Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/3138392e39322e302e302f31342d3134203d3e203232303835.roa
File:                     3138392e39322e302e302f31342d3134203d3e203232303835.roa (raw, json)
Hash identifier:          uJPYgee1zlPJI19mDwIIZ+8sgatSoYKawPHawWyS3oU=
Subject key identifier:   D1:38:51:13:01:66:6D:E2:7B:D9:B0:7C:81:4E:E8:3F:09:B4:D1:10
Certificate issuer:       /CN=D215D0A29BA0041EB88859E15A706C978B675469
Certificate serial:       0C93C5696796EC58E5A6F212B685C0ED54CCB007
Authority key identifier: D2:15:D0:A2:9B:A0:04:1E:B8:88:59:E1:5A:70:6C:97:8B:67:54:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D215D0A29BA0041EB88859E15A706C978B675469.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/3138392e39322e302e302f31342d3134203d3e203232303835.roa
Signing time:             Wed 14 Feb 2024 20:00:00 +0000
ROA not before:           Wed 14 Feb 2024 19:55:00 +0000
ROA not after:            Wed 12 Feb 2025 20:00:00 +0000
asID:                     22085
IP address blocks:        189.92.0.0/14 maxlen: 14

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:93:c5:69:67:96:ec:58:e5:a6:f2:12:b6:85:c0:ed:54:cc:b0:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D215D0A29BA0041EB88859E15A706C978B675469
        Validity
            Not Before: Feb 14 19:55:00 2024 GMT
            Not After : Feb 12 20:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:eb:97:5b:cc:87:7d:40:21:c4:dd:23:53:bc:
                    72:25:b2:b2:7e:53:53:0a:d3:9e:3f:1b:e6:37:42:
                    d5:2a:08:08:84:97:54:f4:d4:59:ff:fa:40:fb:0e:
                    3a:27:3f:31:86:79:a2:ca:bf:fd:fa:8f:bc:21:9d:
                    90:ad:c6:4c:5a:cd:87:e5:7a:da:99:78:65:33:e4:
                    fa:d1:94:c7:1b:04:a1:68:72:67:76:e3:32:ba:07:
                    26:b1:b6:ff:f5:34:48:b9:c2:b7:1f:55:49:7b:e8:
                    f8:76:16:ec:7f:cc:1e:b0:c1:4c:f0:3d:df:7c:fb:
                    c8:1f:fd:43:8b:aa:71:8b:b7:47:2b:d5:1f:76:eb:
                    76:99:50:29:86:0d:26:25:77:d4:e0:52:cd:fc:a9:
                    e1:55:5e:82:cb:25:9f:97:4e:72:1d:23:52:65:0d:
                    d5:ed:b5:e0:9d:c3:4c:76:d4:b8:1c:57:e9:84:a9:
                    2a:f0:2e:aa:4d:de:96:40:a5:76:5a:22:65:d9:25:
                    8d:15:5b:dd:3a:da:06:26:5f:0a:fe:1d:a0:18:f5:
                    c5:3f:5d:c8:e3:ed:86:d1:fd:49:62:0f:23:97:c7:
                    8b:56:49:1f:ad:00:eb:9c:54:84:76:20:2a:8d:7d:
                    08:e3:08:b0:70:12:ea:4f:8c:d9:35:fe:f4:8c:5c:
                    51:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:38:51:13:01:66:6D:E2:7B:D9:B0:7C:81:4E:E8:3F:09:B4:D1:10
            X509v3 Authority Key Identifier:
                keyid:D2:15:D0:A2:9B:A0:04:1E:B8:88:59:E1:5A:70:6C:97:8B:67:54:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/D215D0A29BA0041EB88859E15A706C978B675469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D215D0A29BA0041EB88859E15A706C978B675469.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/3138392e39322e302e302f31342d3134203d3e203232303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.92.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         3b:61:e4:ac:45:78:96:a3:cd:1f:af:da:1a:6b:a2:9f:2a:95:
         73:ed:35:d3:0f:8a:be:e7:3e:8a:2c:84:ae:96:2b:ab:e4:6f:
         c8:7f:35:71:77:9c:01:d6:ba:a2:12:f7:a4:f7:e8:2c:06:87:
         b9:c4:7c:a4:2c:d8:71:0f:7e:ce:e4:8c:c4:49:6e:e9:1f:ee:
         1a:6f:c6:b9:24:ce:8b:55:24:62:c6:bb:d5:38:ce:d8:12:60:
         3e:0a:d4:64:ba:04:fa:ab:9a:df:93:94:e5:b7:57:1d:19:75:
         7c:da:6f:77:cd:e2:a4:b3:5e:e6:55:48:4d:0c:81:85:0d:d7:
         20:a3:0f:d4:96:dd:1c:b8:29:07:89:00:71:d7:56:b9:6f:a8:
         84:b2:5a:da:0e:fd:11:a9:9c:81:da:5c:f8:15:af:fd:dc:d1:
         c1:a0:4d:4e:07:7a:d3:82:30:bc:06:07:1d:13:44:b7:79:b4:
         66:bd:72:32:b9:da:85:f4:67:8f:ba:37:bc:4b:66:f7:fd:b0:
         9e:d5:91:dd:29:6e:0a:f6:62:36:90:d0:74:8c:e2:e4:64:0b:
         45:ae:74:73:86:44:12:ec:7a:a9:e8:54:79:9c:a8:91:da:23:
         41:bb:76:e6:7a:0c:78:60:9e:ce:b1:35:8b:fb:3c:15:07:6e:
         09:4f:d5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----