Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266653a3a2f33322d3438203d3e203131373532.roa
File:                     323030313a313266653a3a2f33322d3438203d3e203131373532.roa (raw, json)
Hash identifier:          b2t/ipMoUdHwPAZFxDWsYVs5LFkg7AL/2ZUQovgp28U=
Subject key identifier:   57:D1:6F:38:2B:8F:A9:79:7E:9C:C4:A9:E1:A8:C7:4A:DA:06:EB:CD
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       136C4CB9294AE0F2CDCC38536C6C8968FDDD9DC5
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266653a3a2f33322d3438203d3e203131373532.roa
Signing time:             Sun 20 Aug 2023 18:04:00 +0000
ROA not before:           Sun 20 Aug 2023 17:59:00 +0000
ROA not after:            Sun 18 Aug 2024 18:04:00 +0000
asID:                     11752
IP address blocks:        2001:12fe::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:6c:4c:b9:29:4a:e0:f2:cd:cc:38:53:6c:6c:89:68:fd:dd:9d:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Aug 20 17:59:00 2023 GMT
            Not After : Aug 18 18:04:00 2024 GMT
        Subject: CN=3082010A0282010100CA93981D1668F98B97D06BE0F2C980A86131EAA0F2B5B1B1DA154B7DB4AD7D70487893D2D985F0921C877408BD3D247806E35D5D1A47D06DE893383162C14AFFA1E9D27BF2A77EE760997CB3F47AD6981290C515FC45D83208CB3ECBB3D5043C865CD46EC449DF69332A3320271ED2C039843AE809957DADAF88BB74752357693914D9047BE8DB809006B81A5C92DDA271619A938403F40372E740AC4C362473F50F36532EEB08E157C6956C7E8308AC39E2DFB824BF82413696D6964586F89A8E5362855763ECE696B465B4BF7669F5AD05683D8ED41F8C3A982D8D76E851C6702AA8734C2CADA991EE8EE00FFF296FD40444C3E9BAB949C76972D9CF8376430203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:93:98:1d:16:68:f9:8b:97:d0:6b:e0:f2:c9:
                    80:a8:61:31:ea:a0:f2:b5:b1:b1:da:15:4b:7d:b4:
                    ad:7d:70:48:78:93:d2:d9:85:f0:92:1c:87:74:08:
                    bd:3d:24:78:06:e3:5d:5d:1a:47:d0:6d:e8:93:38:
                    31:62:c1:4a:ff:a1:e9:d2:7b:f2:a7:7e:e7:60:99:
                    7c:b3:f4:7a:d6:98:12:90:c5:15:fc:45:d8:32:08:
                    cb:3e:cb:b3:d5:04:3c:86:5c:d4:6e:c4:49:df:69:
                    33:2a:33:20:27:1e:d2:c0:39:84:3a:e8:09:95:7d:
                    ad:af:88:bb:74:75:23:57:69:39:14:d9:04:7b:e8:
                    db:80:90:06:b8:1a:5c:92:dd:a2:71:61:9a:93:84:
                    03:f4:03:72:e7:40:ac:4c:36:24:73:f5:0f:36:53:
                    2e:eb:08:e1:57:c6:95:6c:7e:83:08:ac:39:e2:df:
                    b8:24:bf:82:41:36:96:d6:96:45:86:f8:9a:8e:53:
                    62:85:57:63:ec:e6:96:b4:65:b4:bf:76:69:f5:ad:
                    05:68:3d:8e:d4:1f:8c:3a:98:2d:8d:76:e8:51:c6:
                    70:2a:a8:73:4c:2c:ad:a9:91:ee:8e:e0:0f:ff:29:
                    6f:d4:04:44:c3:e9:ba:b9:49:c7:69:72:d9:cf:83:
                    76:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D1:6F:38:2B:8F:A9:79:7E:9C:C4:A9:E1:A8:C7:4A:DA:06:EB:CD
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266653a3a2f33322d3438203d3e203131373532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12fe::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:55:87:a2:ed:b6:3b:64:67:2a:c9:93:80:1b:f9:0e:6b:35:
         c0:77:29:8b:a2:2c:2f:b1:d9:fe:f4:f6:00:0e:ef:40:83:89:
