Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a343a3a2f34372d3438203d3e203131343331.roa
File:                     323030313a313266383a343a3a2f34372d3438203d3e203131343331.roa (raw, json)
Hash identifier:          UpH40AXWfU8HQCqoyYGCqkM9YNnGN7jw1fkIXk3n3uk=
Subject key identifier:   D9:D9:4F:9F:87:A6:83:BD:E0:92:B6:01:36:DA:F8:67:29:D1:2F:53
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       795B4E6388363636C5B5458FB6D27D1D01867900
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a343a3a2f34372d3438203d3e203131343331.roa
Signing time:             Mon 04 Sep 2023 11:04:00 +0000
ROA not before:           Mon 04 Sep 2023 10:59:00 +0000
ROA not after:            Mon 02 Sep 2024 11:04:00 +0000
asID:                     11431
IP address blocks:        2001:12f8:4::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:5b:4e:63:88:36:36:36:c5:b5:45:8f:b6:d2:7d:1d:01:86:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Sep  4 10:59:00 2023 GMT
            Not After : Sep  2 11:04:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:78:63:55:a1:ed:ae:26:eb:51:17:a8:bb:a6:
                    bf:4c:b4:a7:88:0a:1a:4b:22:4a:de:19:66:de:66:
                    37:0b:18:59:9e:e8:4a:5c:1f:09:e4:56:b8:21:ae:
                    8d:96:2b:a4:62:8a:ec:c8:2d:19:78:40:8d:d8:3e:
                    12:86:17:a4:9e:3b:75:70:e3:cc:07:19:dc:7e:3a:
                    7d:84:9b:32:2d:10:e3:a5:91:51:af:46:81:be:a5:
                    bf:51:74:00:6d:57:3e:9c:77:ae:bc:2a:c8:57:12:
                    03:12:c3:b1:14:54:32:45:e0:20:09:b3:ce:72:8b:
                    68:3f:59:f8:58:0f:78:7b:c0:44:b2:e8:88:d5:44:
                    4e:dc:bd:b9:92:16:d8:d6:b9:0e:4d:a9:bd:21:fd:
                    20:19:6c:a3:0f:63:77:91:4f:12:30:39:a5:34:77:
                    6a:43:a0:e7:0e:39:3d:b1:1a:e4:02:70:6a:9e:d7:
                    02:6d:ce:6e:a2:70:95:12:bc:74:a5:d8:0a:d7:0f:
                    91:22:e6:e4:65:63:e3:7c:7d:00:b2:19:29:16:68:
                    3f:84:ea:3a:5a:f0:76:a7:e0:a4:fe:87:a4:90:d1:
                    e5:28:fe:e5:e2:e5:b3:e4:88:a5:aa:5f:30:df:46:
                    f9:91:0c:af:c2:e3:85:91:66:e7:9b:00:72:17:78:
                    8c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D9:4F:9F:87:A6:83:BD:E0:92:B6:01:36:DA:F8:67:29:D1:2F:53
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a343a3a2f34372d3438203d3e203131343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:4::/47

    Signature Algorithm: sha256WithRSAEncryption
         85:01:78:4f:a8:90:f9:2c:30:9a:52:99:79:be:1a:14:68:d4:
         31:80:cf:3e:95:9f:f4:1f:2d:61:10:51:18:53:15:cd:23:91:
         ab:fb:20:fc:cf:07:c7:c6:d5:8e:c7:cb:f1:e7:5a:b1:70:86:
         91:d7:7c:bf:a0:f5:80:21:96:8b:a8:87:4e:4d:69:1d:a8:fd:
         98:8f:6f:de:a9:65:d5:d4:b9:18:cc:36:c1:42:f6:b8:2e:c1:
         ee:0f:70:ab:4c:98:a8:de:04:a5:40:81:0a:9b:e5:78:b2:a0:
         d9:c0:2e:61:85:96:13:c5:87:59:24:e7:95:70:82:62:53:62:
         87:0f:2e:76:d0:15:a5:ca:b6:74:f2:2a:f0:cc:8c:ff:6b:3e:
         e8:16:87:a4:ee:66:91:a5:a2:82:cd:1c:c0:f6:21:0d:fc:b3:
         93:4c:b5:df:3c:00:c4:4f:bd:d2:dc:19:ed:e3:88:de:cd:be:
         61:a6:dc:aa:42:bc:88:da:7c:80:0e:16:81:ac:3e:9e:6c:2e:
         27:f1:e8:14:27:0c:93:f1:86:ba:f9:67:df:e3:d0:5b:c2:1b:
         d6:fc:5a:a3:e1:20:05:ea:d5:e3:bf:a1:e1:23:09:78:b7:46:
         a5:91:03:81:45:3f:54:8a:a5:4b:96:99:d8:63:00:1e:8d:a5:
         a3:3e:65:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----