Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a633a3a2f34372d3438203d3e203134363530.roa
File:                     323030313a313266383a633a3a2f34372d3438203d3e203134363530.roa (raw, json)
Hash identifier:          Q+vcP2aAriq7zsKqs/wbpvSSd39Or5VBuVrrOUgGscE=
Subject key identifier:   A1:9C:67:67:DD:5A:B2:1E:40:EB:6C:63:AA:5C:0E:42:CA:0C:ED:9F
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       69641BA3BB03244D0E984A2DD2C8D7A9B18A9959
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a633a3a2f34372d3438203d3e203134363530.roa
Signing time:             Mon 15 Apr 2024 17:43:56 +0000
ROA not before:           Mon 15 Apr 2024 17:38:56 +0000
ROA not after:            Mon 14 Apr 2025 17:43:56 +0000
asID:                     14650
IP address blocks:        2001:12f8:c::/47 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:64:1b:a3:bb:03:24:4d:0e:98:4a:2d:d2:c8:d7:a9:b1:8a:99:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Apr 15 17:38:56 2024 GMT
            Not After : Apr 14 17:43:56 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d9:d1:08:60:80:9b:2c:26:de:08:a1:e8:14:
                    0f:f2:e6:d2:b0:f6:a6:a1:f0:71:80:1c:d0:3a:08:
                    ca:c5:3b:66:57:3c:ce:88:5a:d8:4f:92:79:a1:f3:
                    b4:7b:a5:2d:fc:b7:0c:c7:ae:bc:83:53:e6:09:b9:
                    67:75:82:48:6a:af:c8:0e:5a:a0:94:10:a8:b4:b7:
                    b2:b9:20:f5:0f:d5:72:a1:38:95:9a:33:1e:35:a2:
                    48:62:ad:3a:13:0f:19:62:c8:5a:56:8b:46:83:7f:
                    a0:90:68:72:94:0b:e2:8d:ab:e3:24:b3:c9:fe:55:
                    80:b4:ed:8b:87:08:10:51:87:02:a6:31:d9:61:c8:
                    b8:11:35:9e:b0:da:f8:69:75:7a:6a:26:39:5a:ef:
                    82:33:e5:56:ab:9d:e1:a4:1a:72:f1:af:73:9b:d7:
                    6f:39:9f:7f:0b:b6:3f:0c:0d:12:4f:b6:34:e8:2d:
                    7b:43:87:ac:f7:86:6d:3a:a4:9d:c7:6c:84:77:0c:
                    89:db:73:64:d0:cc:12:eb:fc:20:af:9d:8f:09:d5:
                    8f:d8:c8:24:cb:6b:b2:51:10:25:0f:23:1c:76:b2:
                    b5:d4:76:61:0f:e4:b9:18:17:ce:fc:75:a2:87:59:
                    d0:b0:3c:e1:8f:9a:f3:65:10:38:c7:97:fe:31:45:
                    ec:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:9C:67:67:DD:5A:B2:1E:40:EB:6C:63:AA:5C:0E:42:CA:0C:ED:9F
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a633a3a2f34372d3438203d3e203134363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:c::/47

    Signature Algorithm: sha256WithRSAEncryption
         7d:8e:85:db:6e:d5:a5:17:82:da:b4:5e:b3:08:5b:59:b7:b3:
         cf:a8:3f:35:bf:e8:cf:e9:a6:23:fa:a0:6f:82:ad:8f:4c:b1:
         18:67:12:fb:7f:4e:41:f8:b0:74:fe:f4:e8:c8:b9:69:1a:62:
         cc:c8:01:5f:f8:06:b8:b5:2c:7f:8b:48:1b:3a:51:e8:02:f5:
         11:72:f2:5d:d0:46:ce:15:81:a7:13:4f:38:e3:72:d5:13:48:
         a9:50:3d:a8:58:2c:56:ce:75:68:7c:4c:fb:69:d4:39:31:39:
