Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a323a3a2f34372d3438203d3e203131343331.roa
File:                     323030313a313266383a323a3a2f34372d3438203d3e203131343331.roa (raw, json)
Hash identifier:          AHyYTMjSYwKldSLNToCGIHE2P9TtIewVWo1vcmrbee8=
Subject key identifier:   75:54:74:1D:0B:5F:CB:C9:46:DD:39:EA:E7:14:46:9B:88:96:E0:EF
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       75AB64299CC1F4C0E5A47C33DFC7D61A1192A824
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a323a3a2f34372d3438203d3e203131343331.roa
Signing time:             Sun 10 Sep 2023 12:04:00 +0000
ROA not before:           Sun 10 Sep 2023 11:59:00 +0000
ROA not after:            Sun 08 Sep 2024 12:04:00 +0000
asID:                     11431
IP address blocks:        2001:12f8:2::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ab:64:29:9c:c1:f4:c0:e5:a4:7c:33:df:c7:d6:1a:11:92:a8:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Sep 10 11:59:00 2023 GMT
            Not After : Sep  8 12:04:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:56:c7:37:6e:db:91:f9:bd:c1:07:2d:b0:c6:
                    41:df:f7:ff:c4:12:22:3b:36:43:b6:d5:2d:69:bd:
                    6d:0f:54:0b:c1:3c:a3:f9:35:c0:8d:1f:f3:87:b7:
                    5f:b9:34:94:f4:b2:ff:aa:c9:0d:1e:e4:f9:1f:a4:
                    81:d6:35:9b:b1:ab:1c:f4:e4:0f:4c:50:e5:62:80:
                    ad:d1:18:8f:c5:d8:e5:72:1a:7d:30:92:0e:22:66:
                    3a:99:d8:45:eb:dc:64:09:ad:81:a5:20:49:6d:42:
                    32:cc:71:39:02:9e:8f:9d:6e:ab:e7:7f:de:a0:2e:
                    e4:df:c4:0a:78:2c:af:a9:b4:bf:3c:22:0c:75:72:
                    ac:47:f2:29:1a:2e:72:ed:5e:bd:ab:4a:d5:77:c1:
                    56:2b:14:30:a1:1f:02:ed:13:22:5d:84:dc:77:d5:
                    e5:2b:cb:a2:65:96:1c:fe:fc:4a:1d:f1:61:0d:88:
                    4d:21:54:88:c0:ab:d9:96:5b:f6:e7:06:9d:59:42:
                    54:de:88:6b:e3:89:6a:19:3d:43:33:43:5d:a6:7c:
                    9b:b2:a8:8b:2b:ba:89:45:c1:06:38:7d:38:62:c3:
                    d4:cb:ff:e3:9c:ad:97:1b:55:79:86:bc:1f:1e:f8:
                    93:57:2d:0c:82:69:ac:e5:08:f1:36:3e:f0:19:85:
                    e5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:54:74:1D:0B:5F:CB:C9:46:DD:39:EA:E7:14:46:9B:88:96:E0:EF
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a323a3a2f34372d3438203d3e203131343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         40:1e:5e:0b:e5:10:43:30:df:d3:d5:38:c8:1f:1d:02:49:aa:
         6d:98:55:cb:07:59:ca:3d:79:71:65:2c:d9:cd:13:10:ea:f8:
         49:87:62:64:3a:71:07:d6:4a:e1:8d:07:12:53:7e:48:0d:2a:
         63:54:e9:8a:5e:4c:5b:55:26:f0:25:dc:1e:5b:a1:6b:01:2c:
         8f:c9:59:bd:a6:70:bb:f8:3f:7e:5f:84:fc:ff:c8:67:57:85:
         1d:66:de:3c:56:44:aa:25:c1:ea:e8:2e:ff:7c:11:32:12:8e:
         97:72:e6:b4:cb:21:5e:a7:8c:2b:2e:ea:4d:f1:68:1f:79:df:
         24:09:03:e6:66:34:e7:80:c0:8c:d5:4f:e7:99:2c:e9:81:5e:
         4e:cf:e2:7f:e3:da:ac:fd:11:de:16:08:fe:73:7f:0a:20:6b:
         ae:41:ad:df:ca:5b:4c:f8:72:58:94:72:57:66:fa:4d:50:2d:
         b5:54:16:3d:d8:a3:37:25:fe:06:2d:ee:c4:da:6f:33:1e:42:
         36:79:18:00:df:46:94:82:b5:11:36:a5:17:c5:88:5b:45:b3:
         5e:15:fe:24:a0:39:19:17:08:79:7d:7d:c7:71:57:36:42:64:
         90:c6:3c:85:0a:d5:9d:17:0e:ad:1b:2f:83:d6:a7:18:f2:0d:
         3a:58:b9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----