         8c:ea:90:65:8f:45:8f:df:86:ce:22:eb:ed:84:33:8c:ba:26:
         41:18:de:cb:38:04:1b:01:65:b2:e9:89:3c:36:84:09:5e:95:
         1f:b9:15:de:97:3d:f7:ed:38:e0:66:0d:85:df:bc:08:23:f2:
         ea:83:a8:85:f5:18:8f:a6:fb:e0:9a:99:01:b0:ed:8b:43:57:
         73:a8:f0:a8:56:cc:2c:12:0f:ff:97:3b:a3:70:68:2e:61:98:
         ae:ed:71:bf:5f:d7:e8:10:05:43:e7:70:a9:4a:26:03:6c:5b:
         cb:41:ed:11:c1:8a:6e:df:f3:9d:fa:3d:94:95:90:f9:71:32:
         50:64:d1:f7:d4:2c:62:9a:6a:1d:38:bb:86:a8:bf:83:87:1c:
         54:20:54:96:3e:06:18:15:49:40:d4:2a:88:97:60:ba:18:5e:
         77:d6:e9:c8:88:42:45:78:6a:a4:ca:69:2c:11:d3:b9:eb:30:
         56:ae:4d:25:3d:91:7a:cd:4e:84:c3:98:80:49:39:de:08:25:
         3a:bd:ea:82:ad:9d:61:70:72:ce:51:07:d5:c1:1b:48:5a:28:
         4b:06:14:58
-----BEGIN CERTIFICATE-----
MIIHQDCCBiigAwIBAgIUE2xMuSlK4PLNzDhTbGyJaP3dncUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQ4M0I0MTg2QUQ4NDBBN0FDODkxQTAxMDUwMUU0RENE
QThCMzhBOTAeFw0yMzA4MjAxNzU5MDBaFw0yNDA4MTgxODA0MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0E5Mzk4MUQxNjY4Rjk4Qjk3
RDA2QkUwRjJDOTgwQTg2MTMxRUFBMEYyQjVCMUIxREExNTRCN0RCNEFEN0Q3MDQ4
Nzg5M0QyRDk4NUYwOTIxQzg3NzQwOEJEM0QyNDc4MDZFMzVENUQxQTQ3RDA2REU4
OTMzODMxNjJDMTRBRkZBMUU5RDI3QkYyQTc3RUU3NjA5OTdDQjNGNDdBRDY5ODEy
OTBDNTE1RkM0NUQ4MzIwOENCM0VDQkIzRDUwNDNDODY1Q0Q0NkVDNDQ5REY2OTMz
MkEzMzIwMjcxRUQyQzAzOTg0M0FFODA5OTU3REFEQUY4OEJCNzQ3NTIzNTc2OTM5
MTREOTA0N0JFOERCODA5MDA2QjgxQTVDOTJEREEyNzE2MTlBOTM4NDAzRjQwMzcy
RTc0MEFDNEMzNjI0NzNGNTBGMzY1MzJFRUIwOEUxNTdDNjk1NkM3RTgzMDhBQzM5
RTJERkI4MjRCRjgyNDEzNjk2RDY5NjQ1ODZGODlBOEU1MzYyODU1NzYzRUNFNjk2
QjQ2NUI0QkY3NjY5RjVBRDA1NjgzRDhFRDQxRjhDM0E5ODJEOEQ3NkU4NTFDNjcw
MkFBODczNEMyQ0FEQTk5MUVFOEVFMDBGRkYyOTZGRDQwNDQ0QzNFOUJBQjk0OUM3
Njk3MkQ5Q0Y4Mzc2NDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAypOYHRZo+YuX0Gvg8smAqGEx6qDytbGx2hVLfbStfXBIeJPS2YXw
khyHdAi9PSR4BuNdXRpH0G3okzgxYsFK/6Hp0nvyp37nYJl8s/R61pgSkMUV/EXY
MgjLPsuz1QQ8hlzUbsRJ32kzKjMgJx7SwDmEOugJlX2tr4i7dHUjV2k5FNkEe+jb
gJAGuBpckt2icWGak4QD9ANy50CsTDYkc/UPNlMu6wjhV8aVbH6DCKw54t+4JL+C
QTaW1pZFhviajlNihVdj7OaWtGW0v3Zp9a0FaD2O1B+MOpgtjXboUcZwKqhzTCyt
qZHujuAP/ylv1AREw+m6uUnHaXLZz4N2QwIDAQABo4ICTjCCAkowHQYDVR0OBBYE
FFfRbzgrj6l5fpzEqeGox0raBuvNMB8GA1UdIwQYMBaAFKSDtBhq2ECnrIkaAQUB
5NzaizipMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0EyeDZpY2FLcFZXUDV1
VUJ6SlF6UnZFcGp2UzdQVlc3WjJFcjRGMnF0MUN0LzEvQTQ4M0I0MTg2QUQ4NDBB
N0FDODkxQTAxMDUwMUU0RENEQThCMzhBOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9BNDgzQjQxODZBRDg0MEE3QUM4OTFBMDEwNTAxRTREQ0RBOEIz
OEE5LmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BMng2aWNhS3BWV1A1dVVCekpR
elJ2RXBqdlM3UFZXN1oyRXI0RjJxdDFDdC8xLzMyMzAzMDMxM2EzMTMyNjY2NTNh
M2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMxMzEzNzM1MzIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgARL+
MA0GCSqGSIb3DQEBCwUAA4IBAQChVYei7bY7ZGcqyZOAG/kOazXAdymLoiwvsdn+
9PYADu9Ag4mM6pBlj0WP34bOIuvthDOMuiZBGN7LOAQbAWWy6Yk8NoQJXpUfuRXe
lz337TjgZg2F37wII/Lqg6iF9RiPpvvgmpkBsO2LQ1dzqPCoVswsEg//lzujcGgu
YZiu7XG/X9foEAVD53CpSiYDbFvLQe0RwYpu3/Od+j2UlZD5cTJQZNH31Cximmod
OLuGqL+DhxxUIFSWPgYYFUlA1CqIl2C6GF531unIiEJFeGqkymksEdO56zBWrk0l
PZF6zU6Ew5iASTneCCU6veqCrZ1hcHLOUQfVwRtIWihLBhRY
-----END CERTIFICATE-----