Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/3230312e3138322e3137362e302f32322d3332203d3e20323637353238.roa
File:                     3230312e3138322e3137362e302f32322d3332203d3e20323637353238.roa (raw, json)
Hash identifier:          +EFv93rJX1bTmrRne+GVs52hoGz5WM27Kw2mAoVPw3Y=
Subject key identifier:   54:15:49:75:94:31:C5:78:5D:FA:8A:66:EC:7B:3A:CE:6A:F5:A2:F4
Certificate issuer:       /CN=A4101A2977EFB1D3ACF62F742DC6E9E8C57BA946
Certificate serial:       0A27760E3D28A8F4B4C019B1076A827D7ADF940D
Authority key identifier: A4:10:1A:29:77:EF:B1:D3:AC:F6:2F:74:2D:C6:E9:E8:C5:7B:A9:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4101A2977EFB1D3ACF62F742DC6E9E8C57BA946.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/3230312e3138322e3137362e302f32322d3332203d3e20323637353238.roa
Signing time:             Tue 16 Jan 2024 17:10:01 +0000
ROA not before:           Tue 16 Jan 2024 17:05:01 +0000
ROA not after:            Tue 14 Jan 2025 17:10:01 +0000
asID:                     267528
IP address blocks:        201.182.176.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:27:76:0e:3d:28:a8:f4:b4:c0:19:b1:07:6a:82:7d:7a:df:94:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4101A2977EFB1D3ACF62F742DC6E9E8C57BA946
        Validity
            Not Before: Jan 16 17:05:01 2024 GMT
            Not After : Jan 14 17:10:01 2025 GMT
        Subject: CN=541549759431C5785DFA8A66EC7B3ACE6AF5A2F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:92:97:d9:65:22:fd:0d:38:de:df:55:a0:89:
                    97:ee:7d:bf:c1:90:9c:61:a9:42:fe:99:0d:da:f2:
                    bd:3a:6e:47:b5:67:68:f0:8b:b3:87:b8:e2:5e:12:
                    25:07:12:7f:15:9e:64:2b:07:22:5d:e7:b6:58:fc:
                    78:0d:2b:d6:1b:c5:ec:73:d6:af:26:60:d2:b6:a2:
                    cd:ab:41:33:6b:b3:76:6d:15:c3:26:38:37:1c:99:
                    70:c5:05:21:83:49:5a:ba:46:de:8f:60:4f:8f:cc:
                    fc:10:d7:2a:52:3a:e5:a2:53:ef:2a:11:12:9d:cd:
                    33:35:fd:a0:df:c4:43:a7:6c:62:f2:40:83:74:9f:
                    fb:83:04:43:f7:98:c1:70:2c:ef:32:b9:ca:8e:cb:
                    0e:9d:cc:94:92:73:0a:35:08:b6:e8:5b:80:ac:dd:
                    cb:e0:a1:b6:68:fa:9e:eb:72:a2:1d:00:6d:e9:e6:
                    92:0e:9d:74:8a:04:96:9b:8c:65:ac:f0:1b:4a:c0:
                    7c:10:78:f0:6b:98:85:6b:c1:86:9e:5e:eb:73:12:
                    f7:ab:40:f2:2c:68:70:55:41:79:26:f4:ff:ed:bb:
                    df:c7:e5:7a:5e:90:57:19:b4:b9:16:a8:da:22:ef:
                    b3:52:33:e8:8c:3a:1b:b2:99:4b:12:b8:4b:38:67:
                    7a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:15:49:75:94:31:C5:78:5D:FA:8A:66:EC:7B:3A:CE:6A:F5:A2:F4
            X509v3 Authority Key Identifier:
                keyid:A4:10:1A:29:77:EF:B1:D3:AC:F6:2F:74:2D:C6:E9:E8:C5:7B:A9:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/A4101A2977EFB1D3ACF62F742DC6E9E8C57BA946.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4101A2977EFB1D3ACF62F742DC6E9E8C57BA946.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/3230312e3138322e3137362e302f32322d3332203d3e20323637353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:08:51:c4:42:5c:c4:9f:4e:97:94:b2:eb:66:f8:18:f4:04:
         c2:b7:2a:39:9d:f4:70:08:04:38:ea:e8:41:6e:32:31:00:45:
         ad:c8:0d:06:2e:38:7d:4f:4c:91:e3:80:d8:f4:9d:4e:5e:d5:
         9d:e2:ad:34:db:58:f3:88:e5:d9:e1:91:36:b8:4c:04:ac:3a:
         58:4e:10:a2:ec:38:a6:dd:55:de:8c:00:b9:7c:67:5e:6b:6f:
         b0:00:3a:1d:53:1d:d9:08:6f:19:61:85:8f:fd:11:05:81:42:
         7e:18:34:78:fc:67:a3:26:a0:b8:f6:a7:e1:a9:bd:b1:a9:cb:
         f2:78:23:64:3f:6b:04:14:48:65:36:71:ab:fd:56:4d:e6:f2:
         bf:ee:64:d4:28:c4:bb:21:0e:95:1b:db:49:c6:32:fd:87:d4:
         cf:d3:0e:b5:22:96:18:98:e3:78:48:e3:19:3e:1c:b8:83:5c:
         64:93:fe:fc:eb:7c:12:46:03:54:ec:92:af:3c:c1:b0:f4:10:
         f8:76:3f:43:2f:94:65:ef:78:f9:81:23:2b:e7:4d:8c:68:0c:
         16:74:16:e6:e7:96:8f:c7:3d:8d:f4:11:e9:1a:bb:66:44:79:
         30:aa:11:48:1d:04:d5:15:da:79:dc:88:02:59:a9:0d:c4:f5:
         41:cc:24:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----