Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3137372e37342e3132382e302f32312d3332203d3e203631353838.roa
File:                     3137372e37342e3132382e302f32312d3332203d3e203631353838.roa (raw, json)
Hash identifier:          lt2y4GvgRAHpB4Fqk5Iw1EHTBQqO7bhuuPrI2HC8aKE=
Subject key identifier:   E5:28:9F:28:26:24:6B:11:68:6E:7E:69:1B:CD:DA:5D:BD:93:B0:BC
Certificate issuer:       /CN=75D606BA82DC85E5AA57AC0E5F2DA370B37A672A
Certificate serial:       7E637F7192AE43232385638CF6F24F0428D1DA8D
Authority key identifier: 75:D6:06:BA:82:DC:85:E5:AA:57:AC:0E:5F:2D:A3:70:B3:7A:67:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3137372e37342e3132382e302f32312d3332203d3e203631353838.roa
Signing time:             Wed 27 Sep 2023 20:01:36 +0000
ROA not before:           Wed 27 Sep 2023 19:56:36 +0000
ROA not after:            Wed 25 Sep 2024 20:01:36 +0000
asID:                     61588
IP address blocks:        177.74.128.0/21 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:63:7f:71:92:ae:43:23:23:85:63:8c:f6:f2:4f:04:28:d1:da:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75D606BA82DC85E5AA57AC0E5F2DA370B37A672A
        Validity
            Not Before: Sep 27 19:56:36 2023 GMT
            Not After : Sep 25 20:01:36 2024 GMT
        Subject: CN=E5289F2826246B11686E7E691BCDDA5DBD93B0BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7e:05:a1:d0:1c:62:60:77:94:42:7e:1b:3f:
                    a1:32:38:85:cf:c5:da:3b:ad:76:7b:8d:23:1d:c4:
                    63:83:22:02:d1:77:c4:d1:a3:c5:2a:8c:a2:0e:22:
                    24:d3:47:ee:9e:9d:83:ae:ab:23:b9:7e:05:67:e8:
                    f6:c1:78:e2:e6:0d:17:03:4a:7c:90:e4:b5:70:ce:
                    19:8c:e2:08:29:df:c2:94:25:32:58:8a:25:4c:95:
                    eb:f6:8c:cb:89:b8:4e:e4:d4:1a:fb:18:9b:74:51:
                    6c:3b:9b:fa:c7:a5:59:a6:60:99:05:2e:37:8e:3b:
                    56:fb:92:09:c9:25:df:fa:6f:ce:6d:a2:54:e9:83:
                    5a:0a:d6:b8:b2:5f:d5:df:9d:a8:98:b5:e9:6a:c7:
                    d6:8d:ab:1a:0e:9e:8e:a9:28:e4:5d:e3:de:54:a8:
                    6e:cb:25:fa:9e:a1:1c:f4:d2:3e:18:48:d7:61:55:
                    1f:64:bf:02:50:52:ea:36:37:08:d4:ba:79:07:ff:
                    aa:b1:99:e1:ef:b5:49:2d:5b:3e:d3:bd:3c:7a:ed:
                    70:07:79:9e:a6:2d:b2:96:44:f0:3f:c2:83:a6:b1:
                    1c:4f:f6:37:2b:43:05:fc:49:2f:fe:ca:23:7a:16:
                    c7:c8:aa:f3:60:f1:70:fb:12:0e:77:ee:f2:86:01:
                    5e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:28:9F:28:26:24:6B:11:68:6E:7E:69:1B:CD:DA:5D:BD:93:B0:BC
            X509v3 Authority Key Identifier:
                keyid:75:D6:06:BA:82:DC:85:E5:AA:57:AC:0E:5F:2D:A3:70:B3:7A:67:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3137372e37342e3132382e302f32312d3332203d3e203631353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         cd:37:a9:a1:ca:a4:53:f2:4c:aa:45:d1:92:16:83:26:4e:55:
         08:6e:e0:78:6f:4b:35:e7:f8:2b:e3:35:a4:2e:c9:a3:32:e5:
         4e:67:31:f4:e6:a5:dd:4c:ff:1e:67:82:41:bb:d3:c8:05:eb:
         b3:e2:fd:73:05:8d:53:8b:82:4c:d0:5d:3f:77:bd:47:66:40:
         4c:fe:84:56:cc:cd:29:ba:e1:8f:5c:9e:b6:cd:c3:44:c9:6e:
         38:b7:ee:9f:cb:ac:5f:c9:ee:44:03:5f:cc:df:c0:d3:b5:a8:
         46:40:9b:d5:f8:52:8d:3e:e0:56:ed:28:33:30:26:b8:fa:a1:
         03:65:81:0c:71:12:d0:d1:34:18:a0:e3:ec:89:6e:50:89:63:
         42:73:70:2f:dc:7a:1b:2f:e9:09:8e:ad:04:f8:d4:63:0f:f0:
         91:cd:1d:d0:1a:3c:9a:dd:bf:52:2f:2c:8f:1e:57:8d:cf:21:
         66:9a:9c:d7:e2:da:e7:45:17:2e:ec:64:13:87:dd:d7:46:80:
         f8:51:a6:cb:8a:f9:bb:fd:5b:f9:97:76:31:0a:5e:7e:7a:80:
         59:52:92:81:4d:74:99:25:1c:5d:a3:f2:ab:60:ea:76:dd:bf:
         f8:e1:47:a1:f6:95:97:ed:50:fb:28:f0:34:1a:b0:aa:75:59:
         56:b6:83:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----