Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a633a3a2f34372d3438203d3e203238333435.roa
File:                     323030313a313266383a633a3a2f34372d3438203d3e203238333435.roa (raw, json)
Hash identifier:          4kvkXHqTZOkxpwFPOIReRKTQR/xcSwVU+pN0eXbQKUI=
Subject key identifier:   1F:E9:64:14:C4:EF:CD:D8:FB:B3:FA:3B:D4:6C:CF:2E:C3:62:D3:8A
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       2AF9E590158EE3F9C2BF3D322CB792DAF873098D
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a633a3a2f34372d3438203d3e203238333435.roa
Signing time:             Wed 03 Apr 2024 14:42:00 +0000
ROA not before:           Wed 03 Apr 2024 14:37:00 +0000
ROA not after:            Wed 02 Apr 2025 14:42:00 +0000
asID:                     28345
IP address blocks:        2001:12f8:c::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f9:e5:90:15:8e:e3:f9:c2:bf:3d:32:2c:b7:92:da:f8:73:09:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Apr  3 14:37:00 2024 GMT
            Not After : Apr  2 14:42:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7f:35:f7:f9:2d:1c:fa:d8:30:b4:c9:02:be:
                    8c:61:ee:82:72:33:cb:86:3e:24:d6:a5:03:84:62:
                    2c:26:f3:f8:5b:36:d2:65:78:a4:57:5f:14:5d:43:
                    95:a8:ef:71:e1:b0:4f:63:98:94:af:a4:7c:25:d7:
                    07:f9:85:d9:e6:a9:31:44:60:70:4c:ac:a7:6b:07:
                    47:18:3d:95:be:6f:d3:a5:b6:11:c9:ce:c8:94:1a:
                    88:5e:2a:f4:73:01:bf:03:0d:71:03:93:c1:af:50:
                    85:eb:31:7a:d4:25:a3:bd:b0:e2:e9:eb:f4:d7:f7:
                    70:e6:e6:5f:57:2e:37:c5:9f:ab:f2:3f:6a:92:ef:
                    df:e0:6b:f0:9e:d4:d7:bd:9b:ad:8b:07:01:37:16:
                    5f:8d:15:ae:27:1c:f8:dc:84:db:4c:1b:ce:44:e9:
                    b3:f9:44:54:48:bb:20:43:e1:87:18:4b:51:fb:fa:
                    80:b4:f9:e4:cc:6c:ed:6e:da:39:9c:19:8f:93:54:
                    36:3f:c4:60:a1:c1:30:1c:a5:90:d8:99:9d:c9:62:
                    9b:15:06:8b:a9:e8:be:32:0b:09:58:2e:73:64:ad:
                    6c:d1:09:23:35:fb:01:11:bb:8b:41:1e:d3:3a:c5:
                    1c:05:16:3c:ef:7a:50:1b:80:99:1a:04:a6:b6:73:
                    fd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E9:64:14:C4:EF:CD:D8:FB:B3:FA:3B:D4:6C:CF:2E:C3:62:D3:8A
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266383a633a3a2f34372d3438203d3e203238333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:c::/47

    Signature Algorithm: sha256WithRSAEncryption
         0b:f6:06:01:e0:b3:ce:b9:93:7c:4b:f3:35:29:d5:c4:82:2e:
         84:c2:ff:8a:ac:65:9b:bb:5e:79:e6:a3:2b:c7:7b:63:5f:7d:
         aa:f4:17:96:2f:d3:b3:90:0e:6b:8b:49:a4:90:b4:ba:48:d5:
         83:94:ce:d6:e0:9d:3c:f7:95:2c:c1:ba:42:b8:09:82:f0:d9:
         79:ef:84:c5:0e:20:ee:f7:1c:ad:0f:a5:a2:6d:a7:11:56:3b:
         dd:91:b5:2a:55:74:16:02:d4:54:06:01:db:33:28:c6:14:a1:
         91:f1:24:79:d9:16:b7:0b:ce:a0:4b:c4:59:f4:f9:24:8e:38:
         10:eb:a4:18:31:1b:47:d9:12:bd:04:0c:ac:7f:0b:18:06:14:
         96:26:7a:05:0c:bd:72:9c:1a:65:e1:87:99:80:48:97:eb:83:
         de:dc:ce:0c:41:33:2d:38:84:9b:be:c5:c7:aa:ba:52:89:9b:
         3e:d8:b8:ef:98:ae:23:d0:76:b6:18:25:a8:60:40:26:cf:63:
         ca:6c:7f:2a:8d:c7:00:65:0e:37:c7:0b:ef:d9:74:f5:ea:00:
         19:02:26:fa:8d:9f:2c:63:23:7d:83:9c:74:4a:00:85:5a:ea:
         da:88:f2:79:2b:48:8d:0b:32:f0:cf:7d:c1:29:75:02:e9:0f:
         f8:bb:4a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----