         33:94:d2:06:3d:b3:63:40:1b:9e:00:92:12:1c:1c:5f:7e:b3:
         02:0b:d1:32:b6:bd:8a:07:72:1f:56:93:2b:df:a0:7c:b3:50:
         29:49:fc:8c:8c:4c:e8:da:ce:13:4c:5d:59:d7:13:d0:57:3f:
         41:e4:cd:17:ec:e6:0f:62:f4:91:d2:7a:b4:fb:4e:de:f7:47:
         fb:7d:1e:a3:c9:72:37:53:a5:c1:98:1b:a5:8b:87:71:01:02:
         b6:dc:3d:55:2f:7f:2c:66:14:b7:67:a2:d9:89:d5:d9:8e:2d:
         ce:3a:06:80:cd:4b:69:1a:28:1b:99:91:e6:db:bb:4a:44:45:
         3c:5c:86:62:a4:17:2c:19:43:60:b7:eb:b2:ac:5a:07:e4:5d:
         a7:5a:6d:69
-----BEGIN CERTIFICATE-----
MIIHRjCCBi6gAwIBAgIUaWQbo7sDJE0OmEot0sjXqbGKmVkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMyNTE5QTlDMjdCM0IyODY5QUMzMEVERjI5NkI0ODRF
NDRCRjFGMDAeFw0yNDA0MTUxNzM4NTZaFw0yNTA0MTQxNzQzNTZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzlEOUQxMDg2MDgwOUIyQzI2
REUwOEExRTgxNDBGRjJFNkQyQjBGNkE2QTFGMDcxODAxQ0QwM0EwOENBQzUzQjY2
NTczQ0NFODg1QUQ4NEY5Mjc5QTFGM0I0N0JBNTJERkNCNzBDQzdBRUJDODM1M0U2
MDlCOTY3NzU4MjQ4NkFBRkM4MEU1QUEwOTQxMEE4QjRCN0IyQjkyMEY1MEZENTcy
QTEzODk1OUEzMzFFMzVBMjQ4NjJBRDNBMTMwRjE5NjJDODVBNTY4QjQ2ODM3RkEw
OTA2ODcyOTQwQkUyOERBQkUzMjRCM0M5RkU1NTgwQjRFRDhCODcwODEwNTE4NzAy
QTYzMUQ5NjFDOEI4MTEzNTlFQjBEQUY4Njk3NTdBNkEyNjM5NUFFRjgyMzNFNTU2
QUI5REUxQTQxQTcyRjFBRjczOUJENzZGMzk5RjdGMEJCNjNGMEMwRDEyNEZCNjM0
RTgyRDdCNDM4N0FDRjc4NjZEM0FBNDlEQzc2Qzg0NzcwQzg5REI3MzY0RDBDQzEy
RUJGQzIwQUY5RDhGMDlENThGRDhDODI0Q0I2QkIyNTExMDI1MEYyMzFDNzZCMkI1
RDQ3NjYxMEZFNEI5MTgxN0NFRkM3NUEyODc1OUQwQjAzQ0UxOEY5QUYzNjUxMDM4
Qzc5N0ZFMzE0NUVDNzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAydnRCGCAmywm3gih6BQP8ubSsPamofBxgBzQOgjKxTtmVzzOiFrY
T5J5ofO0e6Ut/LcMx668g1PmCblndYJIaq/IDlqglBCotLeyuSD1D9VyoTiVmjMe
NaJIYq06Ew8ZYshaVotGg3+gkGhylAvijavjJLPJ/lWAtO2LhwgQUYcCpjHZYci4
ETWesNr4aXV6aiY5Wu+CM+VWq53hpBpy8a9zm9dvOZ9/C7Y/DA0ST7Y06C17Q4es
94ZtOqSdx2yEdwyJ23Nk0MwS6/wgr52PCdWP2Mgky2uyURAlDyMcdrK11HZhD+S5
GBfO/HWih1nQsDzhj5rzZRA4x5f+MUXseQIDAQABo4ICVDCCAlAwHQYDVR0OBBYE
FKGcZ2fdWrIeQOtsY6pcDkLKDO2fMB8GA1UdIwQYMBaAFGMlGanCezsoaaww7fKW
tITkS/HwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0EyeDZpY2FLcFZXUDV1
VUJ6SlF6UnZFcGp2UzdQVlc3WjJFcjRGMnF0MUN0LzIvNjMyNTE5QTlDMjdCM0Iy
ODY5QUMzMEVERjI5NkI0ODRFNDRCRjFGMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS82MzI1MTlBOUMyN0IzQjI4NjlBQzMwRURGMjk2QjQ4NEU0NEJG
MUYwLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BMng2aWNhS3BWV1A1dVVCekpR
elJ2RXBqdlM3UFZXN1oyRXI0RjJxdDFDdC8yLzMyMzAzMDMxM2EzMTMyNjYzODNh
NjMzYTNhMmYzNDM3MmQzNDM4MjAzZDNlMjAzMTM0MzYzNTMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcB
IAES+AAMMA0GCSqGSIb3DQEBCwUAA4IBAQB9joXbbtWlF4LatF6zCFtZt7PPqD81
v+jP6aYj+qBvgq2PTLEYZxL7f05B+LB0/vToyLlpGmLMyAFf+Aa4tSx/i0gbOlHo
AvURcvJd0EbOFYGnE08443LVE0ipUD2oWCxWznVofEz7adQ5MTkzlNIGPbNjQBue
AJISHBxffrMCC9Eytr2KB3IfVpMr36B8s1ApSfyMjEzo2s4TTF1Z1xPQVz9B5M0X
7OYPYvSR0nq0+07e90f7fR6jyXI3U6XBmBuli4dxAQK23D1VL38sZhS3Z6LZidXZ
ji3OOgaAzUtpGigbmZHm27tKREU8XIZipBcsGUNgt+uyrFoH5F2nWm1p
-----END CERTIFICATE-----