Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a363a3a2f34372d3438203d3e203238333435.roa
File:                     323030313a313266383a363a3a2f34372d3438203d3e203238333435.roa (raw, json)
Hash identifier:          mcOLuSRP8ciY1K+yLMUiRT7k208OTZAKsnGJJxc3fpo=
Subject key identifier:   70:7D:A2:A6:93:EB:FD:7A:C1:A7:F3:A2:10:BF:F4:5D:69:50:58:59
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       7CA5D6090BD9997FE0274BB56B8FD1FFC70FB252
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a363a3a2f34372d3438203d3e203238333435.roa
Signing time:             Wed 03 Apr 2024 14:42:00 +0000
ROA not before:           Wed 03 Apr 2024 14:37:00 +0000
ROA not after:            Wed 02 Apr 2025 14:42:00 +0000
asID:                     28345
IP address blocks:        2001:12f8:6::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a5:d6:09:0b:d9:99:7f:e0:27:4b:b5:6b:8f:d1:ff:c7:0f:b2:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Apr  3 14:37:00 2024 GMT
            Not After : Apr  2 14:42:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9f:a2:19:33:fb:a5:5d:42:41:90:31:95:e2:
                    7d:4a:64:48:b5:b3:59:35:3a:1e:0d:57:26:49:44:
                    7d:8a:9e:36:54:33:26:3b:74:ed:0d:d3:ea:7b:08:
                    48:67:f3:91:9a:99:24:6f:d6:ce:39:50:eb:3f:30:
                    72:9b:ea:46:d8:1f:f0:f0:cf:5f:ba:40:12:60:88:
                    98:c2:14:90:ef:da:26:72:d2:6a:80:66:48:03:85:
                    2b:e3:1c:4c:08:2b:0a:32:e0:ac:ab:ba:72:8c:48:
                    36:02:82:66:70:13:9c:65:62:69:fb:4c:ed:5b:1c:
                    06:b6:b8:ec:61:5d:73:30:a7:70:3e:fc:fa:60:60:
                    c7:3e:7d:b9:a3:a8:4c:db:33:4c:4b:f2:c2:52:d8:
                    b5:f2:dc:a8:96:da:f7:5b:90:d9:70:55:2a:b0:82:
                    7e:2b:37:98:4d:9f:3e:78:4b:91:88:0f:a5:b8:dc:
                    98:8c:c4:1f:60:f7:c5:bb:d5:e8:79:6e:6b:55:bb:
                    f9:b9:17:d0:5a:de:d4:2c:d1:d2:cd:21:5d:17:fe:
                    29:be:f2:44:21:45:01:13:fe:8e:66:90:08:e4:29:
                    4f:23:15:af:a6:89:d1:85:5b:12:d1:2f:2a:0b:c6:
                    b6:28:2e:56:19:30:05:cc:7e:06:6f:58:25:fb:5d:
                    6a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:7D:A2:A6:93:EB:FD:7A:C1:A7:F3:A2:10:BF:F4:5D:69:50:58:59
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a363a3a2f34372d3438203d3e203238333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:6::/47

    Signature Algorithm: sha256WithRSAEncryption
         5f:3a:0b:ca:f8:fd:46:94:8e:44:04:6c:6c:f5:bd:3f:f5:26:
         4b:d8:2e:45:21:97:41:9d:bb:a7:51:a6:16:b4:14:f4:41:f7:
         93:23:f5:e4:fc:cc:a0:a9:54:9d:5a:df:17:5e:28:59:64:8d:
         28:9e:f9:87:3d:a5:d4:c8:1e:20:4e:94:8b:3c:b2:cf:f6:9c:
         b1:02:8a:ae:a7:3b:40:bf:44:49:58:37:a1:dd:2f:7f:91:9c:
         c7:a5:03:f5:c8:6a:a2:be:a0:25:84:57:53:99:b2:aa:f9:95:
