Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3231392e3134342e302f32322d3332203d3e2030.roa
File:                     3230302e3231392e3134342e302f32322d3332203d3e2030.roa (raw, json)
Hash identifier:          PYY093f7P0FdQJA7XW61o2zk4jMtOPEOAxUQKVb6YQM=
Subject key identifier:   73:2F:BE:C7:B3:52:48:EE:14:6E:18:82:D7:57:E0:81:11:0E:9B:B9
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       352A13819CC5266FA1E7A0EDE77A4EBDD641288B
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3231392e3134342e302f32322d3332203d3e2030.roa
Signing time:             Sat 23 Sep 2023 16:56:01 +0000
ROA not before:           Sat 23 Sep 2023 16:51:01 +0000
ROA not after:            Sat 21 Sep 2024 16:56:01 +0000
asID:                     0
IP address blocks:        200.219.144.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:2a:13:81:9c:c5:26:6f:a1:e7:a0:ed:e7:7a:4e:bd:d6:41:28:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Sep 23 16:51:01 2023 GMT
            Not After : Sep 21 16:56:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6c:e2:9e:a6:62:84:8c:bf:d0:6a:06:46:9f:
                    d6:3f:56:ce:f7:3f:36:89:4a:4e:79:ec:25:e8:9b:
                    07:b7:3e:7f:b8:25:ca:ac:24:66:88:71:35:a2:cf:
                    93:c0:78:a7:a1:cb:e8:55:66:f6:2f:0d:fa:c5:ff:
                    5a:50:18:4a:e3:30:86:01:84:eb:65:d3:7c:00:fc:
                    93:82:cf:5e:d8:a8:80:68:a8:4c:b8:a1:c4:ed:49:
                    ac:ca:fa:40:4d:29:16:d2:c4:fd:68:b8:d0:e5:18:
                    5c:00:5d:4a:90:b4:9e:13:23:9e:89:aa:e9:02:3b:
                    e7:59:91:e6:7f:a7:65:58:68:b8:e2:75:d4:39:11:
                    86:81:3a:33:f9:ef:bc:96:54:78:11:b8:25:73:e3:
                    99:41:93:54:9d:01:fe:8c:b6:ad:2f:39:26:76:e1:
                    d2:64:1c:02:2b:13:be:e0:53:38:40:a0:4d:a9:a4:
                    54:ed:e6:75:3f:2e:f1:1f:a1:37:89:05:2d:45:c1:
                    01:ed:cb:f2:59:0a:38:1e:9b:d2:7f:e7:74:f2:89:
                    28:b4:64:2d:a7:89:f8:f2:7e:65:02:54:2c:0f:16:
                    13:97:e0:ef:6f:ff:bd:33:2f:91:0d:fe:4f:2a:6d:
                    15:5d:f9:71:a2:09:95:70:04:b0:8b:d3:f4:aa:e2:
                    e6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2F:BE:C7:B3:52:48:EE:14:6E:18:82:D7:57:E0:81:11:0E:9B:B9
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3231392e3134342e302f32322d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:95:47:d7:29:92:7c:f8:62:41:a8:b0:46:7f:51:3d:fd:dd:
         7d:e2:00:04:34:22:f6:60:a8:08:dc:94:6f:57:f6:42:e7:99:
         5f:8c:14:a6:7b:a2:19:e5:0e:de:b2:c8:bf:fa:3e:a1:8c:fc:
         a3:8f:e0:90:66:26:03:c0:c6:d6:2a:3d:e1:67:9d:86:95:08:
         cb:3d:7f:ff:f2:35:90:a3:9e:2e:0c:21:71:91:38:e1:f1:31:
         e7:51:bb:44:2c:fb:59:e6:db:37:16:00:32:91:0b:50:34:02:
         48:d2:1a:30:f1:7e:de:91:7d:6e:ae:9a:e1:67:96:88:f3:fc:
         3d:57:e5:81:aa:e7:d2:81:b0:16:89:64:84:16:0d:8a:7d:62:
         35:9f:57:c7:31:8f:23:b1:9b:08:40:04:54:d3:ef:27:7d:b2:
         27:08:55:57:5f:0d:6a:31:83:36:50:b2:93:c0:30:c8:52:b1:
         34:96:95:c8:0c:1a:ca:2b:1d:0a:a2:a2:4d:31:2e:4d:f6:ab:
         f1:75:cf:d8:82:f5:a0:33:34:73:1c:2f:7d:e7:a7:04:ac:49:
         5f:bc:65:7c:97:34:97:e1:e6:43:2c:d7:ca:f7:2d:0e:b9:11:
         18:59:6b:cf:53:fc:b0:52:3d:97:22:d4:89:e6:b2:1e:53:12:
         43:6c:a2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----