Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/3137372e33382e382e302f32312d3332203d3e20323632383933.roa
File:                     3137372e33382e382e302f32312d3332203d3e20323632383933.roa (raw, json)
Hash identifier:          jCDKCAY5vpYvSFnJcT3rinHwF1p8Zs1py5H9Ug/uB9I=
Subject key identifier:   78:17:6B:31:88:B2:BA:21:1B:3F:9C:F3:A2:8A:B5:DA:B9:83:29:B8
Certificate issuer:       /CN=4502CD1B49644F16402D764130FC71B676EC91F0
Certificate serial:       74CA4A8E4EFABD47ED8D93406659BBA88647CF33
Authority key identifier: 45:02:CD:1B:49:64:4F:16:40:2D:76:41:30:FC:71:B6:76:EC:91:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4502CD1B49644F16402D764130FC71B676EC91F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/3137372e33382e382e302f32312d3332203d3e20323632383933.roa
Signing time:             Wed 31 Jan 2024 12:36:50 +0000
ROA not before:           Wed 31 Jan 2024 12:31:50 +0000
ROA not after:            Wed 29 Jan 2025 12:36:50 +0000
asID:                     262893
IP address blocks:        177.38.8.0/21 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:ca:4a:8e:4e:fa:bd:47:ed:8d:93:40:66:59:bb:a8:86:47:cf:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502CD1B49644F16402D764130FC71B676EC91F0
        Validity
            Not Before: Jan 31 12:31:50 2024 GMT
            Not After : Jan 29 12:36:50 2025 GMT
        Subject: CN=78176B3188B2BA211B3F9CF3A28AB5DAB98329B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:52:9e:c4:91:68:61:49:b8:fb:68:ac:19:0c:
                    f9:ad:ce:c9:b8:a4:a9:a9:88:81:d9:de:f5:77:8e:
                    39:e8:3b:5a:be:4c:59:a1:bc:2b:a0:b6:fe:f8:37:
                    ce:11:7e:86:2f:ae:d1:eb:20:06:d5:b4:8e:c9:92:
                    3d:46:a8:58:c6:a8:85:48:6d:cf:24:80:52:52:6f:
                    5e:6b:7c:7e:95:17:d3:d6:7f:a4:7b:69:aa:e4:c5:
                    2b:da:12:a4:ef:c9:ee:7b:44:da:46:6a:d3:af:23:
                    94:27:2b:69:26:34:5a:90:e3:dd:6d:6f:65:65:62:
                    73:f5:0d:92:3b:9b:12:4b:a5:5a:7b:af:0d:dc:6b:
                    bd:f3:fe:28:51:72:8e:d2:c9:9f:3f:4e:55:74:c3:
                    35:05:3e:3f:72:29:a6:75:b4:0e:89:c6:b5:6c:bf:
                    94:59:f9:bf:88:09:be:d4:c6:0e:44:0a:45:b9:4c:
                    f9:d5:c7:34:3f:4f:96:c7:1d:43:4d:ed:31:11:c8:
                    02:2a:de:ae:60:4c:6b:e4:1a:f6:0e:b9:2e:42:08:
                    c5:cd:43:ae:1d:85:75:d7:e7:3e:79:e5:19:94:04:
                    e5:92:fa:dc:10:8a:77:52:03:b3:5e:37:b8:c8:11:
                    51:62:43:11:a9:f0:d6:b1:68:11:80:18:0f:22:be:
                    49:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:17:6B:31:88:B2:BA:21:1B:3F:9C:F3:A2:8A:B5:DA:B9:83:29:B8
            X509v3 Authority Key Identifier:
                keyid:45:02:CD:1B:49:64:4F:16:40:2D:76:41:30:FC:71:B6:76:EC:91:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/4502CD1B49644F16402D764130FC71B676EC91F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4502CD1B49644F16402D764130FC71B676EC91F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/3137372e33382e382e302f32312d3332203d3e20323632383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4f:2a:3e:47:11:df:2d:51:21:fe:51:8b:40:76:48:c2:33:b4:
         9c:db:82:83:f5:03:8e:b7:7b:b7:f9:65:e3:3b:fb:33:39:04:
         85:5a:0c:4f:a4:f9:2f:e6:8d:a8:a7:2b:06:65:df:36:6a:61:
         d6:94:53:56:a9:46:a0:e2:29:5b:55:81:fe:17:2c:1b:8c:15:
         b8:29:30:06:e0:ea:1d:75:28:2a:bc:50:c2:36:0c:e9:e6:41:
         77:56:ad:f0:72:81:a7:21:26:26:86:83:9b:76:de:0b:c9:3c:
         3e:b5:e7:f7:c9:26:71:a5:60:0d:e5:f3:34:2c:31:f1:e0:4f:
         2f:84:e7:e3:07:d8:5e:43:d1:09:0d:0a:dd:db:25:20:28:f8:
         ae:a6:27:fc:b9:62:60:4c:73:14:1d:62:b8:c7:bc:9a:40:20:
         f4:39:d9:a4:71:68:91:bc:ff:d7:2f:13:41:42:1e:97:1d:81:
         4d:d0:7e:1c:8c:35:68:23:27:dd:35:5f:e2:08:c2:3b:09:b1:
         45:9c:b3:94:79:7b:8d:f0:38:81:d4:f6:dd:07:c5:13:14:2d:
         4d:a3:cf:dd:c4:83:f6:79:aa:64:ae:07:99:d6:bb:46:06:6d:
         87:b0:34:a7:df:34:f9:1f:5c:91:3b:7c:2d:e3:51:20:cd:78:
         20:a4:13:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----