Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a3a2f34382d313238203d3e2030.roa
File:                     323030313a313266383a3a2f34382d313238203d3e2030.roa (raw, json)
Hash identifier:          xHKqFi/LB71U1OfMVT7DzvTJ8FRv0drtmd/HYMVGtGY=
Subject key identifier:   4F:4C:87:26:FF:C1:F1:1A:D9:C6:73:DE:A3:85:DB:A5:54:4F:38:14
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       2A7762001E731EAFF10796FA325E185A3F058A54
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a3a2f34382d313238203d3e2030.roa
Signing time:             Sat 23 Sep 2023 16:54:00 +0000
ROA not before:           Sat 23 Sep 2023 16:49:00 +0000
ROA not after:            Sat 21 Sep 2024 16:54:00 +0000
asID:                     0
IP address blocks:        2001:12f8::/48 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:77:62:00:1e:73:1e:af:f1:07:96:fa:32:5e:18:5a:3f:05:8a:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Sep 23 16:49:00 2023 GMT
            Not After : Sep 21 16:54:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:73:c0:c9:64:3e:16:fe:ec:c5:12:cf:ac:71:
                    0d:df:7a:f1:82:2e:af:56:9a:ac:1f:b5:f5:30:90:
                    c8:db:96:94:ab:30:9c:ec:51:e3:d6:6b:68:49:a6:
                    c2:04:90:56:80:43:81:d0:98:71:56:86:74:4b:68:
                    eb:6a:fe:81:05:05:e9:f0:01:47:84:84:a9:02:52:
                    54:ec:bb:c9:16:ac:57:00:f8:76:18:08:88:ce:c4:
                    ff:f1:1d:12:93:5f:47:33:9b:d1:05:89:10:b1:ad:
                    94:ad:42:ef:35:f9:ff:0a:ca:52:69:01:81:33:83:
                    52:6f:1a:06:08:cb:b3:5d:97:fb:6f:df:77:a4:c0:
                    eb:3d:7d:c3:01:f8:74:73:8e:d5:70:99:0e:0e:07:
                    b8:93:23:a6:4c:6c:90:10:b7:2b:50:b0:30:09:2a:
                    42:f5:12:75:5b:16:0f:1c:69:18:75:a4:bb:f1:2a:
                    b3:c3:17:7d:83:1b:21:3b:4d:e0:bd:53:a6:3c:35:
                    ad:0d:9e:02:b4:6b:25:9e:7f:56:b8:62:21:dd:c4:
                    70:68:34:d5:fe:04:d6:46:23:2a:fe:4d:8f:f8:bd:
                    cd:33:56:15:39:49:5d:4e:80:92:3e:5d:20:0e:76:
                    fb:00:66:f1:1a:f4:c3:d4:32:74:89:4f:d2:e1:5e:
                    1e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:4C:87:26:FF:C1:F1:1A:D9:C6:73:DE:A3:85:DB:A5:54:4F:38:14
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a3a2f34382d313238203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:db:fc:cf:11:71:fa:c3:ce:9d:8a:33:97:30:cd:1e:89:82:
         ec:ef:4e:4a:55:4a:92:14:2d:b2:f3:12:64:a0:6d:03:1b:f2:
         ea:29:3e:5a:1a:5d:e8:88:fa:33:e5:32:79:b3:d2:97:bf:b1:
         96:88:8e:49:46:fe:3d:18:ae:53:85:1a:bd:26:96:c3:4a:8d:
         5d:25:77:64:a4:0d:d0:db:48:92:1c:04:28:3b:f0:4c:75:71:
         2c:cb:a0:a9:7e:60:9d:27:96:10:48:f0:fc:78:70:e9:32:4e:
         41:11:ee:62:f8:85:9d:e7:3a:c3:75:9d:76:44:95:38:a3:2a:
         9a:f4:aa:8a:6c:83:d3:9d:15:e3:c0:9f:c5:dd:27:8e:39:6c:
