Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/3136382e3233322e3138342e302f32322d3332203d3e203631363332.roa
File:                     3136382e3233322e3138342e302f32322d3332203d3e203631363332.roa (raw, json)
Hash identifier:          OuSBbQTqIXMltnwcLi0EE+91aXk9LQqDEYrTKeN3F5Q=
Subject key identifier:   EF:01:BD:35:17:0E:89:09:41:A2:4A:9B:11:91:E6:5A:39:B1:C3:85
Certificate issuer:       /CN=8A90DF018B161D6CEA690EF462A96991BD182AEB
Certificate serial:       79B9F6F2FA30085005E9C68B9DBCB0F14BD2880C
Authority key identifier: 8A:90:DF:01:8B:16:1D:6C:EA:69:0E:F4:62:A9:69:91:BD:18:2A:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A90DF018B161D6CEA690EF462A96991BD182AEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/3136382e3233322e3138342e302f32322d3332203d3e203631363332.roa
Signing time:             Wed 13 Sep 2023 12:55:21 +0000
ROA not before:           Wed 13 Sep 2023 12:50:21 +0000
ROA not after:            Wed 11 Sep 2024 12:55:21 +0000
asID:                     61632
IP address blocks:        168.232.184.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:b9:f6:f2:fa:30:08:50:05:e9:c6:8b:9d:bc:b0:f1:4b:d2:88:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A90DF018B161D6CEA690EF462A96991BD182AEB
        Validity
            Not Before: Sep 13 12:50:21 2023 GMT
            Not After : Sep 11 12:55:21 2024 GMT
        Subject: CN=EF01BD35170E890941A24A9B1191E65A39B1C385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:31:91:2e:93:71:f4:5f:81:ae:71:07:9e:c9:
                    87:14:7a:9d:9d:8f:70:bc:ce:52:a3:8c:bc:60:ea:
                    ac:a4:ad:46:c5:ef:39:f6:4c:b5:8c:41:c1:da:52:
                    35:91:cf:8b:8b:97:92:72:32:7e:7a:53:49:09:1f:
                    e5:6f:30:25:da:01:9f:9d:42:da:53:e8:c6:e1:e7:
                    eb:ee:da:57:5c:c4:e5:8a:54:36:1d:15:ef:61:46:
                    db:0e:4e:19:1c:c5:6a:ab:10:b1:b5:e6:94:f6:3e:
                    14:12:25:23:43:cf:ff:2d:fe:35:8b:65:9a:a3:b2:
                    e9:3b:90:0f:82:44:4b:2d:c9:20:32:d1:39:ed:2a:
                    fb:bb:9c:be:0b:8f:41:16:6b:02:76:5c:8a:36:b9:
                    0e:d3:76:5a:3c:74:d4:1d:f6:20:47:5b:7b:b6:a4:
                    b7:a3:01:2b:cf:8b:f2:71:2a:7f:e8:d4:75:f2:de:
                    e1:91:e2:92:f0:f6:6d:1c:7a:04:94:8d:2e:a3:f1:
                    03:3b:4c:25:68:61:65:88:7b:d9:10:0f:8c:95:15:
                    1f:20:1e:92:67:29:dc:0f:4c:52:eb:ff:d2:05:b0:
                    55:45:c4:04:c4:48:65:dd:cc:fd:0d:d7:6f:84:02:
                    0c:68:eb:2f:e1:b9:7d:66:a6:c1:3d:8e:18:3d:4a:
                    5d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:01:BD:35:17:0E:89:09:41:A2:4A:9B:11:91:E6:5A:39:B1:C3:85
            X509v3 Authority Key Identifier:
                keyid:8A:90:DF:01:8B:16:1D:6C:EA:69:0E:F4:62:A9:69:91:BD:18:2A:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/8A90DF018B161D6CEA690EF462A96991BD182AEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A90DF018B161D6CEA690EF462A96991BD182AEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/3136382e3233322e3138342e302f32322d3332203d3e203631363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:72:19:3a:96:a5:8f:1b:86:78:b6:02:06:5d:26:01:8b:b4:
         39:72:f4:a1:e8:71:2e:f9:6d:bf:68:8a:97:1c:74:ec:21:81:
         7a:f1:37:e0:cf:8f:b6:da:fa:a1:df:26:27:63:4c:66:26:89:
         8b:b4:97:b0:12:13:8d:bc:ee:f8:da:c7:fc:e6:ec:43:6d:48:
         f4:ab:86:7a:36:b6:13:ea:c9:16:07:0b:31:33:d3:0c:94:22:
         c2:1c:92:5b:b9:21:2c:c7:6e:4e:95:23:3b:1e:b1:67:5f:02:
         64:11:ff:b6:16:45:2e:05:9a:16:5d:72:f2:7a:20:83:0e:34:
         2c:f9:59:87:9c:3d:81:38:6f:eb:2b:61:07:43:71:c1:1f:6d:
         87:70:0b:3f:24:45:f7:c7:5f:44:ea:50:4b:30:d7:6c:fc:4e:
         a5:a9:07:d5:e3:4f:88:c6:a3:14:c0:89:2d:d0:73:56:a1:ff:
         41:2b:92:de:62:26:cc:09:82:65:01:23:eb:b3:34:1d:3d:a4:
         50:03:ce:d8:c5:21:41:24:27:c5:8c:a7:83:50:40:fb:f2:fa:
         f9:5a:cc:88:7f:11:f3:4e:c2:a5:8d:6f:89:36:cc:b5:0c:9b:
         c6:6f:ce:3b:de:23:53:4a:f5:0a:cf:27:4a:e4:20:7b:35:ef:
         00:59:0e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----