Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a383a3a2f34372d3438203d3e203130393036.roa
File:                     323030313a313266383a383a3a2f34372d3438203d3e203130393036.roa (raw, json)
Hash identifier:          0S33qEXcUs47+EPDEV4zl68coVszZjnKNo0wcm3ucCY=
Subject key identifier:   66:E8:81:87:AD:BF:C5:7C:F4:1B:C0:C2:21:E0:A1:DC:32:BA:E5:8A
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       53E4079A430668FC4EEF5CB2A1CAA61DD8CC0BA5
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a383a3a2f34372d3438203d3e203130393036.roa
Signing time:             Mon 28 Aug 2023 18:02:00 +0000
ROA not before:           Mon 28 Aug 2023 17:57:00 +0000
ROA not after:            Mon 26 Aug 2024 18:02:00 +0000
asID:                     10906
IP address blocks:        2001:12f8:8::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:e4:07:9a:43:06:68:fc:4e:ef:5c:b2:a1:ca:a6:1d:d8:cc:0b:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Aug 28 17:57:00 2023 GMT
            Not After : Aug 26 18:02:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8d:cb:54:9b:c1:12:ae:84:3f:73:a8:8f:64:
                    04:bb:73:2c:03:38:a6:f2:eb:0a:a5:00:30:a8:8d:
                    7a:8d:f6:02:e9:1a:98:d5:0c:16:d9:2e:74:e0:77:
                    19:12:eb:50:49:ec:17:2c:2f:88:ae:68:e0:9d:04:
                    ef:d6:bc:29:1c:c6:b4:d6:13:f5:eb:35:3a:ff:db:
                    b2:4b:c3:28:e4:6d:c1:c6:87:33:63:50:96:a4:6a:
                    0f:48:bd:9f:c8:dd:ab:70:86:ce:56:4e:cf:15:11:
                    4d:4d:4c:5e:3c:d6:08:e5:c9:51:e1:99:5c:a3:f5:
                    00:ee:88:e7:04:ff:8f:d0:ba:12:91:d2:12:89:52:
                    e9:fd:f5:01:9a:bc:2a:ce:b4:6b:9b:7c:ae:49:80:
                    d3:08:eb:7a:f6:dc:e6:62:02:e1:27:5b:73:4f:e3:
                    ea:c7:e8:cc:31:90:48:78:46:1e:ae:cd:76:59:45:
                    9f:69:c2:c3:33:8e:f5:e9:ed:d6:e2:e6:9a:01:be:
                    84:83:93:fc:50:49:83:0b:88:b3:a2:0a:c1:ae:45:
                    31:d9:40:5f:fe:17:52:81:e1:2f:ad:5f:d6:fe:b6:
                    96:2d:52:b1:54:65:56:72:17:fc:26:0c:bd:7a:8b:
                    15:c2:ab:ff:d4:4e:48:f9:fb:3f:68:aa:75:b8:e0:
                    13:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E8:81:87:AD:BF:C5:7C:F4:1B:C0:C2:21:E0:A1:DC:32:BA:E5:8A
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a383a3a2f34372d3438203d3e203130393036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:8::/47

    Signature Algorithm: sha256WithRSAEncryption
         c4:ad:e5:66:1c:be:1d:c4:c3:71:8d:63:57:03:10:03:d3:27:
         fd:b6:8b:8c:96:da:be:bf:61:df:94:5d:1f:2d:98:70:72:3e:
         f5:2f:09:0e:41:ee:33:f6:03:49:e7:34:99:14:bf:0f:ab:b0:
         f1:f9:19:e6:65:9e:da:1b:3b:bd:27:4c:bd:f8:33:a5:2b:c8:
         57:88:7e:f8:9f:f2:35:32:1a:19:db:ed:d6:01:9e:a3:36:af:
         f7:df:f6:44:75:f4:bf:87:5a:16:c1:6a:8d:d4:e3:f4:70:5e:
         3f:ed:37:19:ba:63:e0:6c:00:95:4c:a6:4b:10:8f:9a:b0:51:
         67:f1:78:f8:d2:7e:e9:b9:59:da:8f:10:b5:3a:f5:6e:75:8d:
         b5:36:0c:ca:c6:ca:bb:02:a7:b3:b7:1d:5c:d2:39:54:37:c3:
         71:9c:6d:4c:b9:7e:06:b5:8c:44:a9:15:ce:70:8b:07:1c:77:
         33:6e:6d:20:a4:7f:c6:51:74:89:02:0b:00:eb:c7:d8:a9:3d:
         7e:91:b9:45:56:a6:14:c6:45:32:74:0e:ad:00:9d:6b:bd:5a:
         08:e0:07:2c:ad:cf:c9:4f:e3:93:c6:de:70:9d:0d:a0:0c:5c:
         69:7a:42:51:f1:85:96:ed:14:43:b6:cb:01:78:c0:ab:fd:54:
         8f:eb:df:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----