Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a323a3a2f34372d3438203d3e203132313336.roa
File:                     323030313a313266383a323a3a2f34372d3438203d3e203132313336.roa (raw, json)
Hash identifier:          LUzknbhxvIEuMOLbN6UE1qB5kcE2GDsbH0Wc+YdmXjk=
Subject key identifier:   0A:66:27:ED:1B:B1:2B:C9:2E:79:0B:38:C3:8A:33:A5:CA:38:C5:50
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       52DCE60D5731A3FB84842F4463DFF81810D02C5A
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a323a3a2f34372d3438203d3e203132313336.roa
Signing time:             Sun 10 Sep 2023 12:04:00 +0000
ROA not before:           Sun 10 Sep 2023 11:59:00 +0000
ROA not after:            Sun 08 Sep 2024 12:04:00 +0000
asID:                     12136
IP address blocks:        2001:12f8:2::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:dc:e6:0d:57:31:a3:fb:84:84:2f:44:63:df:f8:18:10:d0:2c:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Sep 10 11:59:00 2023 GMT
            Not After : Sep  8 12:04:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:4f:24:7e:e2:92:44:fa:50:20:ca:c4:e5:6d:
                    ab:0c:8a:46:a8:66:c3:7c:31:04:ba:88:07:67:f8:
                    ca:02:43:7e:35:f7:f7:fd:ee:1a:40:f1:db:ae:9b:
                    8b:b0:df:a9:df:dd:ab:cd:1b:c9:45:18:82:b5:3f:
                    07:08:e3:44:fe:82:2d:6b:85:07:fc:d8:45:f5:eb:
                    fb:16:8c:87:32:e1:e8:26:ab:2e:b6:8e:5c:14:1d:
                    0e:50:08:b8:cf:e7:7f:ce:04:76:93:aa:53:57:28:
                    54:8b:bc:df:9d:e3:db:99:cf:75:f6:9f:91:18:48:
                    36:73:c1:3c:56:1b:1c:58:51:aa:cb:1e:c7:12:13:
                    79:39:e3:12:b1:d1:26:c0:a9:a9:5d:dd:df:b5:92:
                    51:26:ee:71:fa:7b:28:62:a2:5f:fa:53:1d:d3:58:
                    a6:15:55:a7:ad:e0:b4:eb:ae:38:5a:13:f4:44:49:
                    a1:e2:f3:90:70:c6:26:eb:b2:91:93:80:49:0e:6a:
                    b7:44:a2:29:af:cd:c9:2d:42:c6:1a:ad:d1:13:05:
                    a3:8c:98:8e:22:bb:7a:14:ae:bd:23:c7:b1:72:6d:
                    18:92:5f:27:b3:9c:50:71:c6:d9:7b:cd:e8:b9:d7:
                    7c:68:6e:0f:d1:5c:a7:6d:26:31:17:a6:41:c0:9e:
                    a3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:66:27:ED:1B:B1:2B:C9:2E:79:0B:38:C3:8A:33:A5:CA:38:C5:50
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a323a3a2f34372d3438203d3e203132313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         35:75:c9:f1:ff:ec:38:b9:a2:d3:bf:e6:e2:12:ff:73:75:97:
         bf:41:66:8f:7c:f5:41:7a:fe:3d:12:d4:3c:c5:f0:f8:50:0e:
         c1:09:7f:1f:42:2b:8e:43:bb:9b:c1:da:55:f3:f2:45:af:38:
         e9:57:67:bf:1b:95:94:57:de:71:25:b2:83:da:04:23:96:38:
         00:e5:f2:6b:c6:5b:2d:dd:c0:04:ad:de:6c:1e:f9:d9:3c:40:
         6b:33:60:30:3f:a3:55:dd:d2:47:39:c5:7a:bb:3e:9b:0a:c3:
         6d:11:de:11:c4:27:98:9b:b2:6c:ff:a3:20:b5:46:8f:9b:28:
         1a:29:3d:db:9d:98:ef:c6:da:21:da:70:2d:09:f1:9e:05:f0:
         d0:10:9a:57:1d:fc:02:de:4f:52:83:9a:dc:07:a1:51:37:13:
         a5:3a:84:5c:e0:3b:58:35:0e:c1:a0:3f:eb:aa:5b:1f:48:c7:
         fe:ea:7e:0d:23:36:a0:dd:14:8b:7f:e4:bc:78:19:e0:15:2a:
         12:1d:fc:d2:63:55:40:44:15:f3:6b:9d:63:4c:8c:5a:88:29:
         fa:c7:ee:68:ac:03:10:29:7c:e3:8a:57:33:d0:b4:a6:18:d1:
         29:85:4e:a6:1f:70:77:1c:94:4a:14:a8:ee:cf:c0:e5:e6:2c:
         ab:55:4e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----