Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39362e302f32302d3234203d3e20323033.roa
File:                     3138372e36312e39362e302f32302d3234203d3e20323033.roa (raw, json)
Hash identifier:          +CyHZbDJmPCGRlkMveOIrUVqeR8Ki1gSntr/btAcGr0=
Subject key identifier:   E4:47:EE:87:DF:2C:F7:BE:FF:FA:7A:87:00:07:11:66:E6:BE:52:8C
Certificate issuer:       /CN=F16C1087BB1A5260CB32E45FBAB05BFC61177DDE
Certificate serial:       24E5F214F460ADD80D1EDEE29253BCF56535054A
Authority key identifier: F1:6C:10:87:BB:1A:52:60:CB:32:E4:5F:BA:B0:5B:FC:61:17:7D:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F16C1087BB1A5260CB32E45FBAB05BFC61177DDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39362e302f32302d3234203d3e20323033.roa
Signing time:             Thu 23 Feb 2023 16:51:09 +0000
ROA not before:           Thu 23 Feb 2023 16:46:09 +0000
ROA not after:            Thu 22 Feb 2024 16:51:09 +0000
asID:                     203
IP address blocks:        187.61.96.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:e5:f2:14:f4:60:ad:d8:0d:1e:de:e2:92:53:bc:f5:65:35:05:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F16C1087BB1A5260CB32E45FBAB05BFC61177DDE
        Validity
            Not Before: Feb 23 16:46:09 2023 GMT
            Not After : Feb 22 16:51:09 2024 GMT
        Subject: CN=E447EE87DF2CF7BEFFFA7A8700071166E6BE528C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5f:21:38:4b:8b:97:6d:46:d1:6c:62:a8:a7:
                    67:2a:1f:2b:dc:d1:63:06:4e:2f:36:d5:37:76:9e:
                    59:be:c4:42:78:44:71:be:bf:d0:42:08:11:3b:07:
                    90:eb:79:d4:fe:9e:6c:4a:b4:f2:b3:ee:72:7c:46:
                    c5:c8:f5:ab:d4:7d:a1:d1:c5:9a:c4:d1:1b:1e:f1:
                    00:d5:03:fb:96:9d:b1:83:35:28:78:68:07:d7:f2:
                    9a:de:cb:0c:78:ed:3e:e4:d7:9b:d7:1f:3a:57:a0:
                    24:56:e0:68:82:4d:59:67:14:31:0c:10:74:61:33:
                    b0:d9:2a:4b:f0:b0:0e:af:5b:90:e1:3a:b8:39:b3:
                    fe:a8:12:80:de:8b:f3:25:6c:2e:1c:10:d3:43:69:
                    e6:94:6d:ee:35:fb:ee:d8:f2:67:f6:c0:15:b0:ce:
                    34:09:76:f5:4d:38:ea:78:fe:49:08:59:6c:71:0b:
                    d6:9b:4b:59:f9:56:14:04:f6:2a:68:fd:bb:dc:0a:
                    35:dc:f4:fc:7f:d7:d5:b4:2e:4a:6e:c2:ea:f4:3d:
                    56:e1:23:0c:04:83:63:88:29:42:39:20:3d:5c:1a:
                    5b:81:c0:c1:14:90:50:59:3f:94:9b:76:dd:dd:8e:
                    7d:19:bc:7a:2e:64:e3:99:8d:53:94:75:ad:8a:dd:
                    06:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:47:EE:87:DF:2C:F7:BE:FF:FA:7A:87:00:07:11:66:E6:BE:52:8C
            X509v3 Authority Key Identifier:
                keyid:F1:6C:10:87:BB:1A:52:60:CB:32:E4:5F:BA:B0:5B:FC:61:17:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/F16C1087BB1A5260CB32E45FBAB05BFC61177DDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F16C1087BB1A5260CB32E45FBAB05BFC61177DDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39362e302f32302d3234203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b8:58:2f:e6:8c:82:2e:16:40:32:b8:42:e1:46:0d:39:c8:53:
         b8:22:5e:b3:90:e5:2d:1d:f1:99:fc:86:da:58:4b:bd:be:24:
         21:68:00:e1:ae:8f:99:b1:3e:dc:62:1d:1d:97:78:ac:14:82:
         eb:2c:3f:15:e7:ee:cd:2f:81:ec:96:71:38:03:bc:b3:b3:cd:
         9e:58:27:4b:75:49:34:2d:78:26:6a:b0:6b:24:21:bf:e5:54:
         7a:5b:73:97:e5:3a:b0:f5:8d:ab:cd:87:a4:a9:98:9f:c6:c0:
         23:41:65:1d:c4:53:f3:8b:cb:e6:49:16:3d:4c:0a:28:60:b1:
         ca:55:b2:e0:c1:06:d8:a4:b7:fb:a9:58:22:2a:06:a1:cd:a5:
         40:35:62:b0:d4:ae:ff:e7:34:e3:32:8a:79:c1:23:c3:6c:1e:
         1d:de:24:bf:a2:23:b4:7c:22:82:5f:50:91:91:43:9e:07:ed:
         bd:d3:fc:06:75:73:04:ad:a1:13:a6:00:d9:79:20:53:63:ea:
         18:db:91:f6:ff:04:98:89:d2:3c:ea:35:05:16:b1:03:03:0b:
         57:a2:1a:06:2f:5d:4c:da:14:89:73:d9:53:8f:39:aa:11:7b:
         12:89:6e:9e:6b:4e:a3:2d:a2:dc:55:5e:a0:69:05:62:a6:8a:
         b0:14:86:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----