Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a383a3a2f34372d3438203d3e203238333435.roa
File:                     323030313a313266383a383a3a2f34372d3438203d3e203238333435.roa (raw, json)
Hash identifier:          oD/CcKAsEgiZn7seFii+dlnEhjF1s3lznjpel8jCh3I=
Subject key identifier:   1B:A4:2B:1A:D0:5D:3A:4C:6F:0F:79:1B:EB:42:AD:71:CB:5D:EE:1C
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       0BA87B74BC9F73A278EB64F285103BD3F2516BEF
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a383a3a2f34372d3438203d3e203238333435.roa
Signing time:             Wed 03 Apr 2024 14:42:01 +0000
ROA not before:           Wed 03 Apr 2024 14:37:01 +0000
ROA not after:            Wed 02 Apr 2025 14:42:01 +0000
asID:                     28345
IP address blocks:        2001:12f8:8::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:a8:7b:74:bc:9f:73:a2:78:eb:64:f2:85:10:3b:d3:f2:51:6b:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Apr  3 14:37:01 2024 GMT
            Not After : Apr  2 14:42:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c1:7e:b9:b8:4c:f4:4d:1a:62:27:85:26:67:
                    49:ef:7f:1d:0b:a2:54:29:80:7d:8d:be:b3:3c:7a:
                    7c:b8:49:d7:2a:17:7e:20:ae:3e:44:58:1a:28:f8:
                    90:49:4d:32:b6:5e:86:ab:13:49:83:b6:59:ea:6a:
                    04:f7:14:5f:35:4e:f9:ce:e6:5c:7f:34:e7:ba:15:
                    92:d1:d9:58:cd:98:43:1a:59:19:b3:bf:0c:19:e2:
                    33:30:18:96:e0:40:42:bf:bc:34:40:66:5a:33:dd:
                    61:24:54:0b:65:d1:21:50:e0:53:27:e0:20:d6:36:
                    14:3c:c5:46:fe:2b:a2:af:f0:c4:d4:05:dd:ce:06:
                    74:b5:12:bf:3d:98:e3:08:b2:ed:ff:2f:df:ff:7e:
                    1e:6a:31:28:f7:22:cd:96:40:02:63:e5:d0:fe:f6:
                    65:d3:f5:61:25:95:21:51:bc:72:15:b0:fa:c4:0d:
                    22:56:66:47:b9:83:d1:89:c5:a2:2e:43:1c:27:99:
                    fd:02:c0:16:53:46:67:1f:74:97:8c:d3:3d:67:e9:
                    0c:70:85:c3:e3:c8:d8:75:32:ae:a0:e4:52:da:e4:
                    53:2b:ac:53:ec:b2:32:98:2c:05:59:7e:81:02:e1:
                    a4:34:12:39:5b:60:21:2c:61:03:fc:40:e9:e8:73:
                    c3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A4:2B:1A:D0:5D:3A:4C:6F:0F:79:1B:EB:42:AD:71:CB:5D:EE:1C
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a383a3a2f34372d3438203d3e203238333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:8::/47

    Signature Algorithm: sha256WithRSAEncryption
         cc:2c:78:fe:c0:df:78:f6:49:fe:b0:b5:04:55:6a:99:c8:09:
         11:52:d8:e4:da:54:cc:a7:2d:cc:d7:44:5f:29:84:39:cf:09:
         61:32:68:8a:60:1b:39:46:1c:4d:2f:06:fc:c0:5e:bb:1b:67:
         84:c6:9a:6a:8f:34:34:da:c8:c0:26:8a:ea:04:cb:a4:a4:69:
         ab:6b:b3:8a:ed:a2:fa:1b:bf:c1:4b:5d:a4:c4:64:43:15:71:
         2c:9a:b6:f3:91:9b:b1:db:d2:bd:19:b4:3b:14:af:78:97:60:
         48:5a:09:9b:e4:60:2f:33:f3:9e:0d:9d:02:96:12:a6:51:8d:
         70:32:90:73:29:84:f0:21:dd:cf:b1:1d:b4:fe:27:46:12:89:
         fd:ff:e6:ae:fc:cf:19:ae:f7:fb:18:3b:eb:25:26:ea:40:66:
         21:bd:fa:2c:85:99:ae:0f:23:76:bf:29:60:e8:ed:48:50:ee:
         06:d1:df:4a:c0:af:b4:3f:4d:10:8d:42:1c:5d:41:24:7e:ed:
         9c:a2:be:7b:0a:54:e6:94:ea:2d:1e:42:8a:c8:a5:f8:3a:a7:
         6b:ac:8b:23:82:f6:23:cc:ee:a7:c0:00:db:bb:11:9a:df:82:
         28:ff:09:ce:b0:1e:69:47:2a:a4:f7:31:04:c0:e1:93:ae:1f:
         98:8a:bf:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----