Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a633a3a2f34372d3438203d3e203134363530.roa
File:                     323030313a313266383a633a3a2f34372d3438203d3e203134363530.roa (raw, json)
Hash identifier:          TcVfYAMbdxdfCqC0vInXIhlU0s095+42nJ377f9Phvg=
Subject key identifier:   50:31:60:6A:06:2F:65:49:14:56:AF:4E:39:CB:14:45:88:A9:41:FE
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       26D9D9162339E87EFA03F0DAFD2E70D609AA7A96
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a633a3a2f34372d3438203d3e203134363530.roa
Signing time:             Mon 17 Mar 2025 17:44:03 +0000
ROA not before:           Mon 17 Mar 2025 17:39:03 +0000
ROA not after:            Mon 16 Mar 2026 17:44:03 +0000
asID:                     14650
IP address blocks:        2001:12f8:c::/47 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d9:d9:16:23:39:e8:7e:fa:03:f0:da:fd:2e:70:d6:09:aa:7a:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Mar 17 17:39:03 2025 GMT
            Not After : Mar 16 17:44:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b8:9d:b1:5c:5e:d3:b7:6f:76:ef:51:64:d5:
                    6a:0a:39:6e:bf:d1:d3:35:58:43:06:23:a0:26:70:
                    f0:5e:99:24:27:ac:52:28:bf:2e:3f:8d:59:81:f4:
                    56:c9:61:52:44:80:cd:55:b3:8b:aa:7b:3b:60:ba:
                    63:6f:30:1f:16:e4:54:6f:20:fd:ed:56:8e:f4:51:
                    36:db:f6:ae:1c:db:01:9d:bc:87:b5:63:de:d9:72:
                    da:ab:16:55:cb:5e:44:6d:e7:01:4d:e9:93:7e:b5:
                    9b:b8:7b:48:6a:7b:f1:fa:c1:22:a9:8a:f0:d5:b5:
                    ba:fa:72:40:06:2d:b9:0c:1e:84:89:85:86:96:8b:
                    8a:6c:2f:70:a4:c4:82:6b:a5:57:2b:31:2d:5f:30:
                    48:d6:5b:88:74:fd:fe:94:af:9a:30:e2:3c:e1:6d:
                    3c:0a:f3:a4:13:6a:bf:6b:4d:95:4e:1d:d1:79:0c:
                    5e:7a:58:19:71:90:c6:39:13:ca:e9:85:ee:e0:87:
                    e2:9d:10:71:be:93:46:a5:d6:3b:15:81:42:d0:91:
                    61:93:0e:30:d7:ab:ce:f9:8e:77:5a:7f:66:c3:5e:
                    d2:b9:26:0b:5c:c0:ab:35:14:37:ac:73:8c:05:71:
                    eb:9d:fe:df:dc:11:05:6e:3f:68:1b:39:8c:73:bb:
                    d8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:31:60:6A:06:2F:65:49:14:56:AF:4E:39:CB:14:45:88:A9:41:FE
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a633a3a2f34372d3438203d3e203134363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:c::/47

    Signature Algorithm: sha256WithRSAEncryption
         7a:3f:36:36:a4:d4:ec:d2:8d:2e:12:f7:d6:51:50:f0:7b:bf:
         8e:7a:43:7a:b1:cf:a1:bd:66:42:d1:50:15:5a:57:a1:1c:a8:
         81:0b:db:62:7a:fb:32:9a:db:14:c8:87:22:65:66:fd:1e:90:
         12:30:91:c4:c9:2b:d5:29:59:8f:5b:c2:64:13:5a:f9:95:64:
         86:de:f4:d1:3d:36:d3:44:5f:d3:76:0f:2a:2b:42:cd:d3:df:
         f9:63:60:35:cb:28:8a:5f:b5:df:be:99:53:9f:b0:f7:0d:bb:
         94:1a:f2:87:d8:e5:39:21:bb:9b:36:a0:a0:13:37:11:42:2b:
         63:58:95:87:59:63:67:6e:f2:03:c7:90:9c:96:2b:e9:fc:84:
         0d:7a:44:21:56:42:fd:e0:a6:7c:2d:5a:da:b8:05:87:8d:28:
         58:1b:b1:d3:07:6e:33:da:7a:fc:98:0e:a5:c3:89:f4:66:34:
         9b:ba:18:7b:8f:e0:69:46:22:b5:7d:9c:16:be:da:89:d7:7e:
         97:f9:54:79:3b:dc:ff:1b:36:e0:c2:83:14:d2:56:a0:48:0d:
         80:9c:70:b3:ed:1c:6e:04:c1:16:94:60:0c:05:ca:27:30:93:
         fd:ce:04:81:1d:2e:b2:28:81:5d:a0:9e:c3:21:10:83:6a:92:
         17:47:4b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:37:10 2025 by rpki-client