Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a613a3a2f34372d3438203d3e203238333435.roa
File:                     323030313a313266383a613a3a2f34372d3438203d3e203238333435.roa (raw, json)
Hash identifier:          VkM4JArJwA6xD7eV3HcoyrFegjokgaT9HQ8rzFbeHkE=
Subject key identifier:   02:E0:7C:07:9C:62:3B:14:7A:F5:6F:31:AB:29:68:66:47:56:35:E4
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       0AE9801EDEC3DEC64F1FFAA309842C84AD3D7594
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a613a3a2f34372d3438203d3e203238333435.roa
Signing time:             Wed 03 Apr 2024 14:42:00 +0000
ROA not before:           Wed 03 Apr 2024 14:37:00 +0000
ROA not after:            Wed 02 Apr 2025 14:42:00 +0000
asID:                     28345
IP address blocks:        2001:12f8:a::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:e9:80:1e:de:c3:de:c6:4f:1f:fa:a3:09:84:2c:84:ad:3d:75:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Apr  3 14:37:00 2024 GMT
            Not After : Apr  2 14:42:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:03:2a:82:ef:b7:4c:72:1b:44:0c:62:b5:87:
                    fc:98:19:f5:4a:13:69:df:77:48:c2:96:8e:c0:f3:
                    9e:92:e1:ee:97:41:f7:51:fb:34:57:8a:f7:92:3f:
                    65:06:fb:17:26:98:3f:b2:68:5c:34:43:d8:c4:0c:
                    27:c7:bd:a1:63:f6:62:5a:3f:39:ec:e9:2e:14:40:
                    2e:8e:ea:fe:94:6f:bc:c8:a5:04:4d:98:d9:4d:63:
                    83:a9:76:d1:a9:f4:28:9f:c7:82:e1:57:d8:cc:64:
                    05:b2:2d:7c:98:1d:f1:3a:fa:21:ab:6e:a3:9b:75:
                    53:51:09:93:d3:cc:22:04:37:be:02:26:7f:8f:cc:
                    1b:d9:cb:55:ba:8a:71:bf:c9:9f:92:b7:ce:fc:19:
                    a1:7f:5e:b1:6f:d9:b8:0a:90:7a:3c:85:56:07:23:
                    b4:64:cb:04:29:3e:db:ab:ee:31:be:cb:36:84:5b:
                    c5:79:61:cb:29:4f:39:21:0f:bf:d0:20:55:97:ce:
                    89:18:cb:e8:b2:6b:2a:46:71:24:94:3d:06:c2:4c:
                    9c:13:b4:02:a4:48:2c:23:b7:b7:19:ae:17:62:fc:
                    23:35:32:3f:0f:e2:35:08:f6:7d:0c:b3:af:78:9b:
                    fa:4d:f1:9a:ce:6f:2b:47:51:9a:b9:c1:e1:4a:b6:
                    62:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E0:7C:07:9C:62:3B:14:7A:F5:6F:31:AB:29:68:66:47:56:35:E4
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a613a3a2f34372d3438203d3e203238333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:a::/47

    Signature Algorithm: sha256WithRSAEncryption
         9b:fb:05:8e:8c:5b:ac:b9:d1:2f:d4:c7:7d:55:ef:ab:dd:11:
         6e:17:e6:bd:32:6a:67:2d:37:d3:b9:13:5e:74:3c:1f:7b:f3:
         ca:0c:c1:dd:ee:f8:46:0d:cd:6d:8a:a3:d3:ad:85:c7:91:46:
         da:fc:0f:21:b4:2b:43:86:e9:95:e1:67:6d:ca:05:88:3a:84:
         3e:46:89:a3:ba:1c:f3:7b:ac:8c:18:32:93:a4:57:b1:fc:af:
         0f:0e:c3:b1:4a:91:7b:90:61:de:cc:42:16:0a:18:8b:86:89:
         4f:e1:f0:59:50:aa:24:6b:2c:be:68:ec:64:dc:bf:ef:67:df:
         33:38:5b:e9:34:e1:b0:df:1c:54:9d:9f:da:cb:38:eb:50:08:
         16:ca:6e:d6:ac:ac:47:24:24:ba:67:ee:43:9e:30:87:0d:09:
         b7:48:6c:29:49:eb:ff:c4:ab:e3:42:d5:19:7d:53:08:49:36:
         e9:5c:f8:af:e4:f7:ec:79:e7:5d:5e:47:5e:0a:fd:13:55:f7:
         62:2e:f5:6f:b9:65:5c:c8:30:0a:c7:bb:ee:13:c8:5f:c8:62:
         e4:37:8e:eb:27:e5:5e:ab:f4:64:fd:d0:35:67:8e:b2:25:a9:
         bf:a0:24:12:dc:96:5b:c7:b8:2c:7e:72:99:b4:d9:c1:0c:08:
         ac:82:83:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----