Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/3138392e38352e3130382e302f32322d3332203d3e20323730353533.roa
File:                     3138392e38352e3130382e302f32322d3332203d3e20323730353533.roa (raw, json)
Hash identifier:          ofA/uRIEAkXG+paAGg8j28C1JkdF00zj0zlM5btYGHw=
Subject key identifier:   A1:D9:69:81:E7:3F:40:B3:18:A5:92:F5:B4:51:4A:AA:B4:46:85:81
Certificate issuer:       /CN=E509BAA2693B17A541A242E2F31A9A5BB0EE68AE
Certificate serial:       4D64526504C08A2F71FDDD70332458E047D213C0
Authority key identifier: E5:09:BA:A2:69:3B:17:A5:41:A2:42:E2:F3:1A:9A:5B:B0:EE:68:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E509BAA2693B17A541A242E2F31A9A5BB0EE68AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/3138392e38352e3130382e302f32322d3332203d3e20323730353533.roa
Signing time:             Wed 14 Feb 2024 16:09:22 +0000
ROA not before:           Wed 14 Feb 2024 16:04:22 +0000
ROA not after:            Wed 12 Feb 2025 16:09:22 +0000
asID:                     270553
IP address blocks:        189.85.108.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:64:52:65:04:c0:8a:2f:71:fd:dd:70:33:24:58:e0:47:d2:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E509BAA2693B17A541A242E2F31A9A5BB0EE68AE
        Validity
            Not Before: Feb 14 16:04:22 2024 GMT
            Not After : Feb 12 16:09:22 2025 GMT
        Subject: CN=A1D96981E73F40B318A592F5B4514AAAB4468581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5a:1f:d8:b9:38:b1:65:97:0e:e5:d6:e2:10:
                    b8:84:fb:c8:58:15:48:4c:8c:63:e5:ee:d5:ca:29:
                    33:98:36:61:70:0a:27:07:3f:3c:bb:24:b7:44:8c:
                    62:9b:e5:9e:2b:2c:13:67:99:91:3e:39:b0:b6:d4:
                    18:2c:1e:b2:f7:9e:a1:de:9d:64:f0:0a:23:62:0f:
                    bd:d1:56:b3:77:ad:ba:8e:68:d5:ec:22:41:99:46:
                    d5:c0:df:ce:2d:5a:34:7a:52:68:8e:9e:3b:41:43:
                    79:75:9a:fa:fd:99:26:c8:39:02:23:cf:46:b0:c0:
                    17:74:68:0f:5b:5d:d9:5b:95:1d:a6:f3:71:cd:6b:
                    75:dc:ce:ad:dc:a6:47:ab:88:ec:db:28:23:83:dd:
                    c2:10:48:d3:85:f5:ec:e4:ee:29:1a:b4:05:6b:07:
                    aa:fd:7f:65:a1:26:14:ad:00:5b:e4:c6:57:f1:b2:
                    13:f4:c8:62:8b:79:37:64:7c:bd:77:d8:3a:d6:b0:
                    39:7e:b8:56:b2:dc:df:21:b6:a0:2b:bf:33:1b:97:
                    2b:d1:c4:ad:de:30:4b:45:43:8e:11:90:e7:7c:ca:
                    d2:a4:87:9f:6c:0b:7a:19:ae:0b:d2:e3:b2:80:5e:
                    4f:9f:89:b5:4d:56:bb:3e:b9:98:a5:d7:36:aa:84:
                    6e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D9:69:81:E7:3F:40:B3:18:A5:92:F5:B4:51:4A:AA:B4:46:85:81
            X509v3 Authority Key Identifier:
