Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/3138372e33332e3139322e302f32302d3230203d3e203533303836.roa
File:                     3138372e33332e3139322e302f32302d3230203d3e203533303836.roa (raw, json)
Hash identifier:          9VaVqyQ/sre/Yq2JD3ka4PBRL9SFaJ4RFao4dFwll0s=
Subject key identifier:   28:E5:9B:A7:3F:EB:73:64:E8:EF:0A:A6:D0:DD:55:D7:5F:CD:01:46
Certificate issuer:       /CN=6E6671CD0BBD67CC600D3A3DFD97D129A050CA08
Certificate serial:       72DB161D5B805E90F43729CB9348ED76247D3629
Authority key identifier: 6E:66:71:CD:0B:BD:67:CC:60:0D:3A:3D:FD:97:D1:29:A0:50:CA:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E6671CD0BBD67CC600D3A3DFD97D129A050CA08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/3138372e33332e3139322e302f32302d3230203d3e203533303836.roa
Signing time:             Thu 29 Jun 2023 14:13:31 +0000
ROA not before:           Thu 29 Jun 2023 14:08:31 +0000
ROA not after:            Thu 27 Jun 2024 14:13:31 +0000
asID:                     53086
IP address blocks:        187.33.192.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:db:16:1d:5b:80:5e:90:f4:37:29:cb:93:48:ed:76:24:7d:36:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E6671CD0BBD67CC600D3A3DFD97D129A050CA08
        Validity
            Not Before: Jun 29 14:08:31 2023 GMT
            Not After : Jun 27 14:13:31 2024 GMT
        Subject: CN=28E59BA73FEB7364E8EF0AA6D0DD55D75FCD0146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:47:12:52:34:ef:96:d4:24:0a:9a:13:99:00:
                    d0:e9:40:3b:c2:e5:8a:4f:6b:e7:a6:4a:f1:7f:46:
                    32:e9:6d:87:82:5a:86:37:33:84:45:cd:af:66:5a:
                    20:ad:25:9e:11:d4:c2:ad:0a:49:c0:aa:ad:11:52:
                    1b:0a:c6:19:34:70:83:05:2e:9e:48:03:79:bb:e4:
                    77:22:53:29:3c:6d:a8:7f:22:49:18:43:95:04:45:
                    c7:7c:08:af:b2:60:7e:5e:11:e8:1d:30:16:61:68:
                    a8:15:1a:75:b3:a3:49:0c:40:de:69:ed:75:96:e4:
                    b8:f0:1c:3a:6c:bb:fa:86:8a:80:83:22:14:41:66:
                    43:9c:b7:86:76:6f:60:bc:b0:6d:9d:7c:14:7e:4f:
                    0e:8d:ab:ec:d7:b3:96:4f:21:62:7e:1d:9c:31:9c:
                    11:30:3f:3b:8b:f7:b7:8c:7a:7f:79:b2:10:50:21:
                    f4:6b:46:a5:25:0c:2b:7d:5e:df:cb:d9:4e:1b:b0:
                    17:f2:5a:0d:a3:55:59:0f:d5:63:33:23:74:c5:c6:
                    02:3f:34:04:c4:f4:83:f5:9c:e9:c7:72:33:79:70:
                    78:65:48:ad:1f:be:bc:23:8e:51:df:f6:58:f3:ba:
                    d4:23:44:38:0e:00:f9:0e:78:9f:ea:c9:5b:c1:f1:
                    8e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E5:9B:A7:3F:EB:73:64:E8:EF:0A:A6:D0:DD:55:D7:5F:CD:01:46
            X509v3 Authority Key Identifier:
