Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/3138312e3138392e38302e302f32322d3332203d3e20323731363236.roa
File:                     3138312e3138392e38302e302f32322d3332203d3e20323731363236.roa (raw, json)
Hash identifier:          j8kivuVNu9hKCzX2ltx6u+VuDfb25PXvZnCMkT7gnE4=
Subject key identifier:   E9:75:C9:6E:13:D1:B3:9C:0F:3D:5D:6A:31:A1:CE:34:2B:07:EB:C4
Certificate issuer:       /CN=AD5387D9495868D8BE3A9449C0A4182442615CAA
Certificate serial:       0B9936881C0B0D0E141BAA48E6B4FF37F546797F
Authority key identifier: AD:53:87:D9:49:58:68:D8:BE:3A:94:49:C0:A4:18:24:42:61:5C:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD5387D9495868D8BE3A9449C0A4182442615CAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/3138312e3138392e38302e302f32322d3332203d3e20323731363236.roa
Signing time:             Thu 22 Feb 2024 16:28:32 +0000
ROA not before:           Thu 22 Feb 2024 16:23:32 +0000
ROA not after:            Thu 20 Feb 2025 16:28:32 +0000
asID:                     271626
IP address blocks:        181.189.80.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:99:36:88:1c:0b:0d:0e:14:1b:aa:48:e6:b4:ff:37:f5:46:79:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD5387D9495868D8BE3A9449C0A4182442615CAA
        Validity
            Not Before: Feb 22 16:23:32 2024 GMT
            Not After : Feb 20 16:28:32 2025 GMT
        Subject: CN=E975C96E13D1B39C0F3D5D6A31A1CE342B07EBC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:67:2a:18:d4:83:a6:b8:70:87:95:e7:46:67:
                    ca:1b:39:d4:0b:f8:80:f5:12:47:12:d3:73:66:53:
                    b1:0a:41:ec:f4:16:69:44:6e:c2:34:9a:d9:ea:8b:
                    48:d9:bf:96:dd:8c:37:3b:0a:80:4f:7f:33:bc:3c:
                    40:69:df:16:42:b5:b5:e1:47:6b:fa:95:43:1f:ca:
                    35:d7:b6:11:56:55:9e:a8:d4:05:c1:88:c7:43:d8:
                    dc:ca:ad:7d:0c:7a:6c:5a:b7:73:c6:b0:38:b8:09:
                    89:b0:b8:0b:1a:07:d9:b4:f2:2e:86:af:6c:ca:d5:
                    5c:16:ef:6d:45:aa:81:66:b0:71:a3:03:c2:66:65:
                    32:d9:60:ec:02:31:35:17:be:56:f9:b2:6c:c8:c0:
                    a6:7b:56:c5:8a:45:08:26:18:a6:cc:6f:a6:ce:dc:
                    95:57:15:4d:86:e6:69:41:5e:19:14:34:a2:91:e3:
                    87:11:c7:5d:ba:00:68:ec:50:e5:9d:0f:71:d8:72:
                    3c:ef:32:db:48:e5:5c:d6:36:a2:a5:85:6d:1a:2e:
                    7f:ce:22:f3:3d:6c:b2:5e:c4:b1:00:aa:c2:a8:9b:
                    13:41:c4:4e:be:e7:ae:38:0e:c8:cf:1b:3e:aa:f9:
                    76:41:4c:20:f4:98:0f:cd:50:a7:69:6b:51:0b:97:
                    09:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:75:C9:6E:13:D1:B3:9C:0F:3D:5D:6A:31:A1:CE:34:2B:07:EB:C4
            X509v3 Authority Key Identifier:
                keyid:AD:53:87:D9:49:58:68:D8:BE:3A:94:49:C0:A4:18:24:42:61:5C:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/AD5387D9495868D8BE3A9449C0A4182442615CAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD5387D9495868D8BE3A9449C0A4182442615CAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/3138312e3138392e38302e302f32322d3332203d3e20323731363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:74:a0:0a:ce:7b:58:36:0d:6a:60:0a:a0:ab:e1:c1:31:f3:
         90:0f:43:6c:0d:a5:cc:17:be:6e:b9:2d:9e:27:99:64:15:bb:
         be:48:9b:d0:02:d4:8e:d3:42:88:a6:b6:5c:51:48:52:c1:15:
         b7:ee:74:f5:8f:17:fa:63:0b:18:ce:9c:e1:1d:8e:03:6c:d7:
         a1:d4:70:c2:8e:7a:4b:e5:eb:4c:17:d4:83:03:04:90:fd:61:
         0a:2a:fe:b5:72:14:82:d2:9f:09:37:ce:9f:ed:02:c3:a0:8d:
         e0:c9:94:5d:9f:46:f7:30:55:84:93:05:70:e0:95:98:b1:93:
         a9:ec:e5:cc:25:52:72:fd:d6:45:d8:fd:62:d2:ed:f5:3e:04:
         38:68:ab:dd:81:80:3d:18:ea:fd:14:a5:8a:47:5d:c0:2c:a2:
         0f:e6:34:e6:c1:d2:59:72:b3:d2:d5:db:02:75:b0:83:da:97:
         df:b2:3b:5b:3a:cd:17:7a:a2:76:59:98:00:ba:37:bc:ba:27:
         9c:d2:25:c1:8f:83:91:e2:db:73:00:8c:12:9b:d7:16:1e:98:
         0b:bf:4e:a4:55:52:18:a8:ac:0d:98:3a:9d:6c:7f:e9:a8:a0:
         7a:2d:cc:5b:e0:14:a8:2c:f2:18:5f:80:a5:d7:51:c0:d8:9e:
         05:dd:e5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----