Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e302e302f32302d3230203d3e203238333338.roa
File:                     3138392e34352e302e302f32302d3230203d3e203238333338.roa (raw, json)
Hash identifier:          I6nO2j50TCHW3aW9e9hAvwMcXg1lfMk2p6/100JhBmo=
Subject key identifier:   C2:EE:2B:F1:72:C3:AB:DF:35:F6:78:67:39:21:28:A6:63:C0:68:B1
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       30AF3AF908E03AEB11810B3FBA3B549326240237
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e302e302f32302d3230203d3e203238333338.roa
Signing time:             Wed 29 May 2024 18:17:14 +0000
ROA not before:           Wed 29 May 2024 18:12:14 +0000
ROA not after:            Wed 28 May 2025 18:17:14 +0000
asID:                     28338
IP address blocks:        189.45.0.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:af:3a:f9:08:e0:3a:eb:11:81:0b:3f:ba:3b:54:93:26:24:02:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: May 29 18:12:14 2024 GMT
            Not After : May 28 18:17:14 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:22:3e:af:40:90:92:3b:b2:1c:83:93:0f:4a:
                    a6:58:df:e7:88:17:f5:3a:95:6e:f6:97:d5:0b:1f:
                    0d:65:dc:fa:78:61:6b:73:ae:c5:a2:d6:8b:f1:ad:
                    96:74:94:fa:d0:f8:29:4f:24:6f:c2:5e:1c:0c:e4:
                    8d:20:01:0c:49:e4:c7:20:1c:ff:00:3f:99:8e:1b:
                    6b:14:af:04:5b:0c:bd:64:1a:c3:b4:dc:45:cf:7b:
                    e3:81:b0:a5:88:98:53:a0:6f:c7:50:8f:ab:55:55:
                    ce:24:f7:61:a0:65:e9:aa:93:44:fc:a4:ed:66:9f:
                    79:13:51:c7:1b:57:b3:54:d8:47:96:74:1b:cc:c9:
                    f7:ce:9f:93:47:a5:59:0f:91:3d:89:b0:8f:e9:21:
                    b9:e1:6f:a6:7a:e8:41:d4:73:d4:61:c5:b5:21:03:
                    e4:8b:31:63:b7:91:72:cb:d6:22:74:ac:ad:57:c4:
                    5e:74:24:90:98:20:27:4b:6c:ac:39:6c:20:2b:4f:
                    85:e0:4d:93:7c:90:fc:cb:b0:5c:ac:da:e4:80:c4:
                    cf:6a:41:a9:11:d8:a8:4c:dd:09:59:97:d1:d3:31:
                    d8:be:bc:8b:ff:03:51:31:00:b8:ca:ca:bc:ea:3f:
                    9e:20:a4:dd:70:e2:27:4d:e5:59:04:94:ab:be:61:
                    7b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:EE:2B:F1:72:C3:AB:DF:35:F6:78:67:39:21:28:A6:63:C0:68:B1
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e302e302f32302d3230203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3d:36:42:43:7d:3d:07:7c:ab:90:8f:1e:88:03:8f:00:77:cd:
         58:4e:42:40:c6:d3:f8:e4:c1:b0:db:a5:62:92:ea:4e:e9:25:
         b2:97:b7:b2:91:1c:79:27:2f:de:f1:44:6a:5d:5e:59:6c:18:
         f1:f1:21:eb:e5:94:59:f0:a4:e3:d2:4d:fc:73:7e:32:ec:b7:
         1c:3f:bf:9e:70:e6:5f:28:85:27:6c:bd:76:47:2d:3a:1a:9c:
         f8:3d:c7:bd:af:ff:54:f3:77:a5:6d:c4:ee:db:2d:c3:25:35:
         93:43:7f:b7:ef:fb:be:92:de:91:61:85:f7:36:7b:61:8b:7f:
         c6:72:31:d8:83:84:2d:95:c0:38:3f:33:5f:6f:46:0f:92:25:
         0a:bd:79:d1:f3:f3:5c:40:d4:21:55:aa:22:26:ae:34:1c:1f:
         6b:0d:9b:30:2c:48:c9:d7:38:9f:7b:04:3f:32:6a:c0:34:7c:
         f9:e3:15:91:d4:d4:b0:5d:0c:a1:f8:72:0f:7c:7c:31:42:91:
         82:80:5a:47:7d:b4:cd:ae:21:88:87:d1:26:1a:5b:f4:40:20:
         d4:15:60:68:d8:10:55:17:f4:b4:a8:ad:08:c9:8f:db:87:a5:
         24:4e:5b:b2:7b:05:ca:e9:ec:ed:fc:ab:ea:33:96:0d:8b:5f:
         5d:41:8e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----