                keyid:6E:66:71:CD:0B:BD:67:CC:60:0D:3A:3D:FD:97:D1:29:A0:50:CA:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/6E6671CD0BBD67CC600D3A3DFD97D129A050CA08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E6671CD0BBD67CC600D3A3DFD97D129A050CA08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/3138372e33332e3139322e302f32302d3230203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4f:90:17:28:73:37:88:77:ef:5c:c7:54:83:9d:41:a7:e6:57:
         39:05:79:a1:c4:ee:5c:8c:72:f5:11:2e:4d:e0:34:96:f5:0b:
         5e:66:0d:2f:fd:81:a6:51:ff:d7:e1:53:be:73:9e:84:e6:68:
         d5:0b:f9:b8:9a:cb:a0:e8:21:98:c8:ab:a5:12:0d:06:2a:a2:
         59:30:54:92:41:0f:1f:d0:ca:d7:77:02:83:25:8b:48:1a:c6:
         3e:d3:6c:c0:0b:46:48:6e:03:08:b4:3c:c4:3e:8c:12:f9:f6:
         a6:00:00:88:44:d5:53:e7:8c:5e:b0:98:bf:d5:12:dd:40:1a:
         d8:e4:0e:a4:86:d5:dd:9c:4f:9f:8c:28:53:eb:cf:2d:da:4c:
         50:af:bd:63:38:9b:d7:38:27:ac:f3:91:58:12:96:e0:18:b6:
         8a:f0:2e:7c:af:5d:dc:40:74:b2:9c:b8:d0:3e:2a:19:b5:02:
         55:18:9e:fb:d0:78:76:99:78:6d:99:64:ec:d0:ae:cd:47:62:
         d3:38:79:de:16:1e:e6:97:3b:43:e7:30:7e:4d:a0:9f:5f:a8:
         aa:f8:cf:63:d9:c0:de:ae:04:b5:81:06:dd:e3:56:ee:d5:a1:
         72:8f:a9:d5:ea:b4:f7:24:57:9f:5d:11:6f:ae:52:b7:63:2d:
         90:30:34:23
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUctsWHVuAXpD0NynLk0jtdiR9NikwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkU2NjcxQ0QwQkJENjdDQzYwMEQzQTNERkQ5N0QxMjlB
MDUwQ0EwODAeFw0yMzA2MjkxNDA4MzFaFw0yNDA2MjcxNDEzMzFaMDMxMTAvBgNV
BAMTKDI4RTU5QkE3M0ZFQjczNjRFOEVGMEFBNkQwREQ1NUQ3NUZDRDAxNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDORxJSNO+W1CQKmhOZANDpQDvC
5YpPa+emSvF/RjLpbYeCWoY3M4RFza9mWiCtJZ4R1MKtCknAqq0RUhsKxhk0cIMF
Lp5IA3m75HciUyk8bah/IkkYQ5UERcd8CK+yYH5eEegdMBZhaKgVGnWzo0kMQN5p
7XWW5LjwHDpsu/qGioCDIhRBZkOct4Z2b2C8sG2dfBR+Tw6Nq+zXs5ZPIWJ+HZwx
nBEwPzuL97eMen95shBQIfRrRqUlDCt9Xt/L2U4bsBfyWg2jVVkP1WMzI3TFxgI/
NATE9IP1nOnHcjN5cHhlSK0fvrwjjlHf9ljzutQjRDgOAPkOeJ/qyVvB8Y6xAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUKOWbpz/rc2To7wqm0N1V11/NAUYwHwYDVR0j
BBgwFoAUbmZxzQu9Z8xgDTo9/ZfRKaBQyggwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXJkWEVrRGREQW9KQllmUUNXcWVIelRZNW5oYlJjZlZFaXlKa3lqelJC
Y3IvMC82RTY2NzFDRDBCQkQ2N0NDNjAwRDNBM0RGRDk3RDEyOUEwNTBDQTA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZFNjY3MUNEMEJCRDY3Q0M2
MDBEM0EzREZEOTdEMTI5QTA1MENBMDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VyZFhFa0RkREFvSkJZZlFDV3FlSHpUWTVuaGJSY2ZWRWl5Smt5anpSQmNyLzAv
MzEzODM3MmUzMzMzMmUzMTM5MzIyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzNTMz
MzAzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEuyHAMA0GCSqGSIb3DQEBCwUAA4IBAQBPkBcoczeI
d+9cx1SDnUGn5lc5BXmhxO5cjHL1ES5N4DSW9QteZg0v/YGmUf/X4VO+c56E5mjV
C/m4msug6CGYyKulEg0GKqJZMFSSQQ8f0MrXdwKDJYtIGsY+02zAC0ZIbgMItDzE
PowS+famAACIRNVT54xesJi/1RLdQBrY5A6khtXdnE+fjChT688t2kxQr71jOJvX
OCes85FYEpbgGLaK8C58r13cQHSynLjQPioZtQJVGJ770Hh2mXhtmWTs0K7NR2LT
OHneFh7mlztD5zB+TaCfX6iq+M9j2cDergS1gQbd41bu1aFyj6nV6rT3JFefXRFv
rlK3Yy2QMDQj
-----END CERTIFICATE-----