Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EtucmGoSpqxj1FHUB3KyCDxwK2RX9BSNGdayHTfwe4wu/0/3139312e33372e3137302e36342f32382d3238203d3e20323731303233.roa
File:                     3139312e33372e3137302e36342f32382d3238203d3e20323731303233.roa (raw, json)
Hash identifier:          E85X6ygNwoijDsHwH32OtCbvuhbzXFvzka4p9j8Sz4c=
Subject key identifier:   87:3E:BF:C9:94:D9:74:78:87:FE:84:4B:5E:22:BB:44:05:71:77:F0
Certificate issuer:       /CN=53EC7FA5E8E3C4096D5620ADF56F229C7C746DBF
Certificate serial:       36F82FBCEA2DDE66712C104C8C6874B810B99CD9
Authority key identifier: 53:EC:7F:A5:E8:E3:C4:09:6D:56:20:AD:F5:6F:22:9C:7C:74:6D:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53EC7FA5E8E3C4096D5620ADF56F229C7C746DBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EtucmGoSpqxj1FHUB3KyCDxwK2RX9BSNGdayHTfwe4wu/0/3139312e33372e3137302e36342f32382d3238203d3e20323731303233.roa
Signing time:             Fri 24 Nov 2023 18:48:50 +0000
ROA not before:           Fri 24 Nov 2023 18:43:50 +0000
ROA not after:            Fri 22 Nov 2024 18:48:50 +0000
asID:                     271023
IP address blocks:        191.37.170.64/28 maxlen: 28

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f8:2f:bc:ea:2d:de:66:71:2c:10:4c:8c:68:74:b8:10:b9:9c:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53EC7FA5E8E3C4096D5620ADF56F229C7C746DBF
        Validity
            Not Before: Nov 24 18:43:50 2023 GMT
            Not After : Nov 22 18:48:50 2024 GMT
        Subject: CN=873EBFC994D9747887FE844B5E22BB44057177F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0f:c9:67:27:cd:3e:b7:0f:c6:8a:8a:b1:9f:
                    51:9a:b8:a1:70:ea:aa:30:2f:98:b7:8a:3a:da:02:
                    40:0d:37:5d:01:f6:49:19:ac:02:16:bf:90:c8:e2:
                    43:82:00:e6:f7:80:5e:75:b6:5f:ee:50:94:02:00:
                    ca:a6:fc:a3:a1:40:d0:69:00:a7:74:3f:e2:10:d9:
                    44:ec:4a:04:fa:df:94:e0:01:cc:ec:44:c3:b0:0e:
                    d5:6c:b0:94:bf:e2:f2:52:8d:30:50:3d:66:2e:26:
                    b1:a7:9a:d4:f3:a8:e7:79:69:b5:c5:86:d7:d6:af:
                    2b:96:53:14:0f:78:c1:f0:b5:63:b0:b4:ef:57:f0:
                    b3:0d:fc:e7:d6:59:7f:3d:7a:0b:4e:b8:d5:21:97:
                    93:1a:f9:10:0a:5b:7a:10:6c:80:62:05:aa:0d:0a:
                    bf:b5:ee:56:5a:87:89:b6:f1:a5:30:ba:03:3f:e4:
                    66:3f:9a:02:f4:94:25:73:04:00:52:22:90:93:bd:
                    0a:34:52:60:83:b6:2d:3e:8b:53:59:ea:fa:74:a9:
                    c6:8c:79:ee:49:63:ef:0a:35:c6:67:2c:92:18:9b:
                    a1:a0:6a:83:1b:09:e3:3a:01:2b:00:bc:21:30:72:
                    c0:9b:22:70:dc:08:84:a0:0e:80:07:73:2a:05:1f:
                    5e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:3E:BF:C9:94:D9:74:78:87:FE:84:4B:5E:22:BB:44:05:71:77:F0
            X509v3 Authority Key Identifier:
                keyid:53:EC:7F:A5:E8:E3:C4:09:6D:56:20:AD:F5:6F:22:9C:7C:74:6D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EtucmGoSpqxj1FHUB3KyCDxwK2RX9BSNGdayHTfwe4wu/0/53EC7FA5E8E3C4096D5620ADF56F229C7C746DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53EC7FA5E8E3C4096D5620ADF56F229C7C746DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EtucmGoSpqxj1FHUB3KyCDxwK2RX9BSNGdayHTfwe4wu/0/3139312e33372e3137302e36342f32382d3238203d3e20323731303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.170.64/28

    Signature Algorithm: sha256WithRSAEncryption
         20:51:d6:4f:7e:29:fa:8b:da:6e:cc:0c:ae:aa:64:e6:a9:2b:
         db:5b:c7:e8:6d:9e:1c:f9:6c:9c:de:95:f2:09:78:c0:dd:f5:
         aa:5a:82:83:fc:3b:32:a0:ff:15:be:79:8c:96:f8:e9:85:60:
         89:43:64:19:ba:46:3b:f4:df:cb:49:0b:42:47:c3:3e:76:00:
         96:ee:69:10:e0:6a:62:f2:a5:5d:40:c1:7f:b8:d5:c1:07:33:
         30:27:84:f8:dd:55:57:37:a6:d5:41:8c:a1:53:dd:49:1d:02:
         27:70:3f:6a:07:15:c9:ad:9f:0a:09:e6:70:1e:07:65:d7:78:
         e4:0e:ec:35:be:cd:e8:5a:57:c5:67:03:0b:e3:92:ad:60:bc:
         ae:d7:b7:5d:a0:d9:ae:93:89:6f:ba:1f:5d:fd:20:39:16:8f:
         1f:f9:68:ca:0b:43:dc:3c:16:d2:12:d0:90:4f:3f:72:50:99:
         15:cf:0b:02:7e:0c:82:d5:8a:04:98:4b:29:67:70:39:bf:5c:
         1e:6d:70:5e:ba:78:69:81:b8:7e:70:f8:43:68:73:6b:a8:84:
         61:53:4f:9f:17:1a:7f:cd:ad:fe:ce:9a:4d:24:f8:a6:5f:a4:
         fd:b2:f1:ce:54:0b:d8:8e:62:75:75:90:53:5c:a5:6e:53:84:
         ef:d1:f6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----