Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a383a3a2f34372d3438203d3e203131343331.roa
File:                     323030313a313266383a383a3a2f34372d3438203d3e203131343331.roa (raw, json)
Hash identifier:          7msizeM22gZXmfffkmKKxWe9aMCOuT+6Xos8B6PiKlM=
Subject key identifier:   BE:D6:3C:67:59:56:B4:28:DA:0B:E3:2C:84:D4:17:50:1D:88:92:25
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       47E7E0C656B6F00A0361E5C88BDC111F8616B46D
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a383a3a2f34372d3438203d3e203131343331.roa
Signing time:             Mon 17 Mar 2025 17:44:04 +0000
ROA not before:           Mon 17 Mar 2025 17:39:04 +0000
ROA not after:            Mon 16 Mar 2026 17:44:04 +0000
asID:                     11431
IP address blocks:        2001:12f8:8::/47 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:e7:e0:c6:56:b6:f0:0a:03:61:e5:c8:8b:dc:11:1f:86:16:b4:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Mar 17 17:39:04 2025 GMT
            Not After : Mar 16 17:44:04 2026 GMT
        Subject: CN=3082010A0282010100B25BDC114C2A856D8CC6B2443E1D8A19C4C3B3A8F2EA4A811F9CD1B61FE2FDB94F45374B786D61ABD8E23797762EC5802EBBAC5D13F4D2D99CC1ADE34B870B1DCE452BBDBF961EB60CE78DA32522FEE4D1DD9D39A7867D7E820D4DC28C4E4D918408296DC52999123857BBCAA79CDB4A42415198B0E8EF55FF5550E323314335294BE3BC8CCAB024F234F49066FE03F994A2D8973780DC8350C6AF4D02AAD8D395344C9995E6016A219DB92AE43E7601C31FDEF249218B9880807B2DFAF5E1279E3A30570EE4E0A92CC184C553FBBA60CB72AE2649BDAAB2F3521EE3B1DADD795C92784DEC07EDC2C4E984ED63B41425D5A4C964DEED9CFF763C84FF193539F70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5b:dc:11:4c:2a:85:6d:8c:c6:b2:44:3e:1d:
                    8a:19:c4:c3:b3:a8:f2:ea:4a:81:1f:9c:d1:b6:1f:
                    e2:fd:b9:4f:45:37:4b:78:6d:61:ab:d8:e2:37:97:
                    76:2e:c5:80:2e:bb:ac:5d:13:f4:d2:d9:9c:c1:ad:
                    e3:4b:87:0b:1d:ce:45:2b:bd:bf:96:1e:b6:0c:e7:
                    8d:a3:25:22:fe:e4:d1:dd:9d:39:a7:86:7d:7e:82:
                    0d:4d:c2:8c:4e:4d:91:84:08:29:6d:c5:29:99:12:
                    38:57:bb:ca:a7:9c:db:4a:42:41:51:98:b0:e8:ef:
                    55:ff:55:50:e3:23:31:43:35:29:4b:e3:bc:8c:ca:
                    b0:24:f2:34:f4:90:66:fe:03:f9:94:a2:d8:97:37:
                    80:dc:83:50:c6:af:4d:02:aa:d8:d3:95:34:4c:99:
                    95:e6:01:6a:21:9d:b9:2a:e4:3e:76:01:c3:1f:de:
                    f2:49:21:8b:98:80:80:7b:2d:fa:f5:e1:27:9e:3a:
                    30:57:0e:e4:e0:a9:2c:c1:84:c5:53:fb:ba:60:cb:
                    72:ae:26:49:bd:aa:b2:f3:52:1e:e3:b1:da:dd:79:
                    5c:92:78:4d:ec:07:ed:c2:c4:e9:84:ed:63:b4:14:
                    25:d5:a4:c9:64:de:ed:9c:ff:76:3c:84:ff:19:35:
                    39:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D6:3C:67:59:56:B4:28:DA:0B:E3:2C:84:D4:17:50:1D:88:92:25
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a383a3a2f34372d3438203d3e203131343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:8::/47

    Signature Algorithm: sha256WithRSAEncryption
         72:0f:aa:63:fb:66:ff:69:1b:bd:61:02:2e:b2:a6:4c:81:02:
         e5:47:aa:28:fd:9c:b8:7e:e6:03:bc:52:ef:10:c8:7a:db:9d:
         48:61:c0:d0:64:cc:20:b2:3f:cf:e2:41:e7:f2:c4:d5:40:f0:
         88:e9:78:af:ac:b6:01:48:94:e0:88:b4:8f:55:93:38:fd:6b:
         c5:f4:36:51:88:1c:4a:a2:cb:e9:e2:68:b7:b2:4e:65:d2:52:
         89:7f:cd:45:ce:25:f5:35:6e:3d:ab:66:f4:e8:f5:16:bc:c3:
         c4:f2:c6:12:22:47:a2:e3:1e:97:a9:5f:4f:9d:9a:b1:ff:e1:
         61:4b:28:33:fc:30:6a:94:b8:49:06:00:29:06:71:05:6f:95:
         c0:dd:f4:b6:ec:d5:e1:a4:f8:be:a1:40:00:da:83:fc:0f:b8:
         a7:bf:8a:a6:2d:63:53:17:1b:fc:27:92:e1:42:8b:2a:9a:90:
         c4:f1:a4:8f:c0:23:0d:fb:e2:3e:a1:80:65:d5:19:1c:36:81:
         de:18:d8:ab:9d:ab:dd:2d:bc:64:7d:1b:e2:5b:c8:ed:db:1f:
         cb:0b:a1:ad:3f:7a:a3:c7:12:f7:24:df:cf:9e:b5:56:4d:dc:
         c9:02:56:99:58:97:24:e8:9e:e2:41:5f:ff:e9:34:03:3a:bc:
         d9:55:83:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:49:49 2025 by rpki-client