         f3:f7:46:25:2d:74:ef:8e:89:46:d1:e3:ab:ba:2b:f8:e4:d9:
         42:96:c4:6d:be:8d:43:d3:db:3c:bc:f1:9a:1c:ca:d6:6d:dd:
         ff:ce:70:a3:89:5a:42:4d:0d:95:f4:8f:f8:e2:18:b9:ea:e2:
         06:5d:3f:46:74:f0:f6:ee:b6:a5:17:d8:7a:da:bb:d2:d4:93:
         1a:ab:08:50:4e:a5:04:4a:1d:74:50:14:93:8c:31:d9:66:1e:
         75:37:b5:d5:00:02:a2:b6:b5:8e:98:a0:f9:05:7e:3b:31:eb:
         d0:29:18:8b:63:59:50:67:40:a8:94:8f:57:b7:e5:29:69:95:
         50:64:2e:8d:e7:43:c7:56:68:4b:df:97:9b:7c:b3:7f:b9:9b:
         c4:f5:5c:d9
-----BEGIN CERTIFICATE-----
MIIHRjCCBi6gAwIBAgIUfKXWCQvZmX/gJ0u1a4/R/8cPslIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQ4M0I0MTg2QUQ4NDBBN0FDODkxQTAxMDUwMUU0RENE
QThCMzhBOTAeFw0yNDA0MDMxNDM3MDBaFw0yNTA0MDIxNDQyMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTU5RkEyMTkzM0ZCQTU1RDQy
NDE5MDMxOTVFMjdENEE2NDQ4QjVCMzU5MzUzQTFFMEQ1NzI2NDk0NDdEOEE5RTM2
NTQzMzI2M0I3NEVEMEREM0VBN0IwODQ4NjdGMzkxOUE5OTI0NkZENkNFMzk1MEVC
M0YzMDcyOUJFQTQ2RDgxRkYwRjBDRjVGQkE0MDEyNjA4ODk4QzIxNDkwRUZEQTI2
NzJEMjZBODA2NjQ4MDM4NTJCRTMxQzRDMDgyQjBBMzJFMEFDQUJCQTcyOEM0ODM2
MDI4MjY2NzAxMzlDNjU2MjY5RkI0Q0VENUIxQzA2QjZCOEVDNjE1RDczMzBBNzcw
M0VGQ0ZBNjA2MEM3M0U3REI5QTNBODRDREIzMzRDNEJGMkMyNTJEOEI1RjJEQ0E4
OTZEQUY3NUI5MEQ5NzA1NTJBQjA4MjdFMkIzNzk4NEQ5RjNFNzg0QjkxODgwRkE1
QjhEQzk4OENDNDFGNjBGN0M1QkJENUU4Nzk2RTZCNTVCQkY5QjkxN0QwNUFERUQ0
MkNEMUQyQ0QyMTVEMTdGRTI5QkVGMjQ0MjE0NTAxMTNGRThFNjY5MDA4RTQyOTRG
MjMxNUFGQTY4OUQxODU1QjEyRDEyRjJBMEJDNkI2MjgyRTU2MTkzMDA1Q0M3RTA2
NkY1ODI1RkI1RDZBODEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA5Z+iGTP7pV1CQZAxleJ9SmRItbNZNToeDVcmSUR9ip42VDMmO3Tt
DdPqewhIZ/ORmpkkb9bOOVDrPzBym+pG2B/w8M9fukASYIiYwhSQ79omctJqgGZI
A4Ur4xxMCCsKMuCsq7pyjEg2AoJmcBOcZWJp+0ztWxwGtrjsYV1zMKdwPvz6YGDH
Pn25o6hM2zNMS/LCUti18tyoltr3W5DZcFUqsIJ+KzeYTZ8+eEuRiA+luNyYjMQf
YPfFu9XoeW5rVbv5uRfQWt7ULNHSzSFdF/4pvvJEIUUBE/6OZpAI5ClPIxWvponR
hVsS0S8qC8a2KC5WGTAFzH4Gb1gl+11qgQIDAQABo4ICVDCCAlAwHQYDVR0OBBYE
FHB9oqaT6/16wafzohC/9F1pUFhZMB8GA1UdIwQYMBaAFKSDtBhq2ECnrIkaAQUB
5NzaizipMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0EyeDZpY2FLcFZXUDV1
VUJ6SlF6UnZFcGp2UzdQVlc3WjJFcjRGMnF0MUN0LzEvQTQ4M0I0MTg2QUQ4NDBB
N0FDODkxQTAxMDUwMUU0RENEQThCMzhBOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9BNDgzQjQxODZBRDg0MEE3QUM4OTFBMDEwNTAxRTREQ0RBOEIz
OEE5LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BMng2aWNhS3BWV1A1dVVCekpR
elJ2RXBqdlM3UFZXN1oyRXI0RjJxdDFDdC8xLzMyMzAzMDMxM2EzMTMyNjYzODNh
MzYzYTNhMmYzNDM3MmQzNDM4MjAzZDNlMjAzMjM4MzMzNDM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcB
IAES+AAGMA0GCSqGSIb3DQEBCwUAA4IBAQBfOgvK+P1GlI5EBGxs9b0/9SZL2C5F
IZdBnbunUaYWtBT0QfeTI/Xk/MygqVSdWt8XXihZZI0onvmHPaXUyB4gTpSLPLLP
9pyxAoqupztAv0RJWDeh3S9/kZzHpQP1yGqivqAlhFdTmbKq+ZXz90YlLXTvjolG
0eOruiv45NlClsRtvo1D09s8vPGaHMrWbd3/znCjiVpCTQ2V9I/44hi56uIGXT9G
dPD27ralF9h62rvS1JMaqwhQTqUESh10UBSTjDHZZh51N7XVAAKitrWOmKD5BX47
MevQKRiLY1lQZ0ColI9Xt+UpaZVQZC6N50PHVmhL35ebfLN/uZvE9VzZ
-----END CERTIFICATE-----