Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/34352e3232362e38382e302f32332d3233203d3e20323632343934.roa
File:                     34352e3232362e38382e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          C9FxhS1eee1yDohi+o1Y67uGmn0yBzXHnn/ivpr0Vcg=
Subject key identifier:   2A:F2:B0:C8:03:8F:05:0C:51:10:AD:1A:4F:D2:49:BD:76:78:84:A8
Certificate issuer:       /CN=87BB708DC32E9016081213188D40053E40CA51AB
Certificate serial:       62E7158BC7BC16BFA84646E4AF78397E56474F73
Authority key identifier: 87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/34352e3232362e38382e302f32332d3233203d3e20323632343934.roa
Signing time:             Thu 19 Sep 2024 14:11:41 +0000
ROA not before:           Thu 19 Sep 2024 14:06:41 +0000
ROA not after:            Thu 18 Sep 2025 14:11:41 +0000
asID:                     262494
IP address blocks:        45.226.88.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e7:15:8b:c7:bc:16:bf:a8:46:46:e4:af:78:39:7e:56:47:4f:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87BB708DC32E9016081213188D40053E40CA51AB
        Validity
            Not Before: Sep 19 14:06:41 2024 GMT
            Not After : Sep 18 14:11:41 2025 GMT
        Subject: CN=2AF2B0C8038F050C5110AD1A4FD249BD767884A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:17:9d:75:b5:e8:96:7c:43:83:37:c1:58:05:
                    01:4c:cf:a5:34:0a:54:06:2e:ce:c6:89:62:3a:f0:
                    47:04:79:aa:ca:1b:73:f4:ad:57:c2:22:9e:91:db:
                    d0:d3:fc:b3:d2:5f:b2:5f:b4:7b:90:14:d5:af:d7:
                    95:78:f6:9e:6e:0e:18:c9:19:c8:78:7f:3c:65:bd:
                    93:94:a7:0e:91:20:40:3d:1f:72:a3:ae:9e:39:e7:
                    70:68:81:69:70:aa:52:f0:02:7a:06:8e:c6:ea:e5:
                    a3:0d:5f:5e:1a:87:9f:74:09:4e:58:b9:a7:a0:94:
                    21:ee:8e:3c:f8:9b:53:fe:81:5f:2b:b2:cd:9b:72:
                    db:8e:90:e3:8b:ae:a5:21:79:f7:6d:b8:2d:ce:47:
                    98:cd:15:cf:4d:3b:1e:56:04:58:56:47:db:d9:1c:
                    a9:62:bf:7a:68:13:a7:8b:d0:7d:d0:0a:a9:07:bc:
                    c5:d2:c2:57:aa:18:09:b7:57:1d:22:13:24:65:87:
                    d5:f4:cf:1c:3a:12:2c:4a:ea:77:d0:65:2c:ca:cd:
                    96:70:bb:15:17:31:d2:d3:69:c9:aa:47:52:fe:04:
                    f6:46:22:fb:9b:2d:8d:89:d6:54:ff:18:46:3d:29:
                    9a:cb:14:95:d0:d1:f7:b0:c1:f5:13:1f:d1:b0:9c:
                    64:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F2:B0:C8:03:8F:05:0C:51:10:AD:1A:4F:D2:49:BD:76:78:84:A8
            X509v3 Authority Key Identifier:
                keyid:87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/87BB708DC32E9016081213188D40053E40CA51AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/34352e3232362e38382e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:c4:c8:95:50:58:56:69:69:b6:a4:02:f6:11:0d:1d:9d:93:
         72:4b:9e:48:d0:9c:12:2e:e1:de:96:9e:5d:4e:5c:1b:13:7a:
         8d:24:23:aa:9b:16:d9:ab:e6:9d:1a:e8:2e:a8:3a:8b:3f:12:
         11:09:c3:07:53:8f:27:c0:16:6a:4c:65:df:91:71:1f:a3:3b:
         20:52:88:d7:6a:ab:20:37:fb:30:21:90:80:b3:59:d1:46:c8:
         70:2e:35:c5:2d:98:3c:06:ce:4d:cb:c3:6c:57:ed:d9:af:07:
         89:0e:39:6c:17:44:81:41:2f:b2:80:cb:7f:63:bc:c7:20:70:
         a3:ee:fa:8a:ab:e7:0b:a8:e2:71:b0:e2:e9:c5:f7:34:8a:2c:
         eb:2b:77:3d:2e:33:0c:e6:50:bc:37:98:c3:0c:0f:84:d0:c7:
         9f:3b:3e:12:0c:80:6d:f8:1d:b5:8e:33:ac:dd:f8:24:ca:a8:
         5c:d2:79:36:4e:e5:0d:7c:16:9e:d5:b9:a6:d6:12:70:c5:10:
         42:c1:7e:50:b8:7b:a6:c9:ac:91:e7:1d:84:38:93:3d:c7:91:
         6e:27:8c:62:40:15:be:8a:5f:e5:4d:da:12:48:0e:f9:43:76:
         c4:ac:5d:d1:9d:af:cb:b8:e5:6c:9d:34:07:66:e5:52:44:3d:
         5f:b6:29:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----