Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a613a3a2f34372d3438203d3e203238333435.roa
File:                     323030313a313266383a613a3a2f34372d3438203d3e203238333435.roa (raw, json)
Hash identifier:          iwhfmmy/w2TZAoeqBn+kDHlczZRBTmMDn9bXY0z31fI=
Subject key identifier:   1D:C2:35:21:0F:81:43:65:44:97:F7:73:75:E3:19:6D:71:C7:C3:B3
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       35563D8F06D9AF97917CF9BF447D69BA21FB4489
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a613a3a2f34372d3438203d3e203238333435.roa
Signing time:             Mon 15 Apr 2024 17:43:59 +0000
ROA not before:           Mon 15 Apr 2024 17:38:59 +0000
ROA not after:            Mon 14 Apr 2025 17:43:59 +0000
asID:                     28345
IP address blocks:        2001:12f8:a::/47 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:56:3d:8f:06:d9:af:97:91:7c:f9:bf:44:7d:69:ba:21:fb:44:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Apr 15 17:38:59 2024 GMT
            Not After : Apr 14 17:43:59 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6f:e1:16:42:68:44:34:dd:72:ce:4f:7e:08:
                    4e:35:c8:d5:d5:28:89:49:82:13:2c:59:f5:48:c1:
                    60:3c:d4:40:10:25:26:c6:e7:4c:00:e8:1e:63:ef:
                    41:b2:84:9a:01:fe:ee:7b:81:37:05:0b:d6:8b:f1:
                    f0:87:44:d9:74:47:1a:e3:01:90:b0:18:25:fa:c2:
                    f7:10:cb:7d:f1:ed:51:a5:27:c1:ad:60:23:78:df:
                    a6:a8:39:30:f1:af:e1:a4:57:06:8a:df:4d:be:a4:
                    1f:d4:2a:3e:d6:9e:de:c3:8f:39:03:b4:c0:8f:f6:
                    f9:43:2b:8f:b5:17:17:bb:22:30:9e:27:41:a6:ae:
                    ac:77:01:2a:e8:c5:37:53:f2:e6:16:e9:52:a1:0f:
                    d1:66:2d:c2:6b:29:7e:bf:87:f8:47:14:ad:cc:91:
                    0d:ae:4a:8d:8b:a7:8a:df:69:8a:1f:1e:e9:8f:91:
                    2f:44:d4:b6:ca:fc:93:8c:f8:da:ee:56:8e:91:c7:
                    fa:67:0a:e9:81:a1:19:bb:e5:f6:36:01:b7:de:13:
                    d2:f1:eb:51:29:b3:e5:cd:68:39:54:5e:d1:da:77:
                    a8:7a:99:10:cb:0f:8a:1d:a0:a9:e5:aa:1d:80:bf:
                    8f:0f:37:9a:48:f0:89:89:e3:3b:bb:26:5d:5b:bb:
                    80:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C2:35:21:0F:81:43:65:44:97:F7:73:75:E3:19:6D:71:C7:C3:B3
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a613a3a2f34372d3438203d3e203238333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:a::/47

    Signature Algorithm: sha256WithRSAEncryption
         48:2d:21:26:ca:82:52:ef:1b:74:f6:62:72:8d:25:2d:09:e2:
         79:fb:64:30:ef:48:d9:11:f2:04:b1:39:09:07:33:7a:1e:b8:
         03:d9:44:c9:c2:4a:6c:05:81:90:f6:6d:2f:43:ad:44:ce:f9:
         21:0e:dc:d5:17:f2:3d:38:9b:a5:3c:a0:44:82:28:9e:79:b7:
         49:fe:f0:50:22:f0:c9:d4:0f:ed:34:3e:a0:94:48:c2:4b:de:
         e1:19:5d:e8:e0:1a:e7:ad:26:66:b2:19:bc:a3:21:db:06:91:
