Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266663a3a2f33322d3438203d3e203232353438.roa
File:                     323030313a313266663a3a2f33322d3438203d3e203232353438.roa (raw, json)
Hash identifier:          sge0xC4ug4xPMm7b9ufGedOUdMoRfrGqsawjFYqVaPU=
Subject key identifier:   87:B9:67:D6:84:15:28:86:DE:B6:46:39:AB:40:86:2B:FC:3D:3C:09
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       1BFD54C273D6DE5F13D9FBA0E568C028F4FB740B
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266663a3a2f33322d3438203d3e203232353438.roa
Signing time:             Sun 20 Aug 2023 18:02:00 +0000
ROA not before:           Sun 20 Aug 2023 17:57:00 +0000
ROA not after:            Sun 18 Aug 2024 18:02:00 +0000
asID:                     22548
IP address blocks:        2001:12ff::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:fd:54:c2:73:d6:de:5f:13:d9:fb:a0:e5:68:c0:28:f4:fb:74:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Aug 20 17:57:00 2023 GMT
            Not After : Aug 18 18:02:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:20:5c:f9:1a:22:0d:cf:69:ac:2b:06:ba:a7:
                    9b:3c:cd:7f:fd:4d:84:ec:11:af:84:81:35:73:29:
                    af:a4:9a:5d:7f:22:e2:e7:fe:18:40:4f:13:3e:26:
                    1d:90:61:58:77:0d:66:27:c9:32:44:2a:2f:a4:1d:
                    27:8e:0d:56:d3:4c:b8:b9:a8:30:45:63:b2:31:c1:
                    ac:73:c6:81:aa:58:e4:08:bc:92:d5:08:da:dd:99:
                    8c:aa:42:e1:d1:0a:9d:95:45:e3:e8:01:e3:88:01:
                    a3:a8:90:78:71:08:ba:18:b0:ed:c5:0e:3a:74:26:
                    1a:04:fa:48:99:66:28:6f:66:3f:16:5e:e7:9a:6d:
                    f7:01:fb:3a:40:fb:a6:40:0b:96:09:a2:94:6d:83:
                    16:a1:87:15:c2:d0:9d:ab:44:78:9a:06:e4:b3:ae:
                    c7:39:e9:80:0d:cc:88:06:d4:ab:8d:5e:ad:e5:16:
                    23:64:e6:2a:80:3d:e2:c3:bc:ba:40:89:df:e7:b2:
                    77:96:27:46:9b:df:68:2e:f7:93:6f:a6:9a:0d:0a:
                    be:1e:a5:60:1e:2a:10:23:24:a6:2f:f9:82:f2:7d:
                    3d:9b:3c:67:b7:76:6b:83:03:d7:e2:7d:af:95:42:
                    a6:2e:58:7a:c6:dd:5e:bc:83:d9:e2:d6:49:19:25:
                    d3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B9:67:D6:84:15:28:86:DE:B6:46:39:AB:40:86:2B:FC:3D:3C:09
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/323030313a313266663a3a2f33322d3438203d3e203232353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12ff::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:3c:6f:1e:19:40:99:98:5f:7f:3b:3b:c5:d8:51:b7:ca:b5:
         14:e6:26:81:0c:7c:a5:83:24:54:56:a2:6f:ae:b8:6d:1b:e2:
         8d:6f:4a:36:fa:02:8f:d8:3b:d8:0d:c1:04:e0:eb:75:81:34:
         24:99:14:f8:38:91:c8:b1:95:cd:3a:e2:87:12:07:46:9c:20:
         aa:d4:1f:33:ff:aa:18:49:93:b2:a9:47:4e:9d:18:c9:02:3c:
         54:e8:95:0c:eb:87:6a:90:46:72:4a:21:4d:32:59:1a:a4:5b:
         cf:37:33:28:99:02:fa:9b:c9:4a:85:85:34:89:99:d6:84:b8:
         01:5a:06:bb:2e:4f:89:b1:92:e2:3e:b8:9d:ff:0d:12:9b:2a:
         c7:21:d4:33:44:89:99:34:44:fa:40:00:4d:ff:fc:e2:ec:60:
         3c:b1:b1:77:b3:a5:09:f6:30:f2:0c:c1:43:d7:24:ea:8d:89:
         87:43:b4:46:85:24:dd:58:f5:0b:ad:d7:b0:e0:1f:55:c0:af:
         52:c4:71:11:96:36:a6:3c:2c:01:2c:8b:43:be:93:d6:b9:11:
         ef:e1:b8:94:f4:24:c1:e3:90:1a:d9:f4:e3:d6:ab:51:0a:e1:
         3a:c7:1c:d4:4b:3b:09:14:8c:df:9f:7a:82:a4:df:52:a5:68:
         b2:58:4e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----