Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a613a3a2f34372d3438203d3e203131343331.roa
File:                     323030313a313266383a613a3a2f34372d3438203d3e203131343331.roa (raw, json)
Hash identifier:          sjGg5sUH3mYwtozpI2IM5DzeADXEgUqxJTrayBuAHxQ=
Subject key identifier:   C8:72:96:BE:FD:49:5E:0A:9B:04:54:0A:D1:8C:EF:96:BE:0E:00:BC
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       214048FAEC1530A7833A27E05A1D9821392DE853
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a613a3a2f34372d3438203d3e203131343331.roa
Signing time:             Thu 31 Aug 2023 16:06:00 +0000
ROA not before:           Thu 31 Aug 2023 16:01:00 +0000
ROA not after:            Thu 29 Aug 2024 16:06:00 +0000
asID:                     11431
IP address blocks:        2001:12f8:a::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:40:48:fa:ec:15:30:a7:83:3a:27:e0:5a:1d:98:21:39:2d:e8:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Aug 31 16:01:00 2023 GMT
            Not After : Aug 29 16:06:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ff:04:11:a8:64:32:11:64:4b:bb:be:13:09:
                    ea:8b:15:4e:e5:9e:b8:b4:8e:f2:7f:f2:2b:b2:75:
                    47:ef:e7:a9:43:b9:ce:2f:b2:09:a4:1f:98:7e:95:
                    34:7e:11:dd:ff:3d:4c:98:fd:dd:ea:3d:7a:80:a2:
                    92:97:af:fa:80:6b:a4:3d:d7:2c:fa:c6:8a:06:03:
                    ac:bb:4e:a5:3e:66:76:ff:d1:8d:02:bf:d4:35:1a:
                    3b:bc:93:ab:d6:94:9f:11:80:5e:3f:e3:08:c0:c1:
                    03:72:b2:90:dc:e7:1a:cf:ed:9a:78:a8:23:9d:d7:
                    09:62:71:bc:71:04:31:56:cc:f1:5e:25:15:7b:53:
                    10:f0:1e:67:7d:33:e0:71:0e:9c:b0:0c:c0:63:fd:
                    e1:74:62:7a:4e:dc:4c:10:17:b1:87:c8:b1:1d:d6:
                    38:0a:6c:60:02:47:88:a7:ac:39:62:10:91:e7:e0:
                    bd:b4:59:25:e9:8d:29:d5:99:ee:40:54:6c:69:3b:
                    ec:a9:25:08:d8:de:b7:2f:98:3f:f2:44:24:ed:e4:
                    6c:51:45:cd:ec:d9:7d:bd:35:af:1f:3c:f6:e4:c5:
                    d4:a7:0c:7e:27:14:7f:17:5b:9e:6d:89:7d:48:74:
                    18:1e:17:fc:37:df:25:c7:b5:b6:46:34:45:89:61:
                    28:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:72:96:BE:FD:49:5E:0A:9B:04:54:0A:D1:8C:EF:96:BE:0E:00:BC
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a613a3a2f34372d3438203d3e203131343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:a::/47

    Signature Algorithm: sha256WithRSAEncryption
         41:0d:43:27:f5:1b:ee:fb:70:4c:75:fc:8d:2d:4f:41:52:80:
         c9:6e:37:f6:cc:9f:0f:bb:d2:0a:11:66:3c:d2:a7:e5:f9:74:
         4d:a2:1f:fb:07:68:fb:ff:b1:f3:a8:38:0d:43:2b:3d:25:c9:
         5c:81:13:a0:2d:c4:e4:5a:c6:f6:3f:4b:f3:99:36:72:11:34:
         3c:74:ec:40:8d:06:c5:aa:20:21:b2:46:90:f8:0d:4e:7b:23:
         da:26:ea:46:0c:36:1e:8b:e8:bb:bf:40:5a:ab:1a:17:d5:ba:
         92:c8:36:74:88:03:46:86:02:b9:d3:4e:74:b1:58:c9:bc:6c:
         1e:c5:cf:d0:a5:a8:a2:d6:9f:da:e2:b5:5b:67:a3:ee:16:2f:
         00:b1:7d:30:52:26:b9:c9:9f:26:b9:17:79:78:a2:c0:7f:88:
         f5:61:2d:d4:c5:95:27:c9:1b:b2:80:53:56:45:d0:d6:d6:90:
         ee:47:92:34:05:c5:8a:58:a9:73:3b:ae:cc:1a:86:9d:cc:37:
         80:03:e4:37:2f:61:25:55:1b:7c:00:58:70:aa:bf:14:0c:0e:
         7d:61:e7:62:e9:24:65:c2:49:36:57:d5:65:a9:d5:01:8f:87:
         08:7c:33:fe:5e:f9:1a:f8:b7:64:b8:0e:96:38:d5:d5:60:dd:
         dc:98:d2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----