50:0f:3e:66:39:e6:fe:ab:3d:bb:69:
         b8:1e:b1:7b:56:29:ea:0a:ec:0b:1c:9f:f0:c7:20:a2:a7:fe:
         71:e9:f3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:23:30 2025 by rpki-client