Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a613a3a2f34372d3438203d3e203131323834.roa
File:                     323030313a313266383a613a3a2f34372d3438203d3e203131323834.roa (raw, json)
Hash identifier:          Z+/x5G3fy2tk5MeE2ADIg6nrZPRQdwaxieD+HRiuWJ4=
Subject key identifier:   23:F3:E9:7A:69:CF:41:4E:9F:5F:82:01:75:A9:48:A6:A3:4B:8C:A6
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       0AE899D1F910FDF622FD59871DDB7FD7B91096CA
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a613a3a2f34372d3438203d3e203131323834.roa
Signing time:             Thu 31 Aug 2023 13:02:00 +0000
ROA not before:           Thu 31 Aug 2023 12:57:00 +0000
ROA not after:            Thu 29 Aug 2024 13:02:00 +0000
asID:                     11284
IP address blocks:        2001:12f8:a::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:e8:99:d1:f9:10:fd:f6:22:fd:59:87:1d:db:7f:d7:b9:10:96:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Aug 31 12:57:00 2023 GMT
            Not After : Aug 29 13:02:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:22:05:e9:41:8f:88:55:81:94:6e:55:91:3f:
                    b0:3f:65:60:b9:b3:60:e9:69:28:65:77:a3:54:ce:
                    82:b4:f5:ec:03:7d:c2:6b:8c:70:c1:c9:8a:71:e7:
                    04:ed:31:28:3d:e8:ee:b1:64:03:9b:99:99:f9:cf:
                    98:8e:5d:ae:43:79:5e:c0:a0:f9:fc:1e:be:50:cf:
                    ad:cb:d4:e8:f4:3e:7c:5a:7f:40:5c:83:60:e5:b3:
                    96:ea:ef:e5:b8:1d:a4:24:7a:f6:fc:eb:57:e6:0d:
                    59:60:32:09:90:99:de:d7:d4:78:02:0b:f5:64:1f:
                    52:a5:2e:91:1f:a9:0a:48:db:3c:5d:19:3f:c9:78:
                    13:a9:b5:57:10:03:a5:2f:fc:d1:4e:e3:ce:68:6b:
                    8a:f7:b7:b4:89:0b:c6:6f:2f:bc:46:92:d0:55:4e:
                    6a:3e:ee:59:a5:33:2c:39:d6:e1:78:99:a4:b4:a8:
                    a4:cd:be:e4:d0:7c:aa:90:bc:0c:b3:6f:3e:3f:ee:
                    06:31:e0:09:ef:da:87:69:f9:a4:55:13:38:9d:55:
                    86:73:72:26:1b:e7:e7:34:71:19:63:92:2e:86:e2:
                    c8:f8:5f:96:c1:4e:df:15:70:d1:4e:e4:6b:14:80:
                    a9:bf:93:a5:2d:c9:2c:c3:c1:1e:35:17:59:0a:6b:
                    1f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F3:E9:7A:69:CF:41:4E:9F:5F:82:01:75:A9:48:A6:A3:4B:8C:A6
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a613a3a2f34372d3438203d3e203131323834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:a::/47

    Signature Algorithm: sha256WithRSAEncryption
         40:e3:c5:ff:30:fb:a8:a9:30:d5:76:9c:40:d6:5f:e2:8b:a7:
         05:80:02:45:3a:0c:6d:61:dc:69:00:29:ab:72:86:d2:13:43:
         68:27:51:09:60:77:37:5c:4e:95:57:d8:54:f3:d3:b0:9e:c8:
         31:11:9b:11:80:b6:1d:86:6f:32:e1:a8:67:33:99:ad:aa:a4:
         58:ba:63:75:ea:21:97:a8:0e:75:d6:6d:d0:96:3c:44:bf:7e:
         2c:32:82:a7:d7:61:ea:d1:8a:f5:e4:9d:68:64:bb:0c:98:d0:
