Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a363a3a2f34372d3438203d3e203533303335.roa
File:                     323030313a313266383a363a3a2f34372d3438203d3e203533303335.roa (raw, json)
Hash identifier:          qsC/GwtALB5rBdfua+dOmGcrbifEKEaxKti682S/pJ8=
Subject key identifier:   CB:4B:FB:97:BC:41:57:99:61:F4:67:30:FC:1B:D7:90:52:1F:EE:56
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       424ED4A9711BD98D7C21819B60384841869C8CBA
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a363a3a2f34372d3438203d3e203533303335.roa
Signing time:             Thu 14 Sep 2023 18:04:00 +0000
ROA not before:           Thu 14 Sep 2023 17:59:00 +0000
ROA not after:            Thu 12 Sep 2024 18:04:00 +0000
asID:                     53035
IP address blocks:        2001:12f8:6::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:4e:d4:a9:71:1b:d9:8d:7c:21:81:9b:60:38:48:41:86:9c:8c:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Sep 14 17:59:00 2023 GMT
            Not After : Sep 12 18:04:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1d:4f:d8:97:9f:e9:23:24:44:44:89:02:f1:
                    bf:52:7a:47:0e:b3:9d:f5:3d:0e:3a:e6:d0:2a:bf:
                    b4:9a:f1:c8:70:a4:e6:e1:5c:0f:d1:b6:ca:90:39:
                    1d:96:77:ff:4e:1a:03:85:92:85:12:df:5e:c8:c5:
                    ff:a2:d6:f0:44:0d:34:31:9d:e3:51:74:ca:b2:b0:
                    82:5b:08:08:d4:09:d2:0c:62:9d:72:dd:01:45:3d:
                    3c:88:37:c3:2a:02:7c:d0:e1:37:a7:2f:96:9b:d8:
                    bb:6c:8b:ae:36:3a:6e:92:73:84:50:85:dc:97:7c:
                    1c:46:e2:b0:0c:b2:72:a8:79:71:c8:c0:5f:2d:79:
                    cd:cb:bf:a0:e7:40:f9:c2:56:46:94:16:61:90:9e:
                    92:a3:38:6d:32:29:ab:5a:39:f4:f6:96:22:24:c7:
                    62:c4:5d:6e:e7:18:0f:65:9a:1f:3e:df:79:c9:67:
                    4a:e0:19:38:5d:39:c2:51:d4:a9:c9:04:1f:ff:69:
                    b8:12:e7:16:ec:9b:69:e5:b9:76:75:14:5c:5d:58:
                    d9:18:7c:a4:00:f9:35:af:ea:92:62:f3:6f:42:c0:
                    10:6c:9e:52:82:83:54:ce:ba:eb:5b:24:b3:9c:24:
                    c0:ae:65:1e:90:73:43:f7:c7:00:95:6c:a4:c2:ac:
                    74:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:4B:FB:97:BC:41:57:99:61:F4:67:30:FC:1B:D7:90:52:1F:EE:56
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a363a3a2f34372d3438203d3e203533303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:6::/47

    Signature Algorithm: sha256WithRSAEncryption
         66:ea:c2:76:dc:c8:36:7e:d7:58:4a:fe:e7:25:bc:38:4c:2a:
         47:eb:29:db:d8:25:66:c3:9b:90:f2:f7:77:22:df:1f:f6:db:
         66:42:ec:f3:79:6f:0f:19:39:5b:27:06:98:22:51:bc:ab:8f:
         26:47:3e:d2:30:01:72:eb:a6:88:73:54:27:ff:5c:3c:63:0a:
         82:5c:ae:bb:b5:86:f9:1c:4e:34:98:00:ee:3d:c6:bf:c1:d1:
         7f:cb:08:d1:36:11:1b:d4:e4:0b:5c:9c:9d:a4:77:4a:76:e6:
         30:5e:12:c5:25:f4:a2:b7:1a:a6:c8:9b:df:ef:8e:47:eb:ad:
         83:01:c1:0e:b0:b4:94:1b:35:31:f2:48:2e:b7:69:5a:77:ac:
         4b:72:53:a7:70:32:a9:a0:39:82:73:1d:0b:d7:32:92:4f:34:
         ee:96:3e:f5:2c:6d:aa:c1:ef:c6:ed:4b:af:c1:c7:0e:44:50:
         86:41:55:0a:e6:ed:a6:cc:4e:8a:d7:09:34:dc:55:c1:aa:40:
         15:ec:0b:7c:74:d3:a5:53:95:f8:b9:1a:46:3a:e2:f2:66:37:
         c3:67:e4:2d:96:da:51:97:c1:08:d5:3a:68:fc:ff:37:23:1a:
         c7:b2:0c:d1:8f:3c:83:c6:27:be:d3:cb:ac:cf:0f:bb:25:22:
         f1:22:76:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----