Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/3137372e35352e3134342e302f32302d3230203d3e20323632353035.roa
File:                     3137372e35352e3134342e302f32302d3230203d3e20323632353035.roa (raw, json)
Hash identifier:          0P9DjQA9Fgr6M2zUp+y3B8xDHFjbtI8xa0Bl1ws+LtU=
Subject key identifier:   37:63:2B:F7:2E:D2:47:3A:33:5B:2E:1A:F1:C5:0D:A0:5D:12:51:BD
Certificate issuer:       /CN=2BC73A920C13C977F506EBD39B6882740FC9BC3A
Certificate serial:       48490E836B60F689C31FB8D25EC38A76C1F6D50D
Authority key identifier: 2B:C7:3A:92:0C:13:C9:77:F5:06:EB:D3:9B:68:82:74:0F:C9:BC:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BC73A920C13C977F506EBD39B6882740FC9BC3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/3137372e35352e3134342e302f32302d3230203d3e20323632353035.roa
Signing time:             Mon 12 Feb 2024 13:14:32 +0000
ROA not before:           Mon 12 Feb 2024 13:09:32 +0000
ROA not after:            Mon 10 Feb 2025 13:14:32 +0000
asID:                     262505
IP address blocks:        177.55.144.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:49:0e:83:6b:60:f6:89:c3:1f:b8:d2:5e:c3:8a:76:c1:f6:d5:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BC73A920C13C977F506EBD39B6882740FC9BC3A
        Validity
            Not Before: Feb 12 13:09:32 2024 GMT
            Not After : Feb 10 13:14:32 2025 GMT
        Subject: CN=37632BF72ED2473A335B2E1AF1C50DA05D1251BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:13:fd:93:6b:dc:e3:11:52:49:e1:fa:22:4c:
                    3a:76:f7:a3:e5:5f:fa:d3:8e:e1:62:ba:89:9c:96:
                    44:de:dc:db:f7:1e:29:5c:dc:59:77:27:f3:f5:92:
                    4d:35:ba:c6:d2:07:a1:ab:dc:2e:14:14:c5:58:15:
                    69:17:77:f6:eb:e5:a5:3e:c1:7f:48:75:73:9b:72:
                    88:65:c2:6f:8c:f3:9c:c0:ae:04:2f:6b:2d:33:94:
                    c1:67:67:58:aa:1e:e6:32:68:8d:9f:05:7d:f4:4b:
                    f6:ee:09:00:7f:f9:df:c5:37:ef:54:81:37:8f:af:
                    22:6e:0e:6f:86:a0:2b:69:46:24:38:23:79:b9:2b:
                    e5:b1:33:53:43:3e:a0:26:da:22:b0:c8:13:c7:f6:
                    31:45:5d:cf:1e:4d:b6:0f:2a:c6:ed:16:67:b7:61:
                    3d:65:a0:de:f4:b0:15:e7:7d:6e:ed:de:aa:e7:7c:
                    7b:47:c5:94:62:00:e8:4a:39:c9:e0:87:05:03:c0:
                    15:ef:9a:49:f4:04:47:c2:dd:4b:8a:69:a4:24:b3:
                    6d:eb:2e:78:8a:eb:e2:6e:4b:ed:9f:e3:7e:02:a4:
                    2d:1c:57:2b:1f:3b:cb:e7:75:f5:60:01:01:3d:f5:
                    fd:0a:64:f0:a3:53:50:4f:6b:d8:1f:cf:a0:7d:01:
                    b5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:63:2B:F7:2E:D2:47:3A:33:5B:2E:1A:F1:C5:0D:A0:5D:12:51:BD
            X509v3 Authority Key Identifier:
                keyid:2B:C7:3A:92:0C:13:C9:77:F5:06:EB:D3:9B:68:82:74:0F:C9:BC:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/2BC73A920C13C977F506EBD39B6882740FC9BC3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BC73A920C13C977F506EBD39B6882740FC9BC3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/3137372e35352e3134342e302f32302d3230203d3e20323632353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         87:f4:da:54:84:65:18:22:11:06:55:d0:85:52:cb:60:8c:7b:
         f4:26:11:41:ed:96:00:8f:34:01:97:82:27:51:ac:58:fd:12:
         8a:ff:4d:bc:7b:bc:82:d1:53:8a:d5:2e:6c:67:41:f4:e6:d3:
         79:3e:e8:28:d8:c8:21:c5:1e:31:b2:7a:58:09:b1:f6:12:93:
         a2:fa:d8:72:ec:47:e5:93:9d:9a:5a:c4:2d:f1:6e:56:e8:93:
         bc:96:48:d9:c4:6c:e7:ad:26:fe:86:b6:f6:fc:76:af:e5:43:
         94:f6:8d:78:4b:dd:7f:49:a9:06:9b:4b:63:fc:e6:5a:8e:e1:
         2e:fe:19:01:8a:d1:82:23:36:ae:59:5f:69:01:f7:99:28:20:
         6f:7a:34:9b:69:3e:f7:a2:96:24:6d:8d:c5:91:34:be:c0:a7:
         f2:55:a2:86:c3:5d:a2:68:60:d6:fe:8a:3a:c9:ce:e2:f9:6b:
         a8:f8:88:99:31:b1:1d:82:15:e5:ba:d7:b2:4a:c2:02:22:50:
         a7:09:fa:25:3d:24:8d:f7:8e:1e:e7:fb:c7:fc:77:ef:0d:6b:
         9b:77:00:e3:db:99:f7:1d:cd:3e:8b:97:b9:ec:c3:1b:04:03:
         f9:ed:2f:c6:6f:88:b1:04:95:89:84:33:53:5b:f6:9d:72:68:
         ee:d5:5a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----