Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/0/3138362e3230392e3132382e302f32302d3332203d3e203533313639.roa
File:                     3138362e3230392e3132382e302f32302d3332203d3e203533313639.roa (raw, json)
Hash identifier:          /5S3uYax7+Bs7ZO/GjjkpUiOEeMLpCE33o9AplxkW1o=
Subject key identifier:   BE:64:F6:28:CC:A8:2F:1A:3E:91:FB:90:39:7B:27:84:FE:3D:74:0D
Certificate issuer:       /CN=82EFB3E49825D6F5FC77DA4606C551B3C3B86EFE
Certificate serial:       486BA5F528052A19B0DCA911129295277A3A28F9
Authority key identifier: 82:EF:B3:E4:98:25:D6:F5:FC:77:DA:46:06:C5:51:B3:C3:B8:6E:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82EFB3E49825D6F5FC77DA4606C551B3C3B86EFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/0/3138362e3230392e3132382e302f32302d3332203d3e203533313639.roa
Signing time:             Wed 17 May 2023 20:03:26 +0000
ROA not before:           Wed 17 May 2023 19:58:26 +0000
ROA not after:            Wed 15 May 2024 20:03:26 +0000
asID:                     53169
IP address blocks:        186.209.128.0/20 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:6b:a5:f5:28:05:2a:19:b0:dc:a9:11:12:92:95:27:7a:3a:28:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82EFB3E49825D6F5FC77DA4606C551B3C3B86EFE
        Validity
            Not Before: May 17 19:58:26 2023 GMT
            Not After : May 15 20:03:26 2024 GMT
        Subject: CN=BE64F628CCA82F1A3E91FB90397B2784FE3D740D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3d:da:10:c9:08:7c:d7:88:a1:a9:f4:33:63:
                    e2:2d:6b:0b:49:18:26:57:14:e1:35:74:db:4e:11:
                    1e:8e:ad:0b:1c:df:05:42:26:50:e4:8a:8f:cb:2b:
                    8e:dc:79:cd:35:d0:a5:f1:28:b7:c1:f8:d7:71:f8:
                    48:ac:3c:a1:58:42:b1:6e:f5:81:de:5b:89:6f:cf:
                    41:ad:c0:42:36:e4:8b:70:58:3e:93:50:21:0d:72:
                    2f:49:b1:88:16:b8:b9:7a:96:36:be:c9:6b:55:e9:
                    03:3c:4d:cc:59:db:6c:f1:b0:2a:8b:6f:ec:c3:d1:
                    43:bd:9e:3d:21:00:18:f2:07:5b:95:36:5b:3d:d2:
                    b9:fc:5c:39:07:c1:f2:81:17:70:50:d3:23:75:88:
                    ca:9a:f0:d0:08:cf:10:43:38:26:af:d8:d0:1a:b3:
                    37:1c:2e:79:b5:36:ff:99:a7:96:75:16:85:11:66:
                    28:f6:87:ec:c2:22:eb:ca:bb:cf:ae:33:1f:3f:d4:
                    d7:dc:88:ea:3e:1d:58:48:84:19:e9:bf:64:c5:63:
                    d6:c5:fc:b5:ef:b1:c5:b5:3e:01:66:5c:32:24:2c:
                    4a:35:a8:de:6d:05:18:82:38:ba:32:72:2b:29:bd:
                    10:4c:6d:56:90:e8:75:5e:68:13:69:fe:bc:c0:1a:
                    93:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:64:F6:28:CC:A8:2F:1A:3E:91:FB:90:39:7B:27:84:FE:3D:74:0D
            X509v3 Authority Key Identifier:
                keyid:82:EF:B3:E4:98:25:D6:F5:FC:77:DA:46:06:C5:51:B3:C3:B8:6E:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/0/82EFB3E49825D6F5FC77DA4606C551B3C3B86EFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82EFB3E49825D6F5FC77DA4606C551B3C3B86EFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/0/3138362e3230392e3132382e302f32302d3332203d3e203533313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         72:8b:4b:db:11:89:96:37:50:02:b8:0b:ca:77:90:54:98:a1:
         eb:e1:25:9c:3a:21:5c:5e:5d:82:f4:9f:3d:e7:c7:bf:ef:cf:
         24:a9:32:f1:c1:9f:8b:7a:b5:70:51:82:ef:a4:8f:b5:96:79:
         f8:f6:61:0d:36:bb:50:ac:f4:74:20:51:73:ad:dd:4e:fd:b7:
         5e:98:b3:51:be:ec:a5:62:5c:78:04:43:2b:ca:23:3b:86:f3:
         9b:76:ff:6b:04:7f:4d:46:76:7e:4d:b9:ff:d5:c1:07:94:5c:
         60:42:d0:eb:64:c2:87:a4:d3:ec:a2:9d:fd:cb:02:c6:55:45:
         ce:64:2f:06:ed:d4:34:ea:92:c1:5f:16:ec:b3:5e:f6:83:cc:
         aa:7b:17:e9:64:e3:77:22:e7:3b:1a:07:48:5a:f0:80:c6:2b:
         ce:99:94:04:bb:66:5e:3e:d2:dc:25:13:2e:64:75:73:f2:8c:
         42:ea:79:40:0e:cd:1f:52:c7:de:01:6d:44:c3:fc:5c:2c:49:
         89:f8:c7:b7:bb:c5:49:68:11:b9:f5:38:24:23:c1:70:a1:46:
         3c:2f:bc:20:7f:98:24:ef:8b:0b:91:42:9b:1c:49:91:2d:f8:
         93:6b:9e:6b:88:af:0a:8b:21:cd:2c:fb:18:d2:e9:55:b0:c4:
         ef:be:71:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----