Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7dWSkfTAcBN1DAAa7Vn7Aay3zvsrT1jnSQYDaS9exV8g/0/3133312e3130302e3233322e302f32322d3332203d3e203631363836.roa
File:                     3133312e3130302e3233322e302f32322d3332203d3e203631363836.roa (raw, json)
Hash identifier:          3usjjiLAIvLyOQdY75zDtB68+8InCkGf/KaEDVhtqv4=
Subject key identifier:   D5:63:93:99:C8:C0:AC:1A:2C:B7:90:76:59:70:5A:7F:B3:61:35:46
Certificate issuer:       /CN=A23E9B90137416AB6AD33BC20E65DB5B91FDE6AC
Certificate serial:       109BD65C6F340B670FD55212421D3BC4CAE0A496
Authority key identifier: A2:3E:9B:90:13:74:16:AB:6A:D3:3B:C2:0E:65:DB:5B:91:FD:E6:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A23E9B90137416AB6AD33BC20E65DB5B91FDE6AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7dWSkfTAcBN1DAAa7Vn7Aay3zvsrT1jnSQYDaS9exV8g/0/3133312e3130302e3233322e302f32322d3332203d3e203631363836.roa
Signing time:             Tue 26 Dec 2023 18:01:23 +0000
ROA not before:           Tue 26 Dec 2023 17:56:23 +0000
ROA not after:            Tue 24 Dec 2024 18:01:23 +0000
asID:                     61686
IP address blocks:        131.100.232.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:9b:d6:5c:6f:34:0b:67:0f:d5:52:12:42:1d:3b:c4:ca:e0:a4:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A23E9B90137416AB6AD33BC20E65DB5B91FDE6AC
        Validity
            Not Before: Dec 26 17:56:23 2023 GMT
            Not After : Dec 24 18:01:23 2024 GMT
        Subject: CN=D5639399C8C0AC1A2CB7907659705A7FB3613546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c9:b1:b0:4a:3d:32:67:71:1c:20:50:6f:95:
                    07:b2:9c:d3:04:56:04:17:0e:14:2b:83:49:19:da:
                    60:7f:11:ee:14:fb:36:4d:0d:fb:43:ab:7e:4c:da:
                    4a:0b:cd:f1:06:21:5e:58:20:16:80:3e:33:5c:bd:
                    6c:82:2e:e5:22:fe:35:57:af:44:35:80:47:0f:8b:
                    f5:d3:52:1a:dd:df:67:a1:a8:3c:11:e4:cc:77:c9:
                    36:bf:7f:bd:91:ab:f9:db:03:e5:84:57:cd:37:dc:
                    d0:f1:06:c5:27:9a:19:0f:39:10:2b:22:dd:38:f5:
                    f8:a3:56:33:7d:a7:08:11:96:51:a3:03:0b:2d:26:
                    3e:60:dc:32:af:7a:17:f1:f3:ea:09:78:65:da:55:
                    4c:b6:eb:0c:bd:2b:5a:86:95:9d:47:0c:35:54:34:
                    63:f9:b7:43:69:b8:e1:6f:4b:f5:c4:6b:9d:91:4f:
                    3b:6c:87:10:ac:8d:db:7f:0e:69:41:f9:54:1d:31:
                    57:bf:85:0b:4b:c3:a6:29:11:7f:90:b3:fa:18:61:
                    71:fd:10:ec:58:b9:08:08:ea:86:12:11:c4:e2:c7:
                    8a:d7:4e:d9:53:f1:8e:62:14:73:1c:c5:da:fc:d0:
                    19:28:38:ba:7a:fa:6d:da:79:c9:13:15:f8:f3:c7:
                    db:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:63:93:99:C8:C0:AC:1A:2C:B7:90:76:59:70:5A:7F:B3:61:35:46
            X509v3 Authority Key Identifier:
                keyid:A2:3E:9B:90:13:74:16:AB:6A:D3:3B:C2:0E:65:DB:5B:91:FD:E6:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7dWSkfTAcBN1DAAa7Vn7Aay3zvsrT1jnSQYDaS9exV8g/0/A23E9B90137416AB6AD33BC20E65DB5B91FDE6AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A23E9B90137416AB6AD33BC20E65DB5B91FDE6AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7dWSkfTAcBN1DAAa7Vn7Aay3zvsrT1jnSQYDaS9exV8g/0/3133312e3130302e3233322e302f32322d3332203d3e203631363836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:c7:59:4c:77:a2:f9:40:61:36:ad:68:8d:df:07:53:95:7f:
         5a:e8:de:16:2f:88:ea:b4:85:44:9f:3a:79:4f:7a:d1:49:8f:
         a8:a5:06:2a:6e:e3:88:5b:0a:fc:e3:53:82:b5:89:c9:49:cd:
         95:10:6f:d0:d0:c7:6e:7b:de:88:3c:bf:84:f3:34:f2:4b:8c:
         0e:59:ae:fe:38:71:17:ec:77:cb:e4:3f:3a:a1:67:06:7b:a8:
         2c:bd:8c:ca:00:bf:89:72:21:ba:9a:fb:30:fa:af:b3:00:1d:
         9c:01:85:65:74:e6:8f:b6:ab:ee:94:49:37:0b:0b:82:25:03:
         3b:c2:e2:f8:0b:09:c7:9e:77:81:d7:a8:64:d3:7b:a6:1d:85:
         06:76:5c:25:be:83:a2:50:7e:db:9c:ea:c9:c8:bb:37:1a:28:
         df:d4:03:2e:51:c2:67:85:6a:58:b7:6b:cc:0c:d8:7d:fa:58:
         e1:45:ee:33:13:f3:03:4a:72:45:92:ec:d6:44:77:a3:b4:ad:
         b3:3e:10:6e:b7:e3:ec:bf:c0:7b:8c:c7:ee:ac:02:70:2b:db:
         ef:13:40:19:de:84:22:9c:41:eb:7b:31:d3:9c:77:41:fd:6a:
         e9:3b:26:7c:5c:52:34:c4:cf:f1:ec:1b:39:58:ef:4e:51:98:
         f2:01:ce:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----