         99:85:a8:18:47:3e:db:a7:a0:b3:1b:ec:0c:1d:6e:53:82:bd:
         7d:0e:f0:42:c9:f0:1c:97:4e:6e:79:49:93:a2:cf:10:d2:e3:
         be:8f:3e:4a:6f:ae:af:21:ba:d3:00:93:a3:4c:7c:2d:98:f5:
         c9:76:53:85:a0:e0:54:57:56:30:d9:88:3d:79:02:99:9e:d8:
         73:43:e0:ac:4d:4c:02:ac:f6:72:f1:5d:eb:61:8c:23:3c:1c:
         6c:4d:2f:e0:4e:a1:cc:ec:b1:3a:5e:09:99:50:91:08:00:7f:
         9e:00:ba:c9:56:b0:27:ea:e4:a0:9b:3f:e7:b0:ac:11:c0:6e:
         23:95:75:39:5d:f4:c3:9d:80:a6:49:25:76:22:a2:43:96:93:
         f1:a4:21:54
-----BEGIN CERTIFICATE-----
MIIHRjCCBi6gAwIBAgIUCuiZ0fkQ/fYi/VmHHdt/17kQlsowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQ4M0I0MTg2QUQ4NDBBN0FDODkxQTAxMDUwMUU0RENE
QThCMzhBOTAeFw0yMzA4MzExMjU3MDBaFw0yNDA4MjkxMzAyMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkUyMjA1RTk0MThGODg1NTgx
OTQ2RTU1OTEzRkIwM0Y2NTYwQjlCMzYwRTk2OTI4NjU3N0EzNTRDRTgyQjRGNUVD
MDM3REMyNkI4QzcwQzFDOThBNzFFNzA0RUQzMTI4M0RFOEVFQjE2NDAzOUI5OTk5
RjlDRjk4OEU1REFFNDM3OTVFQzBBMEY5RkMxRUJFNTBDRkFEQ0JENEU4RjQzRTdD
NUE3RjQwNUM4MzYwRTVCMzk2RUFFRkU1QjgxREE0MjQ3QUY2RkNFQjU3RTYwRDU5
NjAzMjA5OTA5OURFRDdENDc4MDIwQkY1NjQxRjUyQTUyRTkxMUZBOTBBNDhEQjND
NUQxOTNGQzk3ODEzQTlCNTU3MTAwM0E1MkZGQ0QxNEVFM0NFNjg2QjhBRjdCN0I0
ODkwQkM2NkYyRkJDNDY5MkQwNTU0RTZBM0VFRTU5QTUzMzJDMzlENkUxNzg5OUE0
QjRBOEE0Q0RCRUU0RDA3Q0FBOTBCQzBDQjM2RjNFM0ZFRTA2MzFFMDA5RUZEQTg3
NjlGOUE0NTUxMzM4OUQ1NTg2NzM3MjI2MUJFN0U3MzQ3MTE5NjM5MjJFODZFMkM4
Rjg1Rjk2QzE0RURGMTU3MEQxNEVFNDZCMTQ4MEE5QkY5M0E1MkRDOTJDQzNDMTFF
MzUxNzU5MEE2QjFGMEYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAviIF6UGPiFWBlG5VkT+wP2VgubNg6WkoZXejVM6CtPXsA33Ca4xw
wcmKcecE7TEoPejusWQDm5mZ+c+Yjl2uQ3lewKD5/B6+UM+ty9To9D58Wn9AXINg
5bOW6u/luB2kJHr2/OtX5g1ZYDIJkJne19R4Agv1ZB9SpS6RH6kKSNs8XRk/yXgT
qbVXEAOlL/zRTuPOaGuK97e0iQvGby+8RpLQVU5qPu5ZpTMsOdbheJmktKikzb7k
0HyqkLwMs28+P+4GMeAJ79qHafmkVRM4nVWGc3ImG+fnNHEZY5IuhuLI+F+WwU7f
FXDRTuRrFICpv5OlLcksw8EeNRdZCmsfDwIDAQABo4ICVDCCAlAwHQYDVR0OBBYE
FCPz6Xppz0FOn1+CAXWpSKajS4ymMB8GA1UdIwQYMBaAFKSDtBhq2ECnrIkaAQUB
5NzaizipMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0EyeDZpY2FLcFZXUDV1
VUJ6SlF6UnZFcGp2UzdQVlc3WjJFcjRGMnF0MUN0LzEvQTQ4M0I0MTg2QUQ4NDBB
N0FDODkxQTAxMDUwMUU0RENEQThCMzhBOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9BNDgzQjQxODZBRDg0MEE3QUM4OTFBMDEwNTAxRTREQ0RBOEIz
OEE5LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BMng2aWNhS3BWV1A1dVVCekpR
elJ2RXBqdlM3UFZXN1oyRXI0RjJxdDFDdC8xLzMyMzAzMDMxM2EzMTMyNjYzODNh
NjEzYTNhMmYzNDM3MmQzNDM4MjAzZDNlMjAzMTMxMzIzODM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcB
IAES+AAKMA0GCSqGSIb3DQEBCwUAA4IBAQBA48X/MPuoqTDVdpxA1l/ii6cFgAJF
OgxtYdxpACmrcobSE0NoJ1EJYHc3XE6VV9hU89OwnsgxEZsRgLYdhm8y4ahnM5mt
qqRYumN16iGXqA511m3QljxEv34sMoKn12Hq0Yr15J1oZLsMmNCZhagYRz7bp6Cz
G+wMHW5Tgr19DvBCyfAcl05ueUmTos8Q0uO+jz5Kb66vIbrTAJOjTHwtmPXJdlOF
oOBUV1Yw2Yg9eQKZnthzQ+CsTUwCrPZy8V3rYYwjPBxsTS/gTqHM7LE6XgmZUJEI
AH+eALrJVrAn6uSgmz/nsKwRwG4jlXU5XfTDnYCmSSV2IqJDlpPxpCFU
-----END CERTIFICATE-----