Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a383a3a2f34372d3438203d3e203131343331.roa
File:                     323030313a313266383a383a3a2f34372d3438203d3e203131343331.roa (raw, json)
Hash identifier:          HYyBSa+WmJddJZwU+IhN1f2iridkGH4o4C0igVZvZgc=
Subject key identifier:   84:7E:CB:9C:75:52:54:A6:40:22:05:7B:00:41:96:6A:BB:4A:FA:27
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       7879953B0A63694A9DEB602CE5C4BB8707E7C9B2
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a383a3a2f34372d3438203d3e203131343331.roa
Signing time:             Thu 31 Aug 2023 16:06:00 +0000
ROA not before:           Thu 31 Aug 2023 16:01:00 +0000
ROA not after:            Thu 29 Aug 2024 16:06:00 +0000
asID:                     11431
IP address blocks:        2001:12f8:8::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:79:95:3b:0a:63:69:4a:9d:eb:60:2c:e5:c4:bb:87:07:e7:c9:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Aug 31 16:01:00 2023 GMT
            Not After : Aug 29 16:06:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3d:57:b9:a1:19:6e:9e:98:0e:fa:23:20:73:
                    3e:b9:17:08:3f:2a:26:7b:8d:f1:96:ce:06:7a:2d:
                    8c:c3:1f:ee:ba:28:db:41:b7:50:97:cf:75:c6:ff:
                    27:3d:f6:88:3f:78:47:2e:d0:80:a5:17:77:c0:a9:
                    fb:1d:d0:8b:a3:b1:81:be:72:7d:a5:a4:de:84:fa:
                    91:42:a7:f2:48:18:ae:bc:80:27:51:5f:28:07:a1:
                    58:74:06:0e:4d:56:0f:d5:2e:2e:0a:86:f5:97:c7:
                    c4:5e:b8:7b:ea:74:b0:9f:a1:28:d1:7a:ff:3b:2e:
                    f8:eb:84:11:49:a4:d5:33:0d:2e:f7:07:b9:d7:42:
                    e5:42:09:01:af:ab:c2:bb:cb:01:cc:04:1b:2d:6a:
                    b1:5a:0c:60:ea:48:e1:05:0b:f4:fe:30:d2:08:52:
                    01:32:86:e3:74:dc:35:0d:35:8f:8f:87:72:42:0b:
                    25:ef:8c:32:b1:87:11:1e:b6:c9:49:01:65:39:0c:
                    46:d4:17:f4:9f:8b:76:1b:9b:05:e4:b3:ab:ed:cb:
                    83:61:50:49:41:d6:b1:c7:7b:a4:04:7e:94:f6:0f:
                    e1:cc:10:fa:77:6e:7d:57:39:3b:da:e9:0b:52:c6:
                    95:22:fd:22:49:42:93:c6:18:37:87:64:43:f2:7d:
                    0d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:7E:CB:9C:75:52:54:A6:40:22:05:7B:00:41:96:6A:BB:4A:FA:27
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a383a3a2f34372d3438203d3e203131343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:8::/47

    Signature Algorithm: sha256WithRSAEncryption
         b8:dd:48:39:a1:75:b4:a7:fa:6b:f0:52:bf:e7:c8:89:e4:3c:
         f5:10:1e:cc:8d:a5:d4:5c:ab:a4:c5:cc:03:03:d4:79:97:7c:
         c5:f8:37:78:a2:07:fc:0f:a0:49:67:ed:f9:8c:58:b8:7e:22:
         9f:8d:8d:6f:cb:dc:9f:4b:16:9f:e2:ad:7e:03:1e:79:73:66:
         28:1b:dc:e7:46:e4:a7:29:d3:66:6c:af:69:32:c6:76:f9:04:
         55:a3:89:79:ac:1a:da:31:a5:93:4d:27:0d:c4:97:84:86:b6:
         2f:03:df:d7:ab:ca:57:da:72:b1:61:f3:5f:07:72:f4:6f:be:
         71:54:d6:03:aa:97:ea:ea:19:ab:c8:6b:6e:30:b5:98:fb:fc:
         51:95:ff:b0:b1:0c:78:92:f2:f7:b7:76:c8:45:ff:c2:7d:01:
         18:b8:c6:d7:fe:b9:17:53:a7:ac:ac:20:64:20:b7:72:0e:b2:
         38:ea:0c:fc:ae:f2:e3:7e:b7:23:93:6e:69:ad:77:34:80:7f:
         4b:83:6e:fb:02:0c:e4:e2:46:84:c4:8f:df:bf:e4:a8:01:0d:
         cc:f5:e8:ac:39:8c:79:2e:b1:8c:bc:bb:84:cb:4f:b6:aa:3f:
         74:9c:d3:c8:9a:51:0f:36:77:c7:bf:1a:e8:54:94:6b:e8:32:
         b8:ef:20:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----