Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/1/3138362e3230392e39302e302f32332d3233203d3e203238363130.roa
File:                     3138362e3230392e39302e302f32332d3233203d3e203238363130.roa (raw, json)
Hash identifier:          qvspA0tl144ykwxMkQuFBQiFHfug4yI72Do1/JtEHI4=
Subject key identifier:   81:D9:F3:F2:00:1A:42:05:03:B8:A7:60:50:DB:BF:F2:1F:2A:F2:5A
Certificate issuer:       /CN=4B5276CDFF6FA0A23F162671193E4C132CBC55E8
Certificate serial:       4776205810D0BAD6092EFE4FBCCC2CC13662FA50
Authority key identifier: 4B:52:76:CD:FF:6F:A0:A2:3F:16:26:71:19:3E:4C:13:2C:BC:55:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B5276CDFF6FA0A23F162671193E4C132CBC55E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/1/3138362e3230392e39302e302f32332d3233203d3e203238363130.roa
Signing time:             Thu 04 Apr 2024 20:03:04 +0000
ROA not before:           Thu 04 Apr 2024 19:58:04 +0000
ROA not after:            Thu 03 Apr 2025 20:03:04 +0000
asID:                     28610
IP address blocks:        186.209.90.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:76:20:58:10:d0:ba:d6:09:2e:fe:4f:bc:cc:2c:c1:36:62:fa:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B5276CDFF6FA0A23F162671193E4C132CBC55E8
        Validity
            Not Before: Apr  4 19:58:04 2024 GMT
            Not After : Apr  3 20:03:04 2025 GMT
        Subject: CN=81D9F3F2001A420503B8A76050DBBFF21F2AF25A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:72:7e:43:e2:31:1a:78:56:af:b6:f2:07:b3:
                    e4:63:23:14:cc:76:f5:52:53:2c:b9:80:af:60:cd:
                    89:74:79:46:de:aa:b7:90:04:5b:b6:a3:13:d7:42:
                    11:f5:59:02:ac:fe:c9:81:96:51:72:d6:49:91:0e:
                    68:ac:66:0f:41:a0:77:52:2e:38:20:5e:96:b3:8f:
                    70:f7:67:04:d1:0c:0f:00:22:f6:67:43:ce:89:e7:
                    8a:fc:e7:5a:ad:58:c1:86:cd:a7:b7:80:47:38:fc:
                    2f:1c:ca:9d:30:60:26:24:c6:aa:48:c3:30:a1:82:
                    2f:ce:20:0d:45:3c:51:ca:74:fb:a9:11:52:8b:a1:
                    fd:93:d8:3b:1c:d4:28:23:49:66:f9:25:30:d2:ad:
                    a5:16:a9:c8:e3:c4:65:80:f2:43:cb:cd:85:20:e2:
                    72:bf:ab:32:dc:91:64:2e:35:44:75:4f:4a:72:08:
                    b2:91:57:82:af:64:af:42:a3:74:ef:f2:c1:eb:60:
                    72:57:66:43:97:4a:d0:f3:0e:d5:f2:be:2f:13:84:
                    87:49:82:58:01:09:e1:af:46:1d:1b:aa:16:97:85:
                    1c:37:f3:c5:08:c1:4c:18:ee:b9:9f:5b:21:b4:00:
                    0d:46:c5:00:5a:7d:00:41:c7:0e:9f:e1:5e:f4:12:
                    a5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D9:F3:F2:00:1A:42:05:03:B8:A7:60:50:DB:BF:F2:1F:2A:F2:5A
            X509v3 Authority Key Identifier:
