Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/3136382e3132312e32362e302f32332d3233203d3e20323635323934.roa
File:                     3136382e3132312e32362e302f32332d3233203d3e20323635323934.roa (raw, json)
Hash identifier:          wb+HsQnwcTalwAcNckeuIFntf+pVvnTfvYa/7RmwnPQ=
Subject key identifier:   E1:E0:87:F0:65:6B:99:35:39:79:2A:EE:64:76:49:72:D0:0F:1B:83
Certificate issuer:       /CN=1E94701DD600A862C548840197A22D5CEE4B2FDA
Certificate serial:       441BE0A8BAADAE50377D3212DD00E1CEB2139140
Authority key identifier: 1E:94:70:1D:D6:00:A8:62:C5:48:84:01:97:A2:2D:5C:EE:4B:2F:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E94701DD600A862C548840197A22D5CEE4B2FDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/3136382e3132312e32362e302f32332d3233203d3e20323635323934.roa
Signing time:             Thu 15 Feb 2024 18:00:00 +0000
ROA not before:           Thu 15 Feb 2024 17:55:00 +0000
ROA not after:            Thu 13 Feb 2025 18:00:00 +0000
asID:                     265294
IP address blocks:        168.121.26.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:1b:e0:a8:ba:ad:ae:50:37:7d:32:12:dd:00:e1:ce:b2:13:91:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E94701DD600A862C548840197A22D5CEE4B2FDA
        Validity
            Not Before: Feb 15 17:55:00 2024 GMT
            Not After : Feb 13 18:00:00 2025 GMT
        Subject: CN=E1E087F0656B993539792AEE64764972D00F1B83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:41:22:8d:69:cf:e0:74:ba:b6:2d:92:e5:60:
                    45:9b:13:0f:5b:34:a1:2c:82:28:cd:97:94:3e:d3:
                    4a:02:09:1f:f6:97:c2:c4:c5:75:23:24:89:47:60:
                    e2:9f:95:ce:58:5f:45:78:ce:0d:31:be:6a:e2:ee:
                    f0:dc:e9:90:5d:2e:83:12:15:a8:bc:7c:f4:0f:18:
                    f4:d6:78:96:6d:91:db:d5:6e:e4:72:0c:1c:02:7e:
                    2c:2b:b1:f9:92:2a:b9:0e:06:fb:f5:1c:64:10:dd:
                    8f:44:c5:f0:d1:0f:c4:19:d3:8f:4e:a4:49:b1:12:
                    4a:d4:1f:90:61:c1:81:1a:50:a6:59:19:db:59:a5:
                    10:72:63:b7:fb:40:11:3d:7b:7c:a1:34:8c:09:ef:
                    a9:e8:64:8e:7a:d6:43:52:81:4d:06:6c:ac:3a:49:
                    29:21:fe:ad:97:5d:b8:7d:e1:40:ae:52:17:9f:73:
                    70:2e:b0:15:a9:9a:f5:ce:79:10:13:f0:0c:ba:74:
                    5a:b4:86:c1:85:0f:9b:a3:dd:7c:a8:96:86:d7:d4:
                    1a:0c:0b:b7:11:d2:a2:98:12:3e:e1:67:04:be:b5:
                    00:2d:17:d7:bf:b8:1e:fd:26:5e:d2:73:94:33:50:
                    fc:49:7c:ed:0d:fb:ea:2d:05:91:aa:93:45:f9:61:
                    e2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E0:87:F0:65:6B:99:35:39:79:2A:EE:64:76:49:72:D0:0F:1B:83
            X509v3 Authority Key Identifier:
