Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a363a3a2f34372d3438203d3e203131343331.roa
File:                     323030313a313266383a363a3a2f34372d3438203d3e203131343331.roa (raw, json)
Hash identifier:          l6FYG/QgJGKoUGmvp0Er2u8GwjZ3aDhKO6rtd84d9Ag=
Subject key identifier:   55:52:A1:76:C5:2D:55:BC:3D:83:E0:79:44:60:CA:79:66:13:BA:99
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       4C82FE01D76F66F74037DC19C67D6D03B5A82C5F
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a363a3a2f34372d3438203d3e203131343331.roa
Signing time:             Thu 14 Sep 2023 18:02:00 +0000
ROA not before:           Thu 14 Sep 2023 17:57:00 +0000
ROA not after:            Thu 12 Sep 2024 18:02:00 +0000
asID:                     11431
IP address blocks:        2001:12f8:6::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:82:fe:01:d7:6f:66:f7:40:37:dc:19:c6:7d:6d:03:b5:a8:2c:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Sep 14 17:57:00 2023 GMT
            Not After : Sep 12 18:02:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6d:8b:d0:c6:c9:e2:34:df:4d:c7:72:84:46:
                    5d:db:44:f9:b0:3e:f8:00:32:05:ce:74:25:cf:21:
                    97:00:45:0b:85:67:35:02:23:8a:aa:e4:b4:97:64:
                    b4:86:c1:c0:7f:48:5f:fa:83:81:17:ca:1c:ca:8d:
                    8a:37:ba:77:e3:31:ee:40:68:20:b0:c2:18:d1:6a:
                    c1:18:0e:fe:ff:87:5a:49:64:33:10:f0:6b:11:4b:
                    f0:98:1c:9e:6c:9f:09:bc:9c:9c:3c:1c:4f:df:38:
                    45:50:69:2d:53:89:78:54:b8:8a:23:8c:67:b7:ab:
                    dc:b9:bd:56:0f:4f:3d:c6:4e:96:0d:fc:d1:a3:b3:
                    05:f6:fa:e3:5c:be:77:2f:09:27:de:d8:5e:c0:28:
                    bd:ad:a7:83:98:6f:96:70:6b:eb:88:f2:24:a3:87:
                    a8:b3:13:f7:53:e0:3f:fb:46:4c:84:ca:53:11:68:
                    82:32:ac:29:eb:08:15:b6:68:f1:0f:11:24:9d:2e:
                    94:79:3b:29:6d:a4:0e:f1:79:f6:7b:3e:af:ae:06:
                    43:93:78:fe:e7:46:42:3e:44:81:e4:0d:48:a7:27:
                    e7:8f:1c:4d:02:9d:47:82:2f:a2:b2:ef:2e:57:3a:
                    2c:a5:94:6e:3d:bd:11:e7:86:23:c1:d1:9e:14:17:
                    cd:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:52:A1:76:C5:2D:55:BC:3D:83:E0:79:44:60:CA:79:66:13:BA:99
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a363a3a2f34372d3438203d3e203131343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:6::/47

    Signature Algorithm: sha256WithRSAEncryption
         9e:68:89:6d:8b:38:88:d2:cb:a2:19:00:bb:6d:54:ca:d1:93:
         0c:5c:85:84:a3:12:30:86:f2:94:12:9c:0d:ac:34:87:47:6a:
         dd:f3:d8:e4:80:06:cc:20:b1:76:75:52:d3:ce:db:d4:c4:0c:
         80:b5:5f:0b:eb:35:ed:a6:7f:d4:0b:de:40:03:ac:bf:93:e8:
         26:c8:e5:2f:68:5c:d0:2e:ec:5e:e4:ee:e7:4b:30:b4:18:72:
         6d:2f:7f:e6:21:1f:4d:6f:d1:4c:14:1f:35:01:4e:88:5b:81:
         f7:dd:ae:e2:b6:58:0b:d7:2b:8c:2e:7d:8e:db:12:4d:1f:4b:
         ce:b4:dd:dd:ad:32:64:37:21:50:12:5d:14:22:d4:ed:22:ca:
         9a:46:c0:6c:f5:6a:3c:39:41:7c:5e:33:6b:38:de:47:59:99:
         bf:81:e7:0d:c7:08:e6:6b:13:60:72:4b:17:8f:86:d7:44:0f:
         5b:12:a2:9f:99:2f:5f:a2:8d:20:e4:b0:1a:53:9e:68:e7:1c:
         a8:b8:eb:97:c7:73:e6:b7:5e:fe:fc:8e:d8:21:c4:e1:3a:e1:
         bc:7f:aa:d0:24:e6:8c:72:66:36:05:9c:5e:2e:4e:09:c0:09:
         e5:26:6a:ff:b3:ba:e7:a9:7d:36:ba:83:ce:ad:61:3d:7c:2f:
         f5:bd:04:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----