Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a323a3a2f34372d3438203d3e203238333435.roa
File:                     323030313a313266383a323a3a2f34372d3438203d3e203238333435.roa (raw, json)
Hash identifier:          1adMyT8AD91QRG2YSHXJhTtd//JZlLWNDq631Ca7exA=
Subject key identifier:   18:5F:34:CB:45:60:FE:FF:AF:8C:BB:9B:0E:10:C4:C1:C5:4A:47:21
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       649EAFDA482373B0A17B23062FD644AA19748D17
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a323a3a2f34372d3438203d3e203238333435.roa
Signing time:             Wed 03 Apr 2024 14:42:01 +0000
ROA not before:           Wed 03 Apr 2024 14:37:01 +0000
ROA not after:            Wed 02 Apr 2025 14:42:01 +0000
asID:                     28345
IP address blocks:        2001:12f8:2::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:9e:af:da:48:23:73:b0:a1:7b:23:06:2f:d6:44:aa:19:74:8d:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Apr  3 14:37:01 2024 GMT
            Not After : Apr  2 14:42:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:36:69:e3:b4:9e:1c:77:50:05:1f:c6:96:e9:
                    b0:b9:37:8c:d4:12:d4:02:b4:68:28:7b:24:9f:a7:
                    9a:4a:a0:d7:db:df:30:07:b7:8c:f1:d9:91:62:7a:
                    5a:f6:ca:b9:f1:61:1d:c7:84:6a:2b:65:14:a5:82:
                    dd:f5:e4:4e:f9:f1:c0:a2:4e:32:e5:20:0d:e3:8e:
                    62:7a:21:84:fc:65:98:9c:49:6f:22:a8:04:43:4d:
                    81:76:bd:67:d6:fe:d7:e5:e9:62:ae:f9:22:01:af:
                    b0:76:d7:de:55:97:40:1e:9f:8d:fb:b8:26:ad:a8:
                    8b:50:b1:19:af:3c:91:e7:68:a8:ca:03:eb:75:f8:
                    be:d0:13:b4:90:82:4b:cb:99:f7:4d:6a:dd:df:e8:
                    ae:e6:ab:f5:9b:78:d2:a1:ec:ee:b7:20:21:2e:8b:
                    1a:43:7a:33:b7:6d:60:8f:a6:17:08:9e:c6:d4:0d:
                    04:80:14:4a:6e:7f:56:bf:e5:17:27:53:b4:b6:18:
                    4a:45:b0:f0:ee:03:bc:e7:4b:0c:34:64:2e:87:a6:
                    c4:5c:ef:b2:d9:4e:21:b5:73:8e:4c:2e:f1:04:f4:
                    2f:23:c1:4a:cd:0b:bc:35:58:c4:1e:e0:f6:be:47:
                    a1:32:89:82:e3:05:5b:13:20:ce:9d:bf:1e:50:c1:
                    b6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:5F:34:CB:45:60:FE:FF:AF:8C:BB:9B:0E:10:C4:C1:C5:4A:47:21
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a323a3a2f34372d3438203d3e203238333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         3b:31:48:8c:49:e1:36:98:d6:3e:a2:80:6a:7b:af:04:9b:3f:
         01:77:00:22:dd:ff:7c:3d:44:aa:72:09:5d:ee:0f:9d:b4:5d:
         5d:4b:6c:1d:0b:f1:12:1a:e1:81:5b:ab:33:6e:35:3b:ef:f1:
         a2:1c:4e:6d:c9:c6:7a:ba:4b:ab:0e:79:28:61:32:ce:e8:1f:
         21:a1:71:23:3f:47:6f:6b:f8:d2:81:50:95:56:87:20:39:b2:
         bc:22:0b:5a:8d:16:98:a4:b0:3f:b7:49:08:e5:8b:5d:fe:79:
         52:b1:c7:4a:80:88:d8:87:7a:92:a9:59:f0:68:22:0a:36:92:
         26:94:6b:d5:a9:cb:03:be:3d:61:8b:5a:7e:1f:08:79:23:30:
         e1:d9:e9:05:89:30:3f:6b:18:07:1b:78:91:ff:35:0f:0e:bf:
         73:b2:e2:59:d9:36:96:16:d9:31:57:81:44:8e:8f:21:89:95:
         2f:2b:ea:38:e5:9c:66:3b:06:87:12:38:12:3a:69:84:48:9e:
         0d:6c:ee:00:12:ff:ef:06:f4:57:c8:6f:c2:21:ce:a4:12:fa:
         aa:7a:d8:c9:35:8b:e9:72:ab:9d:11:2b:45:f9:47:57:5d:da:
         1d:63:4e:2a:92:2d:7a:60:22:7a:5e:19:f2:c9:54:89:bb:00:
         73:8b:a4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----