Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3136382e39302e3138302e302f32332d3233203d3e20323632343931.roa
File:                     3136382e39302e3138302e302f32332d3233203d3e20323632343931.roa (raw, json)
Hash identifier:          PPIU8rbW2bQj8Ycj81u3Cf2UYrYBsGXfe8cvF03f8cs=
Subject key identifier:   16:87:02:7E:FB:79:4E:9B:B0:25:A0:95:C0:85:B6:08:B6:41:9B:3C
Certificate issuer:       /CN=FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC
Certificate serial:       5BC200976D858843CE955CD47395C74A3494D8E6
Authority key identifier: FE:2A:6E:1A:F0:84:7E:A1:A7:D6:77:E2:DA:09:12:A1:AB:F4:B9:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3136382e39302e3138302e302f32332d3233203d3e20323632343931.roa
Signing time:             Sat 26 Nov 2022 02:46:03 +0000
ROA not before:           Sat 26 Nov 2022 02:41:03 +0000
ROA not after:            Sat 25 Nov 2023 02:46:03 +0000
asID:                     262491
IP address blocks:        168.90.180.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:c2:00:97:6d:85:88:43:ce:95:5c:d4:73:95:c7:4a:34:94:d8:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC
        Validity
            Not Before: Nov 26 02:41:03 2022 GMT
            Not After : Nov 25 02:46:03 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a0:72:74:12:bd:5f:59:5b:75:f9:54:cf:34:
                    98:c2:be:1f:3a:73:e9:e1:8b:5b:cd:fe:d2:0f:9b:
                    d7:01:e9:0f:3b:ed:79:e8:ed:01:83:41:12:16:34:
                    13:21:37:07:0e:f0:b2:4a:03:cc:a0:07:8d:dd:86:
                    b0:35:14:59:40:5b:93:d2:6e:b7:df:e5:b2:46:bc:
                    c8:2a:7c:89:88:11:63:6b:1e:97:4f:60:14:38:32:
                    ac:56:7e:e7:5b:e4:41:06:94:cc:5d:b1:01:8a:70:
                    c9:14:5f:ef:d9:75:9d:23:73:da:21:4e:e8:e0:da:
                    c7:77:76:0b:5d:6e:d4:a4:bb:62:ce:bd:ff:a2:80:
                    ef:a5:ca:18:82:07:ce:32:0b:a4:81:9a:41:bf:95:
                    ed:f3:cb:83:78:92:8c:1d:4a:28:d6:af:b8:bb:0e:
                    26:80:b8:7e:f7:99:38:a2:f5:58:dd:89:93:8f:7d:
                    12:2d:9f:69:a7:b0:d9:93:46:c4:84:d8:c9:2f:09:
                    34:0d:fa:e0:e2:4b:a7:47:57:b0:f2:e3:7f:5e:06:
                    f3:f9:48:86:ff:ff:5a:17:76:37:8f:55:ef:aa:f4:
                    66:59:aa:f4:a7:5e:00:b3:4d:2a:14:38:51:68:7a:
                    eb:4d:a6:74:3c:d6:39:99:72:98:a1:f1:6e:6f:90:
                    31:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:87:02:7E:FB:79:4E:9B:B0:25:A0:95:C0:85:B6:08:B6:41:9B:3C
            X509v3 Authority Key Identifier:
                keyid:FE:2A:6E:1A:F0:84:7E:A1:A7:D6:77:E2:DA:09:12:A1:AB:F4:B9:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3136382e39302e3138302e302f32332d3233203d3e20323632343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:d3:a1:0c:62:92:a3:2d:82:2d:c0:2e:32:65:5d:62:59:9c:
         fb:7d:ec:4c:0a:43:7b:99:87:22:ec:c2:91:da:85:72:a7:91:
         64:e2:d7:ed:ee:2d:d2:4d:07:d9:a4:23:0a:02:f4:95:f3:3c:
         cf:46:f6:a7:2d:8f:bf:54:34:24:d7:cc:70:68:a6:ee:2d:d0:
         a1:41:cf:93:dd:a2:1c:33:0e:f9:e2:57:bb:d1:9a:51:03:2f:
         9f:bc:4f:3b:1f:74:ad:58:fc:a7:3c:fd:5a:54:85:16:ed:f0:
         e9:db:1a:64:07:06:70:3f:fe:3e:5b:3e:0a:9f:c1:78:7c:83:
         f0:1d:39:d1:66:8f:86:1e:f3:2d:a3:9c:e1:e9:d4:a9:64:e6:
         84:14:fd:49:98:65:f8:e8:91:48:b7:26:ca:69:dd:5a:b7:75:
         09:6f:fe:e5:61:ee:24:16:a7:4f:f7:3c:fa:e4:e6:23:50:66:
         3f:bf:64:3b:d9:4c:b3:6e:a6:f1:46:10:f0:0a:92:5b:a1:04:
         32:4b:cf:e5:75:89:9b:79:fd:22:ff:48:c3:c5:bd:20:c8:c9:
         81:d3:20:f2:d1:2b:24:4f:5f:62:38:3b:93:bf:7d:b9:58:8a:
         08:4a:a2:cf:8e:d4:ae:c6:9d:b4:68:50:51:a6:5f:08:a9:d9:
         91:53:2a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----