Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39362e302f32302d3234203d3e20323032.roa
File:                     3138362e3230392e39362e302f32302d3234203d3e20323032.roa (raw, json)
Hash identifier:          7Nx6+z8U28DOS6oJTI0HuCV9BtaMcr2YWSyo649DNPY=
Subject key identifier:   68:15:3F:F5:A4:12:2C:D3:01:86:00:B9:0E:40:DE:27:C3:78:61:3B
Certificate issuer:       /CN=F16C1087BB1A5260CB32E45FBAB05BFC61177DDE
Certificate serial:       1C38FA1D0BE087DF32BB05DC7D1FB10BD9BCCFC2
Authority key identifier: F1:6C:10:87:BB:1A:52:60:CB:32:E4:5F:BA:B0:5B:FC:61:17:7D:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F16C1087BB1A5260CB32E45FBAB05BFC61177DDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39362e302f32302d3234203d3e20323032.roa
Signing time:             Thu 23 Feb 2023 16:35:50 +0000
ROA not before:           Thu 23 Feb 2023 16:30:50 +0000
ROA not after:            Thu 22 Feb 2024 16:35:50 +0000
asID:                     202
IP address blocks:        186.209.96.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:38:fa:1d:0b:e0:87:df:32:bb:05:dc:7d:1f:b1:0b:d9:bc:cf:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F16C1087BB1A5260CB32E45FBAB05BFC61177DDE
        Validity
            Not Before: Feb 23 16:30:50 2023 GMT
            Not After : Feb 22 16:35:50 2024 GMT
        Subject: CN=68153FF5A4122CD3018600B90E40DE27C378613B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ce:e1:2a:a0:08:b9:c2:92:8f:83:94:fc:a4:
                    91:86:f0:36:89:60:d3:2c:71:c1:95:85:34:40:a2:
                    58:1a:a4:3c:2d:5e:2c:b0:0a:7e:2c:8e:2a:81:53:
                    9e:5a:52:e1:da:e1:0e:36:1d:5b:4c:98:1c:4f:e5:
                    14:f1:f5:3c:db:48:be:2f:d0:43:a2:ed:31:5b:ce:
                    19:28:36:b0:ce:7d:b8:2b:aa:ea:a7:b2:42:14:30:
                    31:73:a5:f9:59:c2:49:fd:2a:ef:28:21:80:6c:67:
                    91:eb:53:1b:d4:9e:53:d8:ce:0c:4a:fe:7f:ec:34:
                    e8:68:2f:96:94:a8:0f:19:fc:d8:68:7b:7a:fd:1b:
                    cf:0b:dd:71:56:8d:9e:cf:aa:94:14:9e:d3:47:53:
                    3a:d8:80:37:1a:a5:ff:08:20:c0:b0:2b:3d:98:e6:
                    cb:12:6e:43:3d:33:5b:ca:2a:36:65:f2:f4:7d:23:
                    d9:0e:82:34:b5:96:2e:b8:6a:08:6c:57:bc:09:b6:
                    7f:b1:e1:10:a8:01:52:6b:05:fe:f9:66:14:d7:db:
                    30:7d:e2:61:50:9a:05:8e:76:c3:c2:f9:50:2a:15:
                    8e:66:bc:60:8d:1d:f0:62:1e:6e:c1:40:c1:b9:f2:
                    f8:4f:11:70:e6:59:79:6e:22:84:10:4f:7e:ef:8b:
                    f0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:15:3F:F5:A4:12:2C:D3:01:86:00:B9:0E:40:DE:27:C3:78:61:3B
            X509v3 Authority Key Identifier:
                keyid:F1:6C:10:87:BB:1A:52:60:CB:32:E4:5F:BA:B0:5B:FC:61:17:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/F16C1087BB1A5260CB32E45FBAB05BFC61177DDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F16C1087BB1A5260CB32E45FBAB05BFC61177DDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39362e302f32302d3234203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         33:ee:86:b4:9c:90:fe:12:31:ad:a0:5b:c1:66:71:75:1c:8e:
         87:97:47:17:12:7f:39:e5:9f:50:fc:d3:a2:34:96:95:bd:ee:
         b6:c1:85:b4:d8:bd:c5:4c:0d:d7:10:01:c8:06:08:01:95:f4:
         22:c3:f1:31:28:9d:1f:d6:9b:74:a8:1e:46:f0:c7:85:4a:1c:
         79:ad:64:44:58:75:e6:04:05:4f:e0:22:42:9c:e0:91:af:49:
         84:65:a9:2c:9b:ad:24:8b:15:6a:3c:88:59:fa:ab:c9:43:f7:
         d4:83:8f:9f:29:39:d5:c7:bc:b3:98:78:a9:cc:bf:d5:89:c0:
         b8:9b:d5:b3:aa:a3:e3:38:8a:65:57:3f:85:db:ca:a8:22:4a:
         4f:02:cd:f3:6d:8d:d8:71:33:21:32:95:02:fc:c4:ae:17:c8:
         f7:d8:88:31:7f:ea:2c:1a:fa:19:39:97:48:44:90:bd:d3:a3:
         e8:60:4e:c6:ff:37:3a:79:6b:e9:60:c6:88:ee:07:d9:9d:5c:
         72:de:43:8e:7f:aa:c0:83:4f:28:67:f4:cc:2b:7f:70:28:af:
         68:c2:b5:93:d3:0f:eb:09:26:76:2b:b9:d4:32:52:6f:82:e5:
         18:e1:3a:97:b3:f2:c4:73:08:a1:b1:0c:57:22:ac:0c:e0:cf:
         0c:15:fe:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----