         43:ff:a1:8e:aa:ef:98:4f:34:b1:3b:7c:ec:74:e9:5b:15:a3:
         22:e5:02:8c:02:3a:0e:b9:41:fb:2b:99:39:ca:a6:c3:a5:69:
         42:89:e4:9d:fa:05:87:3a:14:13:14:3d:86:cc:2c:2a:74:36:
         a0:27:47:fe:72:70:7a:53:fa:b0:a6:7c:d3:11:23:f6:ab:cc:
         a9:72:aa:14:95:f5:a6:86:b8:65:8b:e7:43:89:24:a2:c4:5a:
         a4:7a:bf:9f:89:17:30:05:bf:d2:9f:3c:6e:42:5d:34:52:50:
         4a:8d:c4:30
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUKndiAB5zHq/xB5b6Ml4YWj8FilQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQ4M0I0MTg2QUQ4NDBBN0FDODkxQTAxMDUwMUU0RENE
QThCMzhBOTAeFw0yMzA5MjMxNjQ5MDBaFw0yNDA5MjExNjU0MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjc3M0MwQzk2NDNFMTZGRUVD
QzUxMkNGQUM3MTBEREY3QUYxODIyRUFGNTY5QUFDMUZCNUY1MzA5MEM4REI5Njk0
QUIzMDlDRUM1MUUzRDY2QjY4NDlBNkMyMDQ5MDU2ODA0MzgxRDA5ODcxNTY4Njc0
NEI2OEVCNkFGRTgxMDUwNUU5RjAwMTQ3ODQ4NEE5MDI1MjU0RUNCQkM5MTZBQzU3
MDBGODc2MTgwODg4Q0VDNEZGRjExRDEyOTM1RjQ3MzM5QkQxMDU4OTEwQjFBRDk0
QUQ0MkVGMzVGOUZGMEFDQTUyNjkwMTgxMzM4MzUyNkYxQTA2MDhDQkIzNUQ5N0ZC
NkZERjc3QTRDMEVCM0Q3REMzMDFGODc0NzM4RUQ1NzA5OTBFMEUwN0I4OTMyM0E2
NEM2QzkwMTBCNzJCNTBCMDMwMDkyQTQyRjUxMjc1NUIxNjBGMUM2OTE4NzVBNEJC
RjEyQUIzQzMxNzdEODMxQjIxM0I0REUwQkQ1M0E2M0MzNUFEMEQ5RTAyQjQ2QjI1
OUU3RjU2Qjg2MjIxRERDNDcwNjgzNEQ1RkUwNEQ2NDYyMzJBRkU0RDhGRjhCRENE
MzM1NjE1Mzk0OTVENEU4MDkyM0U1RDIwMEU3NkZCMDA2NkYxMUFGNEMzRDQzMjc0
ODk0RkQyRTE1RTFFNjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAt3PAyWQ+Fv7sxRLPrHEN33rxgi6vVpqsH7X1MJDI25aUqzCc7FHj
1mtoSabCBJBWgEOB0JhxVoZ0S2jrav6BBQXp8AFHhISpAlJU7LvJFqxXAPh2GAiI
zsT/8R0Sk19HM5vRBYkQsa2UrULvNfn/CspSaQGBM4NSbxoGCMuzXZf7b993pMDr
PX3DAfh0c47VcJkODge4kyOmTGyQELcrULAwCSpC9RJ1WxYPHGkYdaS78Sqzwxd9
gxshO03gvVOmPDWtDZ4CtGslnn9WuGIh3cRwaDTV/gTWRiMq/k2P+L3NM1YVOUld
ToCSPl0gDnb7AGbxGvTD1DJ0iU/S4V4eaQIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FE9Mhyb/wfEa2cZz3qOF26VUTzgUMB8GA1UdIwQYMBaAFKSDtBhq2ECnrIkaAQUB
5NzaizipMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0EyeDZpY2FLcFZXUDV1
VUJ6SlF6UnZFcGp2UzdQVlc3WjJFcjRGMnF0MUN0LzEvQTQ4M0I0MTg2QUQ4NDBB
N0FDODkxQTAxMDUwMUU0RENEQThCMzhBOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9BNDgzQjQxODZBRDg0MEE3QUM4OTFBMDEwNTAxRTREQ0RBOEIz
OEE5LmNlcjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUFBzALhoGEcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BMng2aWNhS3BWV1A1dVVCekpR
elJ2RXBqdlM3UFZXN1oyRXI0RjJxdDFDdC8xLzMyMzAzMDMxM2EzMTMyNjYzODNh
M2EyZjM0MzgyZDMxMzIzODIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgARL4AAAwDQYJ
KoZIhvcNAQELBQADggEBAKfb/M8RcfrDzp2KM5cwzR6JguzvTkpVSpIULbLzEmSg
bQMb8uopPloaXeiI+jPlMnmz0pe/sZaIjklG/j0YrlOFGr0mlsNKjV0ld2SkDdDb
SJIcBCg78Ex1cSzLoKl+YJ0nlhBI8Px4cOkyTkER7mL4hZ3nOsN1nXZElTijKpr0
qopsg9OdFePAn8XdJ445bEP/oY6q75hPNLE7fOx06VsVoyLlAowCOg65QfsrmTnK
psOlaUKJ5J36BYc6FBMUPYbMLCp0NqAnR/5ycHpT+rCmfNMRI/arzKlyqhSV9aaG
uGWL50OJJKLEWqR6v5+JFzAFv9KfPG5CXTRSUEqNxDA=
-----END CERTIFICATE-----