                keyid:E5:09:BA:A2:69:3B:17:A5:41:A2:42:E2:F3:1A:9A:5B:B0:EE:68:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/E509BAA2693B17A541A242E2F31A9A5BB0EE68AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E509BAA2693B17A541A242E2F31A9A5BB0EE68AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/3138392e38352e3130382e302f32322d3332203d3e20323730353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:18:d3:ba:06:8f:a2:0d:26:d7:63:e8:15:03:99:76:64:19:
         d8:2e:96:12:d5:49:53:ba:ed:8a:45:15:d2:bc:4b:79:f4:0f:
         e7:f7:cd:0a:59:88:5e:98:0f:83:74:c5:5e:d7:22:bc:76:05:
         d3:92:3e:90:e5:74:0b:fa:18:0f:7b:d7:2d:14:1c:35:eb:e5:
         df:96:14:54:0f:9f:c3:49:7a:57:a7:68:10:fe:7e:a1:39:84:
         5a:ba:55:b3:34:eb:d9:d3:3d:7e:2f:b4:d9:df:17:d4:53:3c:
         d8:75:3c:5c:6d:45:31:6a:4e:49:09:e4:a2:92:7f:2f:af:7a:
         77:75:b3:75:87:85:39:2e:de:64:10:43:ff:99:8e:11:62:fd:
         79:27:6d:81:be:ff:f9:c6:f9:b5:49:28:0e:34:1c:e1:3a:b4:
         22:b3:27:30:e3:7a:2a:98:2e:55:e8:83:dc:70:2d:18:6a:fb:
         06:8e:4e:c0:5b:95:d1:70:52:02:b1:df:14:41:ca:62:0d:9e:
         09:d8:95:30:f3:95:31:44:4f:8b:85:12:de:29:d6:6d:5c:1b:
         1a:7f:2c:c3:14:69:1d:85:77:68:12:32:5c:3a:c4:14:26:b2:
         c9:d7:cb:c9:a3:55:47:9e:0e:6b:e7:96:cb:cd:d2:86:d6:e5:
         13:1b:e8:24
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTWRSZQTAii9x/d1wMyRY4EfSE8AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTUwOUJBQTI2OTNCMTdBNTQxQTI0MkUyRjMxQTlBNUJC
MEVFNjhBRTAeFw0yNDAyMTQxNjA0MjJaFw0yNTAyMTIxNjA5MjJaMDMxMTAvBgNV
BAMTKEExRDk2OTgxRTczRjQwQjMxOEE1OTJGNUI0NTE0QUFBQjQ0Njg1ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfWh/YuTixZZcO5dbiELiE+8hY
FUhMjGPl7tXKKTOYNmFwCicHPzy7JLdEjGKb5Z4rLBNnmZE+ObC21BgsHrL3nqHe
nWTwCiNiD73RVrN3rbqOaNXsIkGZRtXA384tWjR6UmiOnjtBQ3l1mvr9mSbIOQIj
z0awwBd0aA9bXdlblR2m83HNa3Xczq3cpkeriOzbKCOD3cIQSNOF9ezk7ikatAVr
B6r9f2WhJhStAFvkxlfxshP0yGKLeTdkfL132DrWsDl+uFay3N8htqArvzMblyvR
xK3eMEtFQ44RkOd8ytKkh59sC3oZrgvS47KAXk+fibVNVrs+uZil1zaqhG5vAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUodlpgec/QLMYpZL1tFFKqrRGhYEwHwYDVR0j
BBgwFoAU5Qm6omk7F6VBokLi8xqaW7DuaK4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3ZhMVJOV0xRWktYMm1LR1gzQUJOekRmMkdVRW1IdHVkbjhpYUF3UEo1
OWIvMC9FNTA5QkFBMjY5M0IxN0E1NDFBMjQyRTJGMzFBOUE1QkIwRUU2OEFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U1MDlCQUEyNjkzQjE3QTU0
MUEyNDJFMkYzMUE5QTVCQjBFRTY4QUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d2YTFSTldMUVpLWDJtS0dYM0FCTnpEZjJHVUVtSHR1ZG44aWFBd1BKNTliLzAv
MzEzODM5MmUzODM1MmUzMTMwMzgyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM3
MzAzNTM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK9VWwwDQYJKoZIhvcNAQELBQADggEBAJIY07oG
j6INJtdj6BUDmXZkGdgulhLVSVO67YpFFdK8S3n0D+f3zQpZiF6YD4N0xV7XIrx2
BdOSPpDldAv6GA971y0UHDXr5d+WFFQPn8NJelenaBD+fqE5hFq6VbM069nTPX4v
tNnfF9RTPNh1PFxtRTFqTkkJ5KKSfy+vend1s3WHhTku3mQQQ/+ZjhFi/XknbYG+
//nG+bVJKA40HOE6tCKzJzDjeiqYLlXog9xwLRhq+waOTsBbldFwUgKx3xRBymIN
ngnYlTDzlTFET4uFEt4p1m1cGxp/LMMUaR2Fd2gSMlw6xBQmssnXy8mjVUeeDmvn
lsvN0obW5RMb6CQ=
-----END CERTIFICATE-----