Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a633a3a2f34372d3438203d3e203131343331.roa
File:                     323030313a313266383a633a3a2f34372d3438203d3e203131343331.roa (raw, json)
Hash identifier:          3fQRCGEROeaShwWn+2/Bg9ihISRUL1V0e/SSOuvH/mA=
Subject key identifier:   1B:FF:D4:15:C7:17:11:26:0A:C0:30:DD:26:1C:8E:3F:86:6D:7C:0B
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       2AB946F11698A823EFAC278D8E14517384F9D54D
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a633a3a2f34372d3438203d3e203131343331.roa
Signing time:             Thu 31 Aug 2023 16:06:00 +0000
ROA not before:           Thu 31 Aug 2023 16:01:00 +0000
ROA not after:            Thu 29 Aug 2024 16:06:00 +0000
asID:                     11431
IP address blocks:        2001:12f8:c::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b9:46:f1:16:98:a8:23:ef:ac:27:8d:8e:14:51:73:84:f9:d5:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Aug 31 16:01:00 2023 GMT
            Not After : Aug 29 16:06:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:94:0d:cc:b8:7c:df:d6:2a:8c:67:3c:0f:68:
                    b0:4b:db:3b:a8:22:38:74:a6:26:b1:82:b9:8c:85:
                    ad:cc:a3:34:e5:e2:68:dd:6c:44:2c:0f:df:57:6e:
                    6d:18:5c:4a:2f:88:92:e5:ea:05:2b:67:a0:ab:15:
                    68:c6:57:b8:63:03:80:c3:d2:83:41:90:70:e6:27:
                    19:32:7e:ba:f8:7d:e7:96:42:42:11:01:17:32:55:
                    1d:2f:1b:f3:93:d3:c7:7c:f5:1e:d0:80:07:41:39:
                    95:39:00:97:0e:12:ed:dc:ee:96:7e:7b:96:35:73:
                    32:ad:dd:6e:63:bc:e1:11:f4:f0:8e:10:34:19:61:
                    55:e0:3c:6b:c3:a2:0f:02:c7:53:d0:0d:08:9a:df:
                    36:20:75:95:7d:a0:7d:5f:92:b3:99:49:da:ec:59:
                    4b:99:bb:1c:6f:3d:58:37:e0:50:39:c3:03:eb:1d:
                    aa:20:aa:15:f2:2a:05:6f:26:31:e3:5f:7c:a6:8f:
                    43:be:52:7e:3d:bf:ab:68:72:48:e2:2e:37:07:e9:
                    c1:3d:16:b7:e0:a3:77:b9:17:69:2a:39:d6:03:a3:
                    eb:ed:6d:ca:69:60:c0:22:a0:c0:96:b5:8b:ae:f6:
                    b9:bc:e9:82:a2:44:c4:a2:c5:f8:be:47:62:76:30:
                    56:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:FF:D4:15:C7:17:11:26:0A:C0:30:DD:26:1C:8E:3F:86:6D:7C:0B
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a633a3a2f34372d3438203d3e203131343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:c::/47

    Signature Algorithm: sha256WithRSAEncryption
         72:c0:82:c6:c6:d2:55:71:18:01:8a:5b:46:31:a6:c2:ed:c7:
         6d:7c:57:53:c4:7c:58:c8:54:cb:28:51:bf:2f:0f:f7:1e:d7:
         b8:28:88:0b:ea:49:0b:c1:fc:cc:38:16:d0:34:0d:00:45:74:
         22:c9:99:6b:88:4b:f2:a7:97:84:0d:8c:83:47:f3:d1:fe:5a:
         47:68:b2:af:dd:c4:b1:50:d3:8a:37:e3:59:a4:35:11:43:d3:
         f1:15:3c:ea:83:47:9f:f9:a8:5a:b8:c1:eb:fb:eb:4f:28:74:
         4f:68:3f:da:f9:68:6e:67:67:4c:da:c9:89:40:9b:3a:92:53:
         4e:1c:46:fe:b3:51:a6:2c:c7:09:ad:09:bd:b5:cb:04:08:82:
         be:97:84:f4:de:4f:8b:da:c4:29:89:cb:9a:35:4b:da:5b:24:
         89:3c:7f:c4:01:9c:f8:de:71:2c:0f:c7:0f:56:c1:9b:58:d7:
         0d:6c:6d:03:f9:bc:b8:89:3c:5a:e0:b3:8c:26:28:4a:31:17:
         10:5d:dd:2c:89:7c:d9:ba:f1:96:14:1f:c4:ea:56:f2:f7:f8:
         f0:5d:84:cb:86:31:72:83:6a:10:25:c3:c9:56:79:90:17:3d:
         99:74:5c:c3:6b:a9:bf:ae:cb:a4:bc:c5:a3:93:5e:d2:26:60:
         a0:46:d8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----