Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a633a3a2f34372d3438203d3e203131343331.roa
File:                     323030313a313266383a633a3a2f34372d3438203d3e203131343331.roa (raw, json)
Hash identifier:          lZGyyxphEEZv/l7tOUoEIjIv0Wl5/j5YmLEFLdYqpHk=
Subject key identifier:   33:FD:FD:C1:A7:FD:F4:03:03:E8:BE:FB:25:0B:26:C2:44:49:1B:E1
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       7D329B6717ADE49A444F3DCC4092C2A478932A08
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a633a3a2f34372d3438203d3e203131343331.roa
Signing time:             Mon 17 Mar 2025 17:44:04 +0000
ROA not before:           Mon 17 Mar 2025 17:39:04 +0000
ROA not after:            Mon 16 Mar 2026 17:44:04 +0000
asID:                     11431
IP address blocks:        2001:12f8:c::/47 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:32:9b:67:17:ad:e4:9a:44:4f:3d:cc:40:92:c2:a4:78:93:2a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Mar 17 17:39:04 2025 GMT
            Not After : Mar 16 17:44:04 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:25:d7:73:eb:5a:93:93:a9:f9:53:69:ad:01:
                    a6:18:c5:83:78:ab:99:36:cd:db:6b:1d:ce:c8:42:
                    a5:52:ba:4e:8d:90:ac:4b:61:38:50:a8:7d:26:f9:
                    21:01:93:1c:93:14:dc:c1:52:fd:c8:ee:20:f3:ba:
                    07:da:fc:bf:2c:9e:ef:a3:cc:6a:f0:5f:c8:ca:52:
                    fe:6d:99:de:f2:97:24:3b:5c:3b:d9:b8:44:b4:ae:
                    16:81:58:a9:a8:fe:8b:d5:82:4c:46:e4:c7:38:20:
                    6c:1f:33:69:55:8f:a3:a6:da:44:6e:fb:1c:ec:51:
                    43:11:42:0f:d2:52:e1:8d:8b:90:4a:19:a3:41:af:
                    e1:9e:5a:1c:45:2f:d9:d2:a9:79:bf:4f:1e:49:78:
                    06:d1:8c:c8:0c:58:62:06:0f:bd:4f:f4:d3:81:9c:
                    ba:26:43:91:12:74:ff:94:8a:56:3f:5e:16:b3:d8:
                    85:48:f5:1e:bb:1c:39:5f:31:81:14:21:0e:f5:94:
                    1c:43:df:5a:b7:0c:66:5f:c3:59:ce:99:d4:b1:16:
                    48:07:ed:64:d7:55:3e:44:55:46:c5:be:22:03:e1:
                    14:92:dd:66:62:19:5f:36:ed:80:38:19:54:5e:c3:
                    8f:2d:09:6f:10:ed:9e:e6:7d:74:88:78:7f:71:68:
                    eb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:FD:FD:C1:A7:FD:F4:03:03:E8:BE:FB:25:0B:26:C2:44:49:1B:E1
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a633a3a2f34372d3438203d3e203131343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:c::/47

    Signature Algorithm: sha256WithRSAEncryption
         9d:7b:ef:cf:c4:cd:64:96:6e:f6:dc:c7:00:04:9e:40:c9:cc:
         93:53:2b:39:a7:d3:2f:cc:55:44:36:8e:83:10:59:11:50:fa:
         2a:07:5b:7e:bd:29:90:b6:8e:9f:c7:69:a2:ba:bd:b3:56:71:
         92:e2:a9:20:34:7c:6f:1f:e3:48:f6:de:04:6b:8f:eb:70:af:
         45:c1:14:74:f7:9c:67:bc:24:ba:c4:6e:28:0d:c2:93:4b:2b:
         01:36:ca:92:e6:0b:7b:f6:29:68:9a:23:37:43:f5:bb:ed:26:
         fe:03:7a:b2:e2:76:f7:67:ab:50:08:8f:1b:28:d9:9e:17:97:
         c5:d9:04:5c:b3:37:a3:ca:5b:78:7f:3f:fe:47:33:6a:da:2a:
         bd:43:14:db:97:00:86:d6:1c:01:66:c1:6f:e8:b8:3a:c7:0a:
         27:b7:49:c1:4e:6f:7c:b0:fd:b4:ee:26:d4:75:18:05:e5:b0:
         42:c0:0e:6c:74:3c:9c:eb:58:62:1d:43:af:9e:5c:01:c5:c0:
         45:cb:11:1b:4f:4d:28:26:79:f9:1c:b9:67:a4:44:7b:f6:65:
         75:8c:fc:30:28:0a:8e:53:03:da:24:a2:e6:94:bb:f9:fe:f9:
         19:e8:0c:d4:18:ba:97:ad:7a:36:42:9d:c1:c8:fb:28:72:d8:
         fe:68:cd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----