Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a633a3a2f34372d3438203d3e203134363530.roa
File:                     323030313a313266383a633a3a2f34372d3438203d3e203134363530.roa (raw, json)
Hash identifier:          YRkQnrhBfvJzmq/uKO20qiPuJmI7VSkfgurpNsA7JKg=
Subject key identifier:   9D:30:4C:E4:65:DD:AD:F1:AA:CD:38:DB:E0:6F:3A:BA:AE:65:F0:99
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       2B49A4BAD83FDE7DDDEF8A308E4C9E95BD8783B6
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a633a3a2f34372d3438203d3e203134363530.roa
Signing time:             Sat 26 Aug 2023 17:02:01 +0000
ROA not before:           Sat 26 Aug 2023 16:57:01 +0000
ROA not after:            Sat 24 Aug 2024 17:02:01 +0000
asID:                     14650
IP address blocks:        2001:12f8:c::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:49:a4:ba:d8:3f:de:7d:dd:ef:8a:30:8e:4c:9e:95:bd:87:83:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Aug 26 16:57:01 2023 GMT
            Not After : Aug 24 17:02:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8c:5f:22:4d:15:e0:c6:d9:d5:2c:d2:82:1c:
                    44:23:29:61:29:59:b0:e3:40:0b:09:02:fd:15:3e:
                    b1:bd:e5:33:66:55:14:d6:8d:5a:53:7e:d2:c2:e5:
                    a3:fe:6e:7a:27:39:33:37:d5:cc:4b:65:67:49:c1:
                    04:93:c5:7a:30:1d:f4:a9:3f:1e:ed:96:c5:08:6d:
                    ec:6a:47:b3:8d:ff:c5:1d:d6:72:44:b6:03:ba:8d:
                    f8:66:39:b8:9a:41:5d:29:86:de:92:45:48:11:c4:
                    6f:60:4d:fa:a8:f0:29:40:4f:93:ad:cc:5b:16:da:
                    95:18:b2:02:3d:f2:88:d9:17:dc:46:21:54:6c:17:
                    c9:03:5c:1a:3e:11:d5:e9:14:ea:63:6f:51:74:00:
                    31:4e:f4:e7:c1:ca:39:1a:78:2b:c7:c7:45:c0:28:
                    8e:6d:17:87:dc:ee:56:79:bb:4e:f2:7f:4f:fe:fd:
                    22:58:c9:4b:cb:cb:94:7d:48:0c:f9:0a:5f:2c:93:
                    65:12:d0:5b:53:12:05:b3:1a:f1:22:6d:2b:2f:0a:
                    12:55:5b:d3:3b:b8:01:d9:f2:c4:28:9d:d9:e1:6c:
                    14:91:8a:ca:6d:8b:2f:05:5a:e6:21:5f:c4:9e:ce:
                    d8:df:f7:69:3b:39:71:b4:f6:00:5f:3d:53:da:ad:
                    8a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:30:4C:E4:65:DD:AD:F1:AA:CD:38:DB:E0:6F:3A:BA:AE:65:F0:99
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a633a3a2f34372d3438203d3e203134363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:c::/47

    Signature Algorithm: sha256WithRSAEncryption
         1c:16:98:c4:60:5a:10:8f:10:cc:2f:cc:bd:17:73:23:ea:a2:
         71:0a:d0:c3:29:69:19:15:be:bb:58:71:1e:90:4c:94:a3:ae:
         5f:f4:49:43:00:8e:e9:35:7d:a9:70:a4:31:f6:39:d4:e6:de:
         e4:dd:ae:86:e0:7d:68:fd:bb:60:43:c4:88:ac:6e:da:97:d0:
         8b:44:b2:b0:a4:52:4c:23:92:81:39:ad:71:9c:e7:39:0a:aa:
         df:ba:a8:1f:52:1c:82:5f:c0:4d:91:78:64:fa:17:98:cb:74:
         ce:36:e2:fe:33:bb:d0:39:da:69:a7:47:97:e9:9a:0d:3f:ee:
         9e:31:ad:b5:68:a4:41:32:41:83:4d:24:51:12:a6:b1:c2:33:
         e2:d3:fe:75:1c:74:64:49:57:9b:52:8a:57:cd:f3:1e:73:57:
         59:54:24:9f:b4:73:5a:cc:98:f5:1b:59:a4:ee:45:e4:0e:fe:
         86:8f:6f:5a:97:80:93:e6:98:f4:55:51:da:1c:57:c3:6c:9c:
         2d:ab:ea:b8:c5:21:70:6e:a8:de:af:b4:60:42:29:b9:d8:83:
         34:bc:b2:1f:ee:d2:f6:d9:92:59:06:8d:5e:bd:01:84:1f:99:
         6c:63:6a:12:2c:f2:0a:c9:a2:40:af:86:0d:d0:dc:37:13:37:
         81:79:8d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----