                keyid:4B:52:76:CD:FF:6F:A0:A2:3F:16:26:71:19:3E:4C:13:2C:BC:55:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/1/4B5276CDFF6FA0A23F162671193E4C132CBC55E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B5276CDFF6FA0A23F162671193E4C132CBC55E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/1/3138362e3230392e39302e302f32332d3233203d3e203238363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:45:a7:75:0f:b9:7c:99:a2:21:52:bb:67:94:af:89:c8:76:
         07:c8:ab:57:8b:0b:7d:33:2b:5c:1e:2a:90:60:bc:76:c6:fb:
         89:d2:ef:e0:92:a3:6a:00:71:bb:e5:33:0d:9a:76:de:bd:9b:
         83:08:be:da:96:03:0d:4e:3b:82:56:5c:58:ed:c0:b2:df:e6:
         1e:a6:9c:58:8d:b4:4b:4b:6c:6f:82:93:30:20:12:7b:69:1d:
         b3:bf:aa:74:62:37:fa:fc:51:4e:09:fb:7b:18:3c:8f:dd:5b:
         47:37:1a:66:ca:fc:eb:62:46:ea:83:b2:c7:93:2d:d7:68:f2:
         37:06:8d:59:c4:81:ed:e0:63:41:85:0e:d3:0a:55:0e:ae:93:
         64:d7:ab:0b:56:e7:be:ce:a1:92:44:66:09:f6:b3:da:8e:5b:
         fb:97:f5:b5:6f:b3:a6:2b:41:c3:28:d5:e4:c8:eb:1d:a2:28:
         0f:e6:05:b0:52:ef:3a:68:f4:e2:d1:e8:2c:d6:76:6a:cf:73:
         ef:d4:fe:95:1e:60:e7:68:26:74:f0:81:f8:83:ca:af:ce:56:
         5f:3a:c8:5c:f8:e2:cb:b2:8f:bd:22:a8:b9:25:eb:54:93:43:
         a5:eb:c7:de:dd:bc:4f:7c:1c:c2:54:0c:a8:71:77:d2:76:db:
         4f:09:8b:dc
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUR3YgWBDQutYJLv5PvMwswTZi+lAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEI1Mjc2Q0RGRjZGQTBBMjNGMTYyNjcxMTkzRTRDMTMy
Q0JDNTVFODAeFw0yNDA0MDQxOTU4MDRaFw0yNTA0MDMyMDAzMDRaMDMxMTAvBgNV
BAMTKDgxRDlGM0YyMDAxQTQyMDUwM0I4QTc2MDUwREJCRkYyMUYyQUYyNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjcn5D4jEaeFavtvIHs+RjIxTM
dvVSUyy5gK9gzYl0eUbeqreQBFu2oxPXQhH1WQKs/smBllFy1kmRDmisZg9BoHdS
LjggXpazj3D3ZwTRDA8AIvZnQ86J54r851qtWMGGzae3gEc4/C8cyp0wYCYkxqpI
wzChgi/OIA1FPFHKdPupEVKLof2T2Dsc1CgjSWb5JTDSraUWqcjjxGWA8kPLzYUg
4nK/qzLckWQuNUR1T0pyCLKRV4KvZK9Co3Tv8sHrYHJXZkOXStDzDtXyvi8ThIdJ
glgBCeGvRh0bqhaXhRw388UIwUwY7rmfWyG0AA1GxQBafQBBxw6f4V70EqVtAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUgdnz8gAaQgUDuKdgUNu/8h8q8lowHwYDVR0j
BBgwFoAUS1J2zf9voKI/FiZxGT5MEyy8VegwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmYyd2tGOXdYWWFEcEZKYkJaaWZSMjVrRkdVNkVEa0NZNUdLZGk4Nmda
a0gvMS80QjUyNzZDREZGNkZBMEEyM0YxNjI2NzExOTNFNEMxMzJDQkM1NUU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCNTI3NkNERkY2RkEwQTIz
RjE2MjY3MTE5M0U0QzEzMkNCQzU1RTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJmMndrRjl3WFlhRHBGSmJCWmlmUjI1a0ZHVTZFRGtDWTVHS2RpODZnWmtILzEv
MzEzODM2MmUzMjMwMzkyZTM5MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM4
MzYzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQButFaMA0GCSqGSIb3DQEBCwUAA4IBAQBSRad1D7l8
maIhUrtnlK+JyHYHyKtXiwt9MytcHiqQYLx2xvuJ0u/gkqNqAHG75TMNmnbevZuD
CL7algMNTjuCVlxY7cCy3+YeppxYjbRLS2xvgpMwIBJ7aR2zv6p0Yjf6/FFOCft7
GDyP3VtHNxpmyvzrYkbqg7LHky3XaPI3Bo1ZxIHt4GNBhQ7TClUOrpNk16sLVue+
zqGSRGYJ9rPajlv7l/W1b7OmK0HDKNXkyOsdoigP5gWwUu86aPTi0egs1nZqz3Pv
1P6VHmDnaCZ08IH4g8qvzlZfOshc+OLLso+9Iqi5JetUk0Ol68fe3bxPfBzCVAyo
cXfSdttPCYvc
-----END CERTIFICATE-----