Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a343a3a2f34372d3438203d3e203131363434.roa
File:                     323030313a313266383a343a3a2f34372d3438203d3e203131363434.roa (raw, json)
Hash identifier:          4kgGGOZ35VsIlQ0xlJyEWIwU2KC5S5J+s0KpjCtWXVs=
Subject key identifier:   A6:64:BB:8A:47:DC:7A:40:5C:66:99:DF:E9:C4:5F:A8:72:3D:CA:90
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       315048A0FBD9601D9834AE99C2E1508E100C1013
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a343a3a2f34372d3438203d3e203131363434.roa
Signing time:             Mon 04 Sep 2023 11:04:00 +0000
ROA not before:           Mon 04 Sep 2023 10:59:00 +0000
ROA not after:            Mon 02 Sep 2024 11:04:00 +0000
asID:                     11644
IP address blocks:        2001:12f8:4::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:50:48:a0:fb:d9:60:1d:98:34:ae:99:c2:e1:50:8e:10:0c:10:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Sep  4 10:59:00 2023 GMT
            Not After : Sep  2 11:04:00 2024 GMT
        Subject: CN=3082010A0282010100CB147EAFA88B44633371D15CDC3C225DB52C5CE0B85735F00E1E7B0563F02D40117190357E6EC4BD44B84D4BAFDD7023845DB5D4E5AF4FE028A5AB45592CF996B42002AB4E11C63B5F02FB04A9EB6CCC35D9A79868BCE0572619817FE625A724A9E6F5448FFCE2C3F2A8F3AE5DA8CE36664E2E59CCB1441B77E901E0C82F11F5C937903E78841B255115FB949BA2F26A27EF8EBEE1B88C73A290ED3C0D1B7EC397E12B877FDB2C1A96030CA55A8B1BC58B69E5514B3511E34132C65AE8BEB7F7C7386D57241733C87BE9B54BCFC675F4B276E0EC78AC74C8CD5957B826B2B897D0643B433D6277756D0DA3467D46A1BF1F28018C6FAF07149AD6A1B2FADF39EB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:14:7e:af:a8:8b:44:63:33:71:d1:5c:dc:3c:
                    22:5d:b5:2c:5c:e0:b8:57:35:f0:0e:1e:7b:05:63:
                    f0:2d:40:11:71:90:35:7e:6e:c4:bd:44:b8:4d:4b:
                    af:dd:70:23:84:5d:b5:d4:e5:af:4f:e0:28:a5:ab:
                    45:59:2c:f9:96:b4:20:02:ab:4e:11:c6:3b:5f:02:
                    fb:04:a9:eb:6c:cc:35:d9:a7:98:68:bc:e0:57:26:
                    19:81:7f:e6:25:a7:24:a9:e6:f5:44:8f:fc:e2:c3:
                    f2:a8:f3:ae:5d:a8:ce:36:66:4e:2e:59:cc:b1:44:
                    1b:77:e9:01:e0:c8:2f:11:f5:c9:37:90:3e:78:84:
                    1b:25:51:15:fb:94:9b:a2:f2:6a:27:ef:8e:be:e1:
                    b8:8c:73:a2:90:ed:3c:0d:1b:7e:c3:97:e1:2b:87:
                    7f:db:2c:1a:96:03:0c:a5:5a:8b:1b:c5:8b:69:e5:
                    51:4b:35:11:e3:41:32:c6:5a:e8:be:b7:f7:c7:38:
                    6d:57:24:17:33:c8:7b:e9:b5:4b:cf:c6:75:f4:b2:
                    76:e0:ec:78:ac:74:c8:cd:59:57:b8:26:b2:b8:97:
                    d0:64:3b:43:3d:62:77:75:6d:0d:a3:46:7d:46:a1:
                    bf:1f:28:01:8c:6f:af:07:14:9a:d6:a1:b2:fa:df:
                    39:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:64:BB:8A:47:DC:7A:40:5C:66:99:DF:E9:C4:5F:A8:72:3D:CA:90
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a343a3a2f34372d3438203d3e203131363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:4::/47

    Signature Algorithm: sha256WithRSAEncryption
         73:ef:b6:cc:71:30:de:23:77:a3:bc:4b:2a:89:a2:80:de:74:
         4b:db:82:ca:76:74:b6:62:e7:d4:7d:6b:44:84:a5:79:a9:50:
         92:33:de:63:cc:7f:04:27:68:b1:f4:78:47:0f:23:02:24:1d:
         36:e0:ec:35:1b:66:6b:c1:ef:bd:a3:8e:37:af:35:32:eb:c2:
         08:fd:27:95:f9:78:ac:d6:87:a2:b8:db:4b:9a:89:ab:d4:db:
         e7:ac:5f:f5:d4:6a:ad:64:ad:c6:f9:12:a8:fb:64:97:59:6b:
         e4:62:e4:0e:f6:30:b0:9d:51:e8:91:1f:7f:2e:7a:05:5d:d7:
         57:10:e8:1e:03:3e:20:7c:ec:b5:15:00:8f:8d:14:35:9f:9d:
         85:22:0b:87:91:a0:c9:f6:84:93:c5:16:e4:14:c7:4a:32:3e:
         8b:7a:73:83:1d:19:d6:30:b1:a8:8a:e6:2a:7a:f8:93:bf:36:
         c9:2b:d5:4f:30:b1:93:c8:8c:45:95:3e:af:a0:a2:67:ed:1f:
         2c:81:54:2a:cb:11:bd:e8:72:29:2b:d4:63:e4:89:d5:55:12:
         bf:a6:ac:7a:36:a2:81:3b:56:e4:68:ad:b7:5c:c4:04:d0:48:
         a8:7a:d9:8c:2f:5e:7a:db:cf:c8:ed:3a:e3:0b:6f:45:38:64:
         5b:ef:4d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----