Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a3a2f34382d313238203d3e2030.roa
File:                     323030313a313266383a3a2f34382d313238203d3e2030.roa (raw, json)
Hash identifier:          ozquyVBmx9YOi3JcVsskzO6UGD0tD6xj0uhNbx0kHzE=
Subject key identifier:   02:BE:49:C9:10:9B:CB:B2:B0:56:87:4E:E2:C1:14:EB:4E:FE:B9:34
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       3A7C8FEEA1A3FFE5FE5B4FF8B729CCA5A6F1E1C9
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a3a2f34382d313238203d3e2030.roa
Signing time:             Mon 17 Mar 2025 17:44:03 +0000
ROA not before:           Mon 17 Mar 2025 17:39:03 +0000
ROA not after:            Mon 16 Mar 2026 17:44:03 +0000
asID:                     0
IP address blocks:        2001:12f8::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:7c:8f:ee:a1:a3:ff:e5:fe:5b:4f:f8:b7:29:cc:a5:a6:f1:e1:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Mar 17 17:39:03 2025 GMT
            Not After : Mar 16 17:44:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f6:ba:e8:fe:c0:75:7a:a6:b2:bd:39:4f:74:
                    94:1a:60:c1:6a:2b:2e:32:ae:56:f2:66:e4:42:ff:
                    63:a4:24:03:4c:12:05:01:60:4c:f7:0d:fd:aa:ca:
                    a7:44:e2:4c:3a:67:99:5b:ff:93:0e:3f:e6:48:cd:
                    fb:f9:79:22:9d:dc:92:52:01:ce:e3:7c:89:ff:a9:
                    bd:7e:a7:8d:38:9b:90:31:c8:b1:d9:14:09:51:5a:
                    e1:47:0d:10:f0:d1:ea:cf:e9:3b:63:6a:fc:ff:00:
                    de:39:20:ac:fc:c0:98:88:5c:fc:43:57:b5:81:f1:
                    e3:f3:d5:85:41:61:72:60:d5:e0:b7:6f:37:be:40:
                    44:33:c8:da:9d:52:ee:7e:8a:8a:ac:d8:80:c1:3f:
                    8e:bf:fb:ef:84:2d:83:a2:38:0c:92:0d:24:f8:ea:
                    17:11:7f:59:0c:93:24:c6:93:e2:86:eb:cb:d0:90:
                    68:d0:cb:1a:77:d7:31:f6:9c:b9:6c:82:57:66:da:
                    07:99:80:a8:de:31:32:36:93:5d:80:6b:fd:76:4c:
                    e4:7d:a5:08:05:30:20:ba:1f:f8:05:4d:34:e9:25:
                    80:41:b2:d3:6f:31:74:b1:5e:c6:fd:c9:dd:c3:80:
                    c3:59:d7:06:65:3d:97:ff:1f:00:8b:dc:df:c9:e1:
                    54:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:BE:49:C9:10:9B:CB:B2:B0:56:87:4E:E2:C1:14:EB:4E:FE:B9:34
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a3a2f34382d313238203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:71:7a:eb:63:e2:24:33:f4:5e:b9:8e:39:94:0c:d2:d6:c9:
         af:e2:8b:ff:57:58:69:24:c4:7a:93:74:77:9f:0d:d4:ac:1d:
         b8:68:b9:e2:df:2a:9d:7b:41:90:10:43:cf:c0:ca:95:9e:bd:
         30:9d:6a:f3:5e:ce:09:3d:cf:56:9d:0a:a0:af:a3:a6:d6:ea:
         aa:b5:ce:4d:36:db:36:5b:0d:06:bc:57:93:87:1b:0b:cc:45:
         25:95:0c:3d:d3:7e:32:ef:61:53:6e:e9:24:5b:b9:d0:d0:51:
         e6:5a:28:8c:9e:23:a5:b3:43:00:46:29:4a:ac:c9:ed:34:55:
         70:f4:e3:89:93:65:45:f3:59:ff:c3:84:7b:64:88:e0:1b:6d:
         6f:e1:0a:a6:f6:82:eb:4a:a4:e5:c8:4f:1f:c7:f8:6c:8c:0c:
         27:1b:bd:98:bb:c6:b1:0f:c6:c8:42:21:bb:a5:4c:0e:ab:43:
         f0:e5:00:f3:2a:ec:04:82:1f:aa:25:a1:b1:f8:24:c6:03:8b:
         be:4f:cb:3e:bf:8e:2b:02:ea:46:ec:0c:03:7b:23:76:8b:07:
         b1:7c:72:19:a8:df:72:a0:19:02:7a:8a:dd:e8:06:3b:3d:14:
         d5:87:3f:e8:d3:d1:96:fa:9c:b8:1d:31:02:26:c6:6e:0f:c1:
         69:6b:78:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:38:49 2025 by rpki-client