Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/3136302e31392e3234342e302f32322d3332203d3e20323636313638.roa
File:                     3136302e31392e3234342e302f32322d3332203d3e20323636313638.roa (raw, json)
Hash identifier:          Z99pYd9+WcXG/KW/o1OCbDvyuCcp1j6E35TwzBnBv+4=
Subject key identifier:   FF:AF:E4:DB:89:64:0B:2B:14:30:D1:4F:3E:77:13:9C:0D:68:E1:FF
Certificate issuer:       /CN=7591761A375FA28BE01555D39899D25E97FAD3A1
Certificate serial:       278C03E1C66342C62B4C9EE34E1BCCEA117E2380
Authority key identifier: 75:91:76:1A:37:5F:A2:8B:E0:15:55:D3:98:99:D2:5E:97:FA:D3:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7591761A375FA28BE01555D39899D25E97FAD3A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/3136302e31392e3234342e302f32322d3332203d3e20323636313638.roa
Signing time:             Mon 25 Sep 2023 18:55:56 +0000
ROA not before:           Mon 25 Sep 2023 18:50:56 +0000
ROA not after:            Mon 23 Sep 2024 18:55:56 +0000
asID:                     266168
IP address blocks:        160.19.244.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:8c:03:e1:c6:63:42:c6:2b:4c:9e:e3:4e:1b:cc:ea:11:7e:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7591761A375FA28BE01555D39899D25E97FAD3A1
        Validity
            Not Before: Sep 25 18:50:56 2023 GMT
            Not After : Sep 23 18:55:56 2024 GMT
        Subject: CN=FFAFE4DB89640B2B1430D14F3E77139C0D68E1FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:10:6f:08:d2:0b:8a:4e:f8:b3:13:4e:fa:77:
                    5b:dc:8c:dd:a5:bc:8a:9c:f8:5f:03:4e:8c:aa:32:
                    7e:97:7d:88:2f:bb:67:c7:70:72:39:61:8f:c1:cd:
                    38:0d:43:72:8c:64:ba:f6:29:ce:ac:64:08:76:64:
                    75:46:07:62:34:8a:96:5b:ee:e5:72:8e:2e:b1:0b:
                    0e:dd:60:34:1c:9b:25:dc:50:8e:f3:b3:59:d7:50:
                    b2:ce:54:e7:f1:5f:ed:5c:84:74:e1:8a:02:31:ca:
                    e6:8d:d5:fb:d3:46:5d:95:f3:86:57:4f:04:3e:08:
                    2b:c9:46:fc:c3:22:90:bc:cb:dd:9d:0f:b7:4c:58:
                    5c:69:e0:79:c3:2b:ca:31:b1:74:93:96:3c:c9:f5:
                    ae:f2:3e:0c:e3:ca:3c:03:0e:d2:b6:0d:a0:e9:db:
                    7c:31:78:81:d2:df:4c:24:19:d6:99:27:16:a2:09:
                    e6:7a:69:e7:2f:c1:72:2a:92:4b:ff:78:2c:a5:94:
                    67:b4:47:b9:6f:fb:f7:3e:14:90:b0:29:5c:f4:f9:
                    5d:35:ce:66:66:53:4b:e6:54:b7:c2:dc:2b:27:bd:
                    06:7e:54:51:a7:11:a7:20:7b:0b:7c:ca:68:b7:a8:
                    91:9a:07:53:06:87:a7:65:f7:4e:ab:d8:95:30:f9:
                    bd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:AF:E4:DB:89:64:0B:2B:14:30:D1:4F:3E:77:13:9C:0D:68:E1:FF
            X509v3 Authority Key Identifier:
                keyid:75:91:76:1A:37:5F:A2:8B:E0:15:55:D3:98:99:D2:5E:97:FA:D3:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/7591761A375FA28BE01555D39899D25E97FAD3A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7591761A375FA28BE01555D39899D25E97FAD3A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/3136302e31392e3234342e302f32322d3332203d3e20323636313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:e8:2b:b8:f5:cb:df:55:95:1d:a8:9e:25:78:13:37:55:2d:
         9e:41:bd:fa:13:6e:bf:f7:52:36:e5:b9:d0:24:9b:21:af:74:
         e3:e3:09:f5:fb:e5:c3:7e:ff:a5:91:ea:ae:cd:b1:ef:53:56:
         97:ac:bd:78:b9:68:6b:33:3d:9c:50:7a:7d:9f:fd:79:3a:6c:
         66:02:00:2b:45:03:0e:5c:16:6a:1b:33:93:db:46:22:29:82:
         57:a8:01:5d:4c:3b:e5:62:f6:d5:54:8a:4b:da:73:99:16:99:
         1a:15:ca:01:d5:2e:8c:fa:2c:0c:4e:f3:60:3f:3c:48:28:3c:
         c8:79:5d:54:86:23:8f:14:2a:85:8a:eb:22:4f:f9:d0:39:0d:
         05:3f:48:fe:55:1c:97:19:a7:63:19:2b:f5:a2:06:2d:1e:6b:
         4c:9f:4b:c1:a9:11:57:35:5f:5a:47:7d:67:28:f8:d9:29:5e:
         05:cd:c7:5d:85:c5:36:41:63:33:15:ba:79:a4:c2:aa:3d:2e:
         52:ae:27:21:51:bc:35:6a:dc:60:69:d2:67:8d:75:0d:51:c2:
         02:31:f7:42:5c:31:60:82:83:54:cc:9d:4d:9e:b5:7e:85:5c:
         d4:ac:40:6d:ac:54:37:c1:bf:0d:06:e8:1c:dd:18:7b:54:14:
         7b:48:21:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----