Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a343a3a2f34372d3438203d3e203238333435.roa
File:                     323030313a313266383a343a3a2f34372d3438203d3e203238333435.roa (raw, json)
Hash identifier:          PXbUhGuHw55i3ag30Ong/z4ZQ48XO36Hu02fRpX/ohM=
Subject key identifier:   EE:EA:36:A4:2C:9D:F4:52:A0:BE:26:FD:8F:22:10:30:F9:DF:E5:5A
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       165732F669E225FF509CEC446DE18C8C8FB3664A
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a343a3a2f34372d3438203d3e203238333435.roa
Signing time:             Wed 03 Apr 2024 14:40:00 +0000
ROA not before:           Wed 03 Apr 2024 14:35:00 +0000
ROA not after:            Wed 02 Apr 2025 14:40:00 +0000
asID:                     28345
IP address blocks:        2001:12f8:4::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:57:32:f6:69:e2:25:ff:50:9c:ec:44:6d:e1:8c:8c:8f:b3:66:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Apr  3 14:35:00 2024 GMT
            Not After : Apr  2 14:40:00 2025 GMT
        Subject: CN=3082010A0282010100E0E1A835366176272FD752C4D41B258C3D9B39F770DBB3B37CDEA88AE15EC04B859F40C10EF9D6BBDC0A3F7030B375840B8B3D004A7DDF015379C6DB955103E7E1A45E0F81DB8441379D094BE9EC6E57CDD35F71853ABCA98AC11CBA947F094CFE60EC03B775F69E91DAF55260D5FFCEE7BEF556AE532B3C7981410305206E385DCC83769CBEF46BCB6F6D31965EAF381C500E27A6C8550E6A7DAA55985C92C8D05C8AC185F5A2CD00C8D0A306859C02679F03566DD3FCAAB042CD8CEB5373DF58EB12B7856E3CD3098AF2488BDD0CE62362A5FBFF2233A22E8E31BD515C37B3CBDDBEA5D03C1E39B68B967C86482B789EA864411FA4E74DED389489697DAEFF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e1:a8:35:36:61:76:27:2f:d7:52:c4:d4:1b:
                    25:8c:3d:9b:39:f7:70:db:b3:b3:7c:de:a8:8a:e1:
                    5e:c0:4b:85:9f:40:c1:0e:f9:d6:bb:dc:0a:3f:70:
                    30:b3:75:84:0b:8b:3d:00:4a:7d:df:01:53:79:c6:
                    db:95:51:03:e7:e1:a4:5e:0f:81:db:84:41:37:9d:
                    09:4b:e9:ec:6e:57:cd:d3:5f:71:85:3a:bc:a9:8a:
                    c1:1c:ba:94:7f:09:4c:fe:60:ec:03:b7:75:f6:9e:
                    91:da:f5:52:60:d5:ff:ce:e7:be:f5:56:ae:53:2b:
                    3c:79:81:41:03:05:20:6e:38:5d:cc:83:76:9c:be:
                    f4:6b:cb:6f:6d:31:96:5e:af:38:1c:50:0e:27:a6:
                    c8:55:0e:6a:7d:aa:55:98:5c:92:c8:d0:5c:8a:c1:
                    85:f5:a2:cd:00:c8:d0:a3:06:85:9c:02:67:9f:03:
                    56:6d:d3:fc:aa:b0:42:cd:8c:eb:53:73:df:58:eb:
                    12:b7:85:6e:3c:d3:09:8a:f2:48:8b:dd:0c:e6:23:
                    62:a5:fb:ff:22:33:a2:2e:8e:31:bd:51:5c:37:b3:
                    cb:dd:be:a5:d0:3c:1e:39:b6:8b:96:7c:86:48:2b:
                    78:9e:a8:64:41:1f:a4:e7:4d:ed:38:94:89:69:7d:
                    ae:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:EA:36:A4:2C:9D:F4:52:A0:BE:26:FD:8F:22:10:30:F9:DF:E5:5A
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a343a3a2f34372d3438203d3e203238333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:4::/47

    Signature Algorithm: sha256WithRSAEncryption
         7b:e2:1b:b4:56:3e:c0:bb:6f:1d:04:ca:cc:1b:f6:2a:1a:67:
         7c:c5:36:90:1c:aa:15:1d:47:f0:01:93:46:1b:c1:9f:3e:b3:
         2e:a0:ac:2e:e7:f1:3d:8d:64:21:ba:04:c1:b9:19:c2:eb:42:
         80:14:84:0b:1b:99:8b:ab:b6:ac:74:5b:b2:57:83:c6:d5:26:
         ff:c2:19:f9:ce:80:ce:67:07:39:13:49:98:56:8d:49:ea:e8:
         02:4f:ac:87:28:b1:c0:3e:e4:89:40:8e:72:b1:c5:25:d5:f2:
         08:1c:67:42:b5:77:21:9d:a3:dd:a2:2d:2d:4c:04:56:87:18:
         45:04:a8:0f:76:2b:ad:8a:81:42:46:7b:fb:18:e0:ef:a1:c5:
         d4:87:bf:9d:b9:d8:1a:bf:07:01:2f:ff:bc:40:6d:eb:3b:c4:
         b2:9a:c2:74:ec:ae:72:4b:fc:47:02:d7:4f:96:b3:a3:7e:d6:
         36:c7:0e:c4:ec:67:af:41:7e:37:a8:96:08:cf:30:bb:91:19:
         9b:a6:9b:35:44:02:0e:bc:7f:6a:e5:ea:7f:66:69:e1:69:38:
         81:c8:9a:a1:59:32:17:00:e8:15:a3:14:8d:e3:24:12:2a:ff:
         41:ab:74:28:16:13:3f:bd:a2:cc:a0:bf:e0:5b:dd:fb:53:0a:
         4f:d4:4c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----