Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/3137372e3132392e3230382e302f32322d3332203d3e20323633303437.roa
File:                     3137372e3132392e3230382e302f32322d3332203d3e20323633303437.roa (raw, json)
Hash identifier:          6ywU7nGFpL6+eRk3g1zwSEPfPw5dGxyhQmSr2aWjNXc=
Subject key identifier:   FF:A3:51:D4:C3:47:6C:61:D0:02:18:D1:94:A5:FE:6E:C8:D4:E9:C1
Certificate issuer:       /CN=C2F8774838BF1072B38B7276FB6CD2F3BBFD5645
Certificate serial:       09883C9BF240FF71C96AED74E4C893A5EF4681E4
Authority key identifier: C2:F8:77:48:38:BF:10:72:B3:8B:72:76:FB:6C:D2:F3:BB:FD:56:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2F8774838BF1072B38B7276FB6CD2F3BBFD5645.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/3137372e3132392e3230382e302f32322d3332203d3e20323633303437.roa
Signing time:             Mon 25 Mar 2024 17:45:52 +0000
ROA not before:           Mon 25 Mar 2024 17:40:52 +0000
ROA not after:            Mon 24 Mar 2025 17:45:52 +0000
asID:                     263047
IP address blocks:        177.129.208.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:88:3c:9b:f2:40:ff:71:c9:6a:ed:74:e4:c8:93:a5:ef:46:81:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2F8774838BF1072B38B7276FB6CD2F3BBFD5645
        Validity
            Not Before: Mar 25 17:40:52 2024 GMT
            Not After : Mar 24 17:45:52 2025 GMT
        Subject: CN=FFA351D4C3476C61D00218D194A5FE6EC8D4E9C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:70:af:7c:f5:16:45:0d:30:80:df:d7:6e:7c:
                    fa:ff:15:79:fc:8c:9b:2e:0b:89:f7:a4:86:04:c1:
                    8f:40:b8:ea:8c:6e:94:3b:bf:13:01:d5:6a:f8:67:
                    d8:75:e0:f9:5e:66:14:a7:b7:78:bd:3a:53:79:e8:
                    49:52:d0:08:dd:b3:80:e1:be:f9:77:d2:78:f8:cc:
                    0f:47:bb:b5:d4:31:f9:7c:dd:da:6e:be:2e:a8:dc:
                    4d:ea:83:32:4b:8d:ee:22:26:59:ec:12:ff:bb:be:
                    57:67:b9:3e:ec:33:13:d4:70:cd:4d:e8:55:4b:ed:
                    11:a8:c6:49:a9:10:05:0d:c0:db:62:37:0e:75:2c:
                    90:5a:76:5e:c4:be:63:ac:10:00:a1:c3:16:4e:cd:
                    34:08:07:b6:14:75:03:c0:e7:34:6d:33:47:d0:5e:
                    92:14:54:4f:40:dd:96:fb:8e:f1:0d:4c:23:9e:cf:
                    63:5b:f9:bb:77:3a:97:74:e9:af:4e:db:0c:d4:79:
                    26:1c:2f:9a:20:33:17:0a:a7:e2:9c:5c:5e:ad:93:
                    c5:5f:70:c6:22:e8:f4:1a:8c:4b:49:53:2e:47:3b:
                    c8:69:c6:04:37:31:89:d2:f0:0c:1c:77:26:e9:9f:
                    38:7b:e9:da:5e:cd:ce:f6:b3:85:d8:d0:a0:23:ed:
                    96:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A3:51:D4:C3:47:6C:61:D0:02:18:D1:94:A5:FE:6E:C8:D4:E9:C1
            X509v3 Authority Key Identifier:
                keyid:C2:F8:77:48:38:BF:10:72:B3:8B:72:76:FB:6C:D2:F3:BB:FD:56:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/C2F8774838BF1072B38B7276FB6CD2F3BBFD5645.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2F8774838BF1072B38B7276FB6CD2F3BBFD5645.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/3137372e3132392e3230382e302f32322d3332203d3e20323633303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:3d:b8:ee:fa:52:7a:95:c3:d0:12:34:62:75:25:13:cf:4c:
         99:71:1f:95:39:c0:37:ac:5c:64:07:93:86:60:b5:16:3f:aa:
         eb:3f:1c:64:f8:0a:21:a9:1c:c8:e7:b0:75:8c:d0:b9:c4:28:
         09:62:28:8a:83:2e:91:c9:02:0d:29:cd:69:cb:7b:52:fd:70:
         1a:71:f9:80:a8:27:43:a1:4e:26:61:52:f0:ba:86:fb:e9:e5:
         cd:1c:08:40:1c:f6:4c:f0:66:37:35:49:88:13:19:b2:09:0e:
         6c:89:d3:32:62:a5:51:12:94:55:64:ae:a9:ea:bb:0f:3b:e3:
         21:d6:05:b9:4b:53:cc:74:88:9f:a9:bd:02:26:23:a0:32:39:
         14:e1:c6:cf:07:54:aa:cf:80:7c:6d:e2:6d:4f:b0:d2:05:17:
         f9:d8:cc:ff:7f:f2:51:3b:b0:b4:ba:f6:86:03:23:03:14:32:
         89:7b:d4:31:a9:fe:59:2b:83:ef:29:b1:d7:0f:97:c9:53:f5:
         65:cf:79:07:a5:34:0f:8b:d9:4f:a8:73:21:2e:fc:c1:15:61:
         08:71:70:56:a2:d4:63:23:4a:73:20:8b:1f:db:9f:bc:5e:69:
         82:82:a0:53:b7:6a:99:3c:f5:8a:61:be:6a:6c:1a:57:88:22:
         85:25:65:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----