Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/3230302e39352e3139322e302f31392d3332203d3e203631393337.roa
File:                     3230302e39352e3139322e302f31392d3332203d3e203631393337.roa (raw, json)
Hash identifier:          o+MDWEd6RQUKX0QxkfWaGmLk+MnNJN+5io41uzS4JHY=
Subject key identifier:   9D:01:07:8F:BC:84:86:C2:60:F0:60:BA:A7:DB:4B:EF:9B:F6:4D:3B
Certificate issuer:       /CN=AEA761DE82F8C8DD584B9ACB5385D06DFF717C84
Certificate serial:       2741DA022258C1EF5EBECDE57225D1BC8B384BA4
Authority key identifier: AE:A7:61:DE:82:F8:C8:DD:58:4B:9A:CB:53:85:D0:6D:FF:71:7C:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AEA761DE82F8C8DD584B9ACB5385D06DFF717C84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/3230302e39352e3139322e302f31392d3332203d3e203631393337.roa
Signing time:             Thu 18 Jan 2024 00:19:42 +0000
ROA not before:           Thu 18 Jan 2024 00:14:42 +0000
ROA not after:            Thu 16 Jan 2025 00:19:42 +0000
asID:                     61937
IP address blocks:        200.95.192.0/19 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:41:da:02:22:58:c1:ef:5e:be:cd:e5:72:25:d1:bc:8b:38:4b:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEA761DE82F8C8DD584B9ACB5385D06DFF717C84
        Validity
            Not Before: Jan 18 00:14:42 2024 GMT
            Not After : Jan 16 00:19:42 2025 GMT
        Subject: CN=9D01078FBC8486C260F060BAA7DB4BEF9BF64D3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6c:1e:30:4b:c0:d8:bf:28:74:b5:1c:41:35:
                    1e:bc:dc:88:7a:30:e0:c9:3e:dd:4b:2a:de:10:6d:
                    b9:25:7d:4c:e7:d2:97:93:68:06:c6:ee:b5:76:58:
                    c3:b7:bf:80:f0:36:8b:ed:43:2c:e4:69:e9:6a:3e:
                    26:42:f5:83:db:63:7c:2c:23:40:3b:a5:1a:cc:ec:
                    52:8b:eb:5f:c1:a3:3b:9e:16:52:d2:f0:89:c6:fa:
                    ae:51:8b:b4:5f:e5:09:a4:96:cc:3c:67:7c:20:69:
                    89:d2:cb:da:7d:e6:a4:8e:3c:f2:c1:80:5d:7f:a9:
                    6f:6c:5b:d8:65:aa:e7:91:7a:09:f3:bd:1e:8c:e2:
                    e7:aa:cf:5b:31:b6:a6:52:21:b6:89:d2:f5:f2:1b:
                    b3:cc:24:7b:de:14:e2:56:7e:89:73:58:0b:cb:08:
                    f2:bb:e6:11:c6:74:ff:71:a7:c8:86:0c:82:b2:c0:
                    3e:be:9c:bc:09:ab:49:88:63:8d:e8:fe:f4:0a:f9:
                    4f:89:39:e0:c4:a7:33:f3:36:81:c0:77:46:0d:e9:
                    3a:8