Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3232392e3234382e302f32332d3234203d3e203131343331.roa
File:                     3230302e3232392e3234382e302f32332d3234203d3e203131343331.roa (raw, json)
Hash identifier:          T6PrtCq0bHqHYIhhWdcOPoadePBym+hvX6vZzxfWeVc=
Subject key identifier:   93:82:76:4C:1A:00:D0:C9:E2:2D:F6:53:13:3E:7E:3C:BE:F8:B6:CB
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       08433D4E8CE50F007BE42C6A807C91CC7A69E4ED
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3232392e3234382e302f32332d3234203d3e203131343331.roa
Signing time:             Mon 17 Mar 2025 17:44:01 +0000
ROA not before:           Mon 17 Mar 2025 17:39:01 +0000
ROA not after:            Mon 16 Mar 2026 17:44:01 +0000
asID:                     11431
IP address blocks:        200.229.248.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:43:3d:4e:8c:e5:0f:00:7b:e4:2c:6a:80:7c:91:cc:7a:69:e4:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Mar 17 17:39:01 2025 GMT
            Not After : Mar 16 17:44:01 2026 GMT
        Subject: CN=3082010A0282010100EDBD713251AD7F66DABE8F1DBA0C45672363539015CBAAAE941BC5A0EC354AFF458C0D19E60A3F9DDDA6190F37E0A58A7D147E66D225FB25A09C84DF68FBD87C2D7FB0E9AF8FFAD790F3F7ABA69AE0627122572A0554BF5104EEE7EF8019EE2726E860C94C68020B8BBD0A5689311B50065D2D7A6B017E9E9299107CD074E6C4E7ADA9625819DB891EA5CE2BB58905E3C048F3E818064CF954B184B2D2D94157922D54F0B2089027378B3E91B00700F09AE2A0DF41021396AAE3914363BEE39C8106306F05E81925E2621060D3DE24E3550F01C19AB82C27D358D9D330F6FC2D4C499B15572BB65A5DE20D47BBD290969ADF6FC4C02C0F8DCB554BD4BB322C8D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:bd:71:32:51:ad:7f:66:da:be:8f:1d:ba:0c:
                    45:67:23:63:53:90:15:cb:aa:ae:94:1b:c5:a0:ec:
                    35:4a:ff:45:8c:0d:19:e6:0a:3f:9d:dd:a6:19:0f:
                    37:e0:a5:8a:7d:14:7e:66:d2:25:fb:25:a0:9c:84:
                    df:68:fb:d8:7c:2d:7f:b0:e9:af:8f:fa:d7:90:f3:
                    f7:ab:a6:9a:e0:62:71:22:57:2a:05:54:bf:51:04:
                    ee:e7:ef:80:19:ee:27:26:e8:60:c9:4c:68:02:0b:
                    8b:bd:0a:56:89:31:1b:50:06:5d:2d:7a:6b:01:7e:
                    9e:92:99:10:7c:d0:74:e6:c4:e7:ad:a9:62:58:19:
                    db:89:1e:a5:ce:2b:b5:89:05:e3:c0:48:f3:e8:18:
                    06:4c:f9:54:b1:84:b2:d2:d9:41:57:92:2d:54:f0:
                    b2:08:90:27:37:8b:3e:91:b0:07:00:f0:9a:e2:a0:
                    df:41:02:13:96:aa:e3:91:43:63:be:e3:9c:81:06:
                    30:6f:05:e8:19:25:e2:62:10:60:d3:de:24:e3:55:
                    0f:01:c1:9a:b8:2c:27:d3:58:d9:d3:30:f6:fc:2d:
                    4c:49:9b:15:57:2b:b6:5a:5d:e2:0d:47:bb:d2:90:
                    96:9a:df:6f:c4:c0:2c:0f:8d:cb:55:4b:d4:bb:32:
                    2c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:82:76:4C:1A:00:D0:C9:E2:2D:F6:53:13:3E:7E:3C:BE:F8:B6:CB
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3232392e3234382e302f32332d3234203d3e203131343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c8:f0:6f:28:41:18:ab:bb:41:94:d9:6a:b5:9d:da:5a:84:2a:
         91:33:db:0b:f0:56:55:67:c7:c4:5b:63:9f:04:b6:7c:d7:75:
         7a:1c:a8:eb:26:10:7d:92:5f:8d:12:6e:13:02:da:cb:50:4b:
         86:94:2b:59:f0:44:70:ea:01:a0:71:33:e1:bd:6e:d3:10:4f:
         8b:f5:78:b0:af:ca:73:64:54:61:19:61:9a:2d:36:c6:63:8d:
         57:4d:47:88:7a:6e:51:e8:96:31:78:9b:52:91:80:73:f8:dd:
         e7:b0:a9:7f:7c:db:ab:5c:7c:52:f0:85:ec:3a:5d:7f:f0:5e:
         23:40:b2:0e:5c:da:e9:a6:17:14:06:fe:c7:d3:5f:f2:6e:22:
         b3:70:80:1d:d8:c5:3c:9c:5a:46:21:c7:2b:ad:5e:07:cf:33:
         bf:21:63:ee:73:bb:41:58:3c:44:8f:f3:d3:68:20:ef:2a:cf:
         c2:64:a5:25:e5:96:f2:21:9c:40:34:b1:16:bf:4b:b5:53:3d:
         8f:96:55:a6:86:2a:16:03:45:2c:ea:a0:99:88:a4:c6:4a:f3:
         f1:96:7f:d5:1d:be:42:f6:4e:8c:ae:61:4a:e1:c0:3c:82:ec:
         06:f4:e6:60:86:2d:89:33:28:ad:44:c5:56:3e:75:cd:f8:99:
         9b:f8:c1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:02:04 2025 by rpki-client