                keyid:1E:94:70:1D:D6:00:A8:62:C5:48:84:01:97:A2:2D:5C:EE:4B:2F:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/1E94701DD600A862C548840197A22D5CEE4B2FDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E94701DD600A862C548840197A22D5CEE4B2FDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/3136382e3132312e32362e302f32332d3233203d3e20323635323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:d3:cb:d1:7b:d6:51:26:ec:1b:f6:bf:ff:0a:53:92:ec:d9:
         58:74:bf:ef:f6:88:50:6e:3a:b3:f0:29:3f:f1:c3:4c:c9:71:
         75:6f:a3:69:2a:ef:06:dd:23:ac:5e:2b:6b:41:d4:07:01:78:
         f0:89:c3:8a:5c:1c:e5:85:f8:84:d6:62:0c:42:a1:ae:67:dd:
         2a:e9:82:a3:50:db:bb:95:af:eb:e5:10:c3:bd:49:cb:7b:e1:
         6d:dc:9d:5b:38:43:88:51:e6:83:cc:be:ce:10:09:65:eb:53:
         73:10:fe:d0:df:6d:15:e0:6a:4a:72:6f:55:ae:13:2e:b3:a2:
         0d:8a:72:a4:76:1a:a1:29:eb:db:64:b3:3a:6e:b8:ab:6e:4f:
         ef:f4:13:8b:3a:60:0d:a9:c9:38:70:7d:a5:f2:f2:08:1b:78:
         52:65:f7:4f:22:00:04:7a:41:3f:13:cf:b5:fd:10:d9:ae:01:
         ad:ee:c2:c1:ea:ab:9d:0e:62:a3:2e:a9:69:0d:97:51:2b:dc:
         db:c5:75:e1:07:31:11:b5:c6:ba:60:c2:50:7b:14:de:21:2e:
         a0:50:79:d9:51:7a:65:f8:8b:99:a1:62:62:dc:c6:09:56:ef:
         72:22:00:36:97:ec:da:b5:b4:ee:de:13:f2:2c:0f:b4:a2:6f:
         00:36:82:f7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURBvgqLqtrlA3fTIS3QDhzrITkUAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUU5NDcwMURENjAwQTg2MkM1NDg4NDAxOTdBMjJENUNF
RTRCMkZEQTAeFw0yNDAyMTUxNzU1MDBaFw0yNTAyMTMxODAwMDBaMDMxMTAvBgNV
BAMTKEUxRTA4N0YwNjU2Qjk5MzUzOTc5MkFFRTY0NzY0OTcyRDAwRjFCODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFQSKNac/gdLq2LZLlYEWbEw9b
NKEsgijNl5Q+00oCCR/2l8LExXUjJIlHYOKflc5YX0V4zg0xvmri7vDc6ZBdLoMS
Fai8fPQPGPTWeJZtkdvVbuRyDBwCfiwrsfmSKrkOBvv1HGQQ3Y9ExfDRD8QZ049O
pEmxEkrUH5BhwYEaUKZZGdtZpRByY7f7QBE9e3yhNIwJ76noZI561kNSgU0GbKw6
SSkh/q2XXbh94UCuUhefc3AusBWpmvXOeRAT8Ay6dFq0hsGFD5uj3XyolobX1BoM
C7cR0qKYEj7hZwS+tQAtF9e/uB79Jl7Sc5QzUPxJfO0N++otBZGqk0X5YeLBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU4eCH8GVrmTU5eSruZHZJctAPG4MwHwYDVR0j
BBgwFoAUHpRwHdYAqGLFSIQBl6ItXO5LL9owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0YydVRLMjN4U25kdFpheW91VHhRVHlVODFzTnVHVXM4RTlETFpzRVN0
c3QvMC8xRTk0NzAxREQ2MDBBODYyQzU0ODg0MDE5N0EyMkQ1Q0VFNEIyRkRBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFFOTQ3MDFERDYwMEE4NjJD
NTQ4ODQwMTk3QTIyRDVDRUU0QjJGREEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdGMnVUSzIzeFNuZHRaYXlvdVR4UVR5VTgxc051R1VzOEU5RExac0VTdHN0LzAv
MzEzNjM4MmUzMTMyMzEyZTMyMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzUzMjM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGoeRowDQYJKoZIhvcNAQELBQADggEBAFnTy9F7
1lEm7Bv2v/8KU5Ls2Vh0v+/2iFBuOrPwKT/xw0zJcXVvo2kq7wbdI6xeK2tB1AcB
ePCJw4pcHOWF+ITWYgxCoa5n3SrpgqNQ27uVr+vlEMO9Sct74W3cnVs4Q4hR5oPM
vs4QCWXrU3MQ/tDfbRXgakpyb1WuEy6zog2KcqR2GqEp69tkszpuuKtuT+/0E4s6
YA2pyThwfaXy8ggbeFJl908iAAR6QT8Tz7X9ENmuAa3uwsHqq50OYqMuqWkNl1Er
3NvFdeEHMRG1xrpgwlB7FN4hLqBQedlRemX4i5mhYmLcxglW73IiADaX7Nq1tO7e
E/IsD7SibwA2gvc=
-----END CERTIFICATE-----