Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/0/3137372e38372e3133322e302f32322d3332203d3e20323632333032.roa
File:                     3137372e38372e3133322e302f32322d3332203d3e20323632333032.roa (raw, json)
Hash identifier:          z870d2izUj+byIOJ3EcVpZFacLNSq3ruEt+LNAS9uPE=
Subject key identifier:   AC:9A:5E:64:B7:D8:5D:4F:4E:06:60:6F:D8:DA:F9:CC:56:DB:72:36
Certificate issuer:       /CN=F54AF77B19B9B7EB0E281E779779F2742EABB361
Certificate serial:       607686A1834936FAACC385EB4287BA3583E27D25
Authority key identifier: F5:4A:F7:7B:19:B9:B7:EB:0E:28:1E:77:97:79:F2:74:2E:AB:B3:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F54AF77B19B9B7EB0E281E779779F2742EABB361.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/0/3137372e38372e3133322e302f32322d3332203d3e20323632333032.roa
Signing time:             Mon 17 Jul 2023 12:40:49 +0000
ROA not before:           Mon 17 Jul 2023 12:35:49 +0000
ROA not after:            Mon 15 Jul 2024 12:40:49 +0000
asID:                     262302
IP address blocks:        177.87.132.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:76:86:a1:83:49:36:fa:ac:c3:85:eb:42:87:ba:35:83:e2:7d:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F54AF77B19B9B7EB0E281E779779F2742EABB361
        Validity
            Not Before: Jul 17 12:35:49 2023 GMT
            Not After : Jul 15 12:40:49 2024 GMT
        Subject: CN=AC9A5E64B7D85D4F4E06606FD8DAF9CC56DB7236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c6:05:50:a8:e3:54:9f:60:5a:a2:ae:bd:35:
                    01:32:0b:62:6d:b9:dc:81:d7:72:9c:5f:dd:9b:0d:
                    75:08:d5:8e:8a:68:4e:b3:5f:fa:e7:92:c9:91:10:
                    a9:cf:54:8e:72:74:bd:7b:a1:79:96:7f:29:88:8c:
                    ff:b1:e5:ba:db:d3:45:e3:f6:35:a9:e2:d6:6b:72:
                    b7:70:e8:02:7b:f8:ae:a2:c5:27:41:20:dd:60:d0:
                    8c:96:bd:00:10:72:b4:d0:da:4d:ad:c0:5e:68:5c:
                    1e:ae:88:fd:7f:45:91:fb:dc:19:da:85:84:c4:ec:
                    89:a5:13:9e:f9:37:c3:4e:6c:20:bf:eb:68:1a:af:
                    01:01:88:f9:7d:b8:b1:1c:a4:50:3b:f7:94:09:08:
                    6e:88:be:9e:97:28:e4:21:d1:7e:a0:13:b6:61:96:
                    b6:64:79:e6:a1:85:2e:a9:42:74:69:c6:90:7d:48:
                    64:cd:41:32:d5:70:72:03:66:c5:c9:51:fe:a1:31:
                    49:bc:98:aa:53:31:03:09:64:8f:eb:bb:35:e2:9e:
                    b2:c2:bb:97:d0:0b:ba:b6:26:83:fe:f3:1f:70:13:
                    40:87:4b:76:9f:85:c3:13:a9:71:5b:cd:b0:8c:d4:
                    9f:4c:82:99:d1:22:dd:a0:39:cd:b9:94:55:6e:7e:
                    c2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:9A:5E:64:B7:D8:5D:4F:4E:06:60:6F:D8:DA:F9:CC:56:DB:72:36
            X509v3 Authority Key Identifier:
                keyid:F5:4A:F7:7B:19:B9:B7:EB:0E:28:1E:77:97:79:F2:74:2E:AB:B3:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/0/F54AF77B19B9B7EB0E281E779779F2742EABB361.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F54AF77B19B9B7EB0E281E779779F2742EABB361.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/0/3137372e38372e3133322e302f32322d3332203d3e20323632333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:42:9c:6a:16:1c:bf:05:23:93:0f:5d:c4:fd:be:d4:46:11:
         eb:0e:3e:fa:82:1c:43:ad:82:af:ab:c4:36:eb:74:a1:ec:e0:
         59:5b:71:f1:40:63:87:f3:52:59:d2:39:1a:48:84:9d:e6:ed:
         86:c3:9c:ad:50:8a:4f:2e:57:1e:5b:e0:32:95:96:b2:99:7a:
         cc:57:c1:a1:41:2d:61:f9:5d:1c:2e:e2:58:76:27:22:78:df:
         4f:80:30:db:0b:83:1f:93:c9:35:ca:38:5a:1a:82:b6:bc:af:
         cb:2f:7d:47:52:91:19:73:d1:19:9e:58:67:9d:df:a4:66:1e:
         10:bd:1f:71:d0:ec:9b:ef:c6:33:22:0e:a4:8d:ad:9e:01:67:
         c3:7a:06:83:da:74:8a:0f:94:0d:69:99:55:34:3b:e2:5c:18:
         ef:e6:b4:54:82:9f:cb:6b:b4:dc:a1:32:01:b0:6a:12:95:c1:
         61:2e:c3:1b:39:12:62:65:e3:af:a3:40:00:91:6c:f9:5f:28:
         f4:56:92:f4:fe:06:ee:39:2a:35:c0:dc:a6:29:2e:ea:80:6a:
         07:27:59:cf:42:59:54:b9:74:fe:93:32:37:53:56:98:db:5a:
         f2:45:94:61:e8:8e:e9:8c:23:4d:43:aa:5f:a1:e1:11:bb:03:
         32:16:bc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----