Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266663a3a2f33322d3438203d3e203232353438.roa
File:                     323030313a313266663a3a2f33322d3438203d3e203232353438.roa (raw, json)
Hash identifier:          8xwD6U/soHHANTb89/2+bXV/gsQnLT/OypIhegAj9GI=
Subject key identifier:   27:3D:CD:02:1C:25:7E:8F:E9:9F:1C:23:CE:E5:92:63:0F:19:D5:EC
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       380351AFD65FD0FA7EE88D1BE9B37B27679774DF
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266663a3a2f33322d3438203d3e203232353438.roa
Signing time:             Mon 17 Mar 2025 17:44:01 +0000
ROA not before:           Mon 17 Mar 2025 17:39:01 +0000
ROA not after:            Mon 16 Mar 2026 17:44:01 +0000
asID:                     22548
IP address blocks:        2001:12ff::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:03:51:af:d6:5f:d0:fa:7e:e8:8d:1b:e9:b3:7b:27:67:97:74:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Mar 17 17:39:01 2025 GMT
            Not After : Mar 16 17:44:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3c:60:f2:1b:73:35:3e:0c:ae:74:d3:a9:1a:
                    7b:3d:a7:3c:08:50:09:06:82:c3:15:f8:61:c6:64:
                    fd:a2:cf:44:a7:4e:cf:63:7e:77:f6:a0:a9:77:43:
                    1c:07:c4:fb:be:36:dc:16:19:bf:15:1e:cd:5c:1f:
                    be:0c:b0:c2:99:d7:42:c7:87:11:ab:d3:83:88:3b:
                    78:39:4c:4c:bf:28:d7:e2:1e:af:68:e4:37:f6:66:
                    c7:01:48:9e:16:3f:00:64:d5:e8:11:67:58:15:68:
                    69:c2:a7:9c:8a:01:85:f9:20:95:d5:49:21:29:07:
                    a3:41:0a:75:61:4f:18:a2:bc:19:2f:d5:68:4a:6a:
                    ac:2b:cf:a5:71:a0:48:48:04:17:94:a2:36:be:52:
                    b7:25:14:31:f7:75:eb:1e:37:1a:0d:42:f2:ed:50:
                    46:62:30:7c:89:89:ae:f3:4e:67:d1:1f:d8:f5:82:
                    08:aa:92:17:fb:62:22:e0:c1:5d:88:0a:66:17:10:
                    7d:52:5e:e2:14:e2:8e:7b:2b:9d:71:ce:21:c3:67:
                    c3:42:d7:b2:b7:71:66:71:1e:e5:b4:4e:ce:5e:6b:
                    e8:62:f4:0c:f7:98:80:bb:ed:61:39:04:29:65:0d:
                    3e:99:17:63:be:52:62:52:52:d9:6a:b4:4a:b2:47:
                    2f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:3D:CD:02:1C:25:7E:8F:E9:9F:1C:23:CE:E5:92:63:0F:19:D5:EC
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266663a3a2f33322d3438203d3e203232353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12ff::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:e6:64:a4:ee:e6:d5:6b:d3:a8:24:5a:88:e7:dd:81:33:b4:
         01:ab:5d:fd:17:f9:81:46:dc:af:15:eb:5f:1e:60:4a:7d:5d:
         a9:38:32:1b:ea:b4:a6:73:fd:c9:c4:08:14:d0:75:8c:f0:cc:
         43:59:e4:be:42:32:af:d3:5f:d9:ba:15:43:3f:c7:c0:d3:a3:
         31:aa:17:42:1e:eb:cc:09:25:96:68:51:03:90:94:08:b2:be:
         1d:b2:37:73:cc:1c:26:ba:05:32:1d:11:c8:e1:c5:ec:28:ad:
         7f:0c:e1:fd:e8:d4:38:e3:d8:56:bc:c4:37:29:63:43:0e:5f:
         34:8a:7e:8b:50:61:ca:94:4a:39:b6:29:b7:9e:ae:81:0a:86:
         88:57:7a:b9:4e:cd:a7:78:ce:21:e6:a2:07:eb:f4:7f:04:98:
         d6:ab:c6:99:97:3a:21:11:8b:b8:4f:aa:40:21:90:48:f4:93:
         10:cd:40:13:23:f1:99:fe:f7:91:a7:96:f4:92:75:0c:2b:07:
         b7:12:7b:24:81:6e:8e:b6:a5:a6:15:1d:30:7f:aa:d5:62:a6:
         6b:67:2e:36:d8:49:cf:d0:ba:06:cc:32:b9:ae:f1:b6:0b:a2:
         81:63:b4:84:7d:25:a2:42:6d:9f:bc:51:40:46:1e:6e:0e:26:
         72:06:eb:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----