Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a323a3a2f34372d3438203d3e203238333435.roa
File:                     323030313a313266383a323a3a2f34372d3438203d3e203238333435.roa (raw, json)
Hash identifier:          d9TtDekD0bWg5UkcRIcTVhfk6qZ1QPh0th10xfSwb8o=
Subject key identifier:   0D:51:C3:3A:F5:8E:54:B6:2C:52:E8:31:24:A3:79:02:B0:B6:84:F3
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       4FD3652772A304411171315318A6AF961E4B79D3
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a323a3a2f34372d3438203d3e203238333435.roa
Signing time:             Mon 17 Mar 2025 17:44:00 +0000
ROA not before:           Mon 17 Mar 2025 17:39:00 +0000
ROA not after:            Mon 16 Mar 2026 17:44:00 +0000
asID:                     28345
IP address blocks:        2001:12f8:2::/47 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:d3:65:27:72:a3:04:41:11:71:31:53:18:a6:af:96:1e:4b:79:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Mar 17 17:39:00 2025 GMT
            Not After : Mar 16 17:44:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b2:e5:93:2b:ac:ba:18:79:33:26:4f:9c:81:
                    6c:04:3c:45:f0:07:8d:6f:ab:9e:82:94:5d:bb:2b:
                    44:72:51:33:45:5f:fe:06:df:c5:34:8a:72:05:c2:
                    e4:0c:c8:6f:39:50:c8:69:ee:63:28:44:10:0e:5a:
                    c8:0c:fc:d7:b9:c1:35:f3:c0:46:c2:4b:a3:f1:22:
                    7f:6a:52:47:26:61:64:43:64:6b:41:30:66:dc:1e:
                    ea:86:83:71:85:54:36:08:9b:c5:5e:8b:2e:b2:76:
                    07:c5:02:a1:1a:4c:36:18:3d:9b:6c:3d:a1:15:e5:
                    8d:74:6f:81:a7:7f:2e:65:52:04:24:ae:00:0a:ac:
                    5d:47:1b:4f:2a:6b:45:d0:b9:1b:59:a0:c3:be:cd:
                    bf:6c:1d:17:b6:6e:0c:30:ea:f6:27:e9:3a:bb:6a:
                    8a:03:e2:61:c5:df:88:6d:06:ae:8c:ee:d9:b8:75:
                    79:27:ca:c7:62:27:3f:7e:a5:1c:21:7d:b2:36:13:
                    13:d8:44:b4:bb:45:61:44:7c:ca:f9:eb:8a:59:9d:
                    59:a8:c1:b5:45:82:cc:37:9d:54:19:ff:94:d9:ed:
                    f8:d3:a6:ea:30:16:4b:cf:24:9b:80:2c:58:ff:0d:
                    aa:77:e0:a2:ba:da:69:59:3c:e6:4c:a7:b5:b2:dd:
                    bc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:51:C3:3A:F5:8E:54:B6:2C:52:E8:31:24:A3:79:02:B0:B6:84:F3
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a323a3a2f34372d3438203d3e203238333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         31:03:f3:a0:0d:f4:cd:82:fe:a2:3d:dc:10:39:84:4a:66:63:
         ce:41:52:15:7b:d6:81:c3:0c:39:ee:e1:ef:b8:0a:f7:95:7c:
         0a:1b:f9:aa:54:77:e4:bc:52:92:e3:b7:26:55:65:a8:da:93:
         a9:97:d4:30:0a:a6:c8:26:f9:35:15:f7:14:d5:34:46:b8:09:
         9a:b4:b1:5f:28:73:dc:54:30:6d:5b:8d:ca:c8:b1:e4:0f:f9:
         93:2d:a6:cc:46:6f:d0:1b:f2:22:9f:39:49:27:c5:9f:60:79:
         20:4c:17:7f:1e:4a:ef:88:a2:27:03:1e:fe:3c:9a:d6:63:a4:
         1a:52:75:82:7a:43:6b:8b:51:83:0f:fd:c2:97:72:a7:5f:85:
         6c:a4:09:e3:41:e3:8a:30:8b:6c:87:e9:81:0e:3e:5d:38:8c:
         d3:2a:a8:6b:9c:28:64:f6:9e:1b:bd:64:37:e5:ef:bb:17:85:
         95:c6:4c:d7:89:54:75:05:61:13:a2:08:e5:a5:46:92:a5:79:
         78:f3:f6:5a:e7:b7:ae:4f:8e:ef:35:fd:c6:28:0e:3c:19:6b:
         6c:2b:2e:06:e7:b9:be:4c:4f:27:21:26:0f:6f:97:00:9a:b6:
         98:58:00:d4:9b:3d:8b:f7:1c:44:25:55:80:77:30:c9:1b:ba:
         01:d4:b6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----