         7d:c5:b6:d0:21:51:0e:17:47:4d:35:72:42:21:f6:67:c3:d8:
         26:57:63:bc:e4:83:a3:e2:a3:32:42:c9:a8:18:33:23:50:04:
         85:79:1c:a3:26:3f:6d:2d:15:16:54:a1:ee:be:13:5a:43:c3:
         5c:22:7c:e6:06:b2:a2:42:23:0f:8e:36:72:a3:0e:02:87:b2:
         c5:c4:a8:3f:a4:02:14:2a:0d:da:f9:17:33:ad:4b:6f:0d:21:
         15:0e:05:2d:c7:4b:4e:6a:bb:99:79:9f:7b:65:f2:83:41:bd:
         24:27:74:75:db:6c:c5:f6:0f:a9:4d:cf:85:af:87:88:b3:b2:
         6a:48:e6:07:7b:3c:73:48:f5:0b:ff:4d:8c:f7:3f:03:f7:cc:
         90:99:9d:f5
-----BEGIN CERTIFICATE-----
MIIHRjCCBi6gAwIBAgIUNVY9jwbZr5eRfPm/RH1puiH7RIkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMyNTE5QTlDMjdCM0IyODY5QUMzMEVERjI5NkI0ODRF
NDRCRjFGMDAeFw0yNDA0MTUxNzM4NTlaFw0yNTA0MTQxNzQzNTlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUU2RkUxMTY0MjY4NDQzNERE
NzJDRTRGN0UwODRFMzVDOEQ1RDUyODg5NDk4MjEzMkM1OUY1NDhDMTYwM0NENDQw
MTAyNTI2QzZFNzRDMDBFODFFNjNFRjQxQjI4NDlBMDFGRUVFN0I4MTM3MDUwQkQ2
OEJGMUYwODc0NEQ5NzQ0NzFBRTMwMTkwQjAxODI1RkFDMkY3MTBDQjdERjFFRDUx
QTUyN0MxQUQ2MDIzNzhERkE2QTgzOTMwRjFBRkUxQTQ1NzA2OEFERjREQkVBNDFG
RDQyQTNFRDY5RURFQzM4RjM5MDNCNEMwOEZGNkY5NDMyQjhGQjUxNzE3QkIyMjMw
OUUyNzQxQTZBRUFDNzcwMTJBRThDNTM3NTNGMkU2MTZFOTUyQTEwRkQxNjYyREMy
NkIyOTdFQkY4N0Y4NDcxNEFEQ0M5MTBEQUU0QThEOEJBNzhBREY2OThBMUYxRUU5
OEY5MTJGNDRENEI2Q0FGQzkzOENGOERBRUU1NjhFOTFDN0ZBNjcwQUU5ODFBMTE5
QkJFNUY2MzYwMUI3REUxM0QyRjFFQjUxMjlCM0U1Q0Q2ODM5NTQ1RUQxREE3N0E4
N0E5OTEwQ0IwRjhBMURBMEE5RTVBQTFEODBCRjhGMEYzNzlBNDhGMDg5ODlFMzNC
QkIyNjVENUJCQjgwOUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArm/hFkJoRDTdcs5PfghONcjV1SiJSYITLFn1SMFgPNRAECUmxudM
AOgeY+9BsoSaAf7ue4E3BQvWi/Hwh0TZdEca4wGQsBgl+sL3EMt98e1RpSfBrWAj
eN+mqDkw8a/hpFcGit9NvqQf1Co+1p7ew485A7TAj/b5QyuPtRcXuyIwnidBpq6s
dwEq6MU3U/LmFulSoQ/RZi3Cayl+v4f4RxStzJENrkqNi6eK32mKHx7pj5EvRNS2
yvyTjPja7laOkcf6ZwrpgaEZu+X2NgG33hPS8etRKbPlzWg5VF7R2neoepkQyw+K
HaCp5aodgL+PDzeaSPCJieM7uyZdW7uAmwIDAQABo4ICVDCCAlAwHQYDVR0OBBYE
FB3CNSEPgUNlRJf3c3XjGW1xx8OzMB8GA1UdIwQYMBaAFGMlGanCezsoaaww7fKW
tITkS/HwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0EyeDZpY2FLcFZXUDV1
VUJ6SlF6UnZFcGp2UzdQVlc3WjJFcjRGMnF0MUN0LzIvNjMyNTE5QTlDMjdCM0Iy
ODY5QUMzMEVERjI5NkI0ODRFNDRCRjFGMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS82MzI1MTlBOUMyN0IzQjI4NjlBQzMwRURGMjk2QjQ4NEU0NEJG
MUYwLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BMng2aWNhS3BWV1A1dVVCekpR
elJ2RXBqdlM3UFZXN1oyRXI0RjJxdDFDdC8yLzMyMzAzMDMxM2EzMTMyNjYzODNh
NjEzYTNhMmYzNDM3MmQzNDM4MjAzZDNlMjAzMjM4MzMzNDM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcB
IAES+AAKMA0GCSqGSIb3DQEBCwUAA4IBAQBILSEmyoJS7xt09mJyjSUtCeJ5+2Qw
70jZEfIEsTkJBzN6HrgD2UTJwkpsBYGQ9m0vQ61EzvkhDtzVF/I9OJulPKBEgiie
ebdJ/vBQIvDJ1A/tND6glEjCS97hGV3o4BrnrSZmshm8oyHbBpF9xbbQIVEOF0dN
NXJCIfZnw9gmV2O85IOj4qMyQsmoGDMjUASFeRyjJj9tLRUWVKHuvhNaQ8NcInzm
BrKiQiMPjjZyow4Ch7LFxKg/pAIUKg3a+RczrUtvDSEVDgUtx0tOaruZeZ97ZfKD
Qb0kJ3R122zF9g+pTc+Fr4eIs7JqSOYHezxzSPUL/02M9z8D98yQmZ31
-----END CERTIFICATE-----