Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/3137372e36362e3232342e302f32302d3230203d3e20323632353035.roa
File:                     3137372e36362e3232342e302f32302d3230203d3e20323632353035.roa (raw, json)
Hash identifier:          Cs8NAg/y1cJ1F/dSJgLl8q7WyisO1zD3OtdO7ii+IF8=
Subject key identifier:   FE:95:AA:77:BC:68:23:2C:CE:CB:D2:66:84:A0:42:50:36:AD:26:13
Certificate issuer:       /CN=2BC73A920C13C977F506EBD39B6882740FC9BC3A
Certificate serial:       67C9EB9724D8E6584652BD54568A3AAEAE0E32F5
Authority key identifier: 2B:C7:3A:92:0C:13:C9:77:F5:06:EB:D3:9B:68:82:74:0F:C9:BC:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BC73A920C13C977F506EBD39B6882740FC9BC3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/3137372e36362e3232342e302f32302d3230203d3e20323632353035.roa
Signing time:             Mon 12 Feb 2024 13:14:27 +0000
ROA not before:           Mon 12 Feb 2024 13:09:27 +0000
ROA not after:            Mon 10 Feb 2025 13:14:27 +0000
asID:                     262505
IP address blocks:        177.66.224.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:c9:eb:97:24:d8:e6:58:46:52:bd:54:56:8a:3a:ae:ae:0e:32:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BC73A920C13C977F506EBD39B6882740FC9BC3A
        Validity
            Not Before: Feb 12 13:09:27 2024 GMT
            Not After : Feb 10 13:14:27 2025 GMT
        Subject: CN=FE95AA77BC68232CCECBD26684A0425036AD2613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:23:4c:e5:b9:bf:bf:f6:d6:a3:a4:95:d1:b9:
                    d8:bb:9e:12:bc:65:4f:7d:8b:c5:ad:43:11:10:f1:
                    55:dd:70:5f:4c:14:eb:0c:73:86:a5:0d:7b:05:2f:
                    af:9b:07:39:b1:c0:a2:f1:e0:31:b7:60:44:e6:b2:
                    d7:a3:57:2a:0d:e9:81:e4:df:ba:6e:4d:85:71:4c:
                    37:c3:3c:ea:fd:2b:48:b4:fe:9e:6d:0a:79:05:47:
                    26:2c:14:7c:57:92:8b:c7:05:75:47:33:5b:a5:df:
                    97:a7:a7:9e:c4:bb:94:16:38:0a:a9:3d:eb:a2:7a:
                    12:6e:81:7f:66:a1:45:98:60:3e:3d:e5:2d:5a:71:
                    4b:30:26:72:27:53:55:65:62:08:64:68:96:38:bf:
                    11:f6:cb:ab:a6:af:17:06:69:c7:4f:0f:e9:02:c1:
                    f4:69:10:54:77:e0:3a:0b:42:8c:f9:58:e5:8b:95:
                    67:71:68:cb:5b:0a:58:d0:21:f7:14:96:2a:39:62:
                    5c:94:46:38:26:e0:3a:b4:b8:34:a1:e1:d9:4c:a7:
                    8d:ed:f4:63:cc:3c:d3:41:9f:2f:97:20:71:35:11:
                    62:30:f7:87:4c:18:e9:4f:32:44:98:26:43:f9:21:
                    69:4c:70:15:92:99:7b:38:a2:24:32:aa:e5:de:c4:
                    11:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:95:AA:77:BC:68:23:2C:CE:CB:D2:66:84:A0:42:50:36:AD:26:13
            X509v3 Authority Key Identifier:
                keyid:2B:C7:3A:92:0C:13:C9:77:F5:06:EB:D3:9B:68:82:74:0F:C9:BC:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/2BC73A920C13C977F506EBD39B6882740FC9BC3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BC73A920C13C977F506EBD39B6882740FC9BC3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/3137372e36362e3232342e302f32302d3230203d3e20323632353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         85:80:9a:80:23:d6:ee:ea:ea:9d:a2:84:c5:73:11:1a:6f:fc:
         3c:11:15:d3:0d:d4:b1:a7:1c:0a:dc:78:91:57:34:d0:59:4a:
         ee:5f:2d:d2:6c:7b:e9:6b:2b:c3:32:d9:09:fd:36:aa:8a:02:
         3e:0f:94:a3:7e:0f:9e:d9:1a:45:c6:93:28:b8:2e:c9:42:d8:
         d2:fb:5b:72:f5:09:e6:63:2a:49:27:a3:48:dc:b7:32:46:d2:
         5b:a6:86:fe:de:c2:ad:44:7c:7d:90:8f:96:61:0d:b9:8e:6c:
         e4:12:be:30:bb:3f:65:53:6a:a1:07:14:cc:95:e7:3d:2b:46:
         c7:6a:7e:75:37:30:31:bd:7d:db:3f:9d:7d:62:7c:eb:a4:42:
         0a:74:15:55:c5:35:f3:28:d6:4c:70:ee:57:01:48:9d:22:d9:
         86:e4:2c:ab:f7:d0:d5:eb:a8:22:1a:bd:18:89:59:2c:9a:82:
         86:93:d7:7b:99:8e:04:32:b7:31:1f:b2:d7:18:1a:f9:99:17:
         ce:55:fe:fd:77:64:ac:c3:e6:14:9d:53:9c:8f:1d:a7:46:aa:
         42:5a:98:1c:6f:52:7a:1d:7e:60:f5:9f:34:1c:ed:4e:b4:cc:
         3a:87:8f:88:31:f3:1a:29:78:2d:4e:04:31:20:f3:b7:30:07:
         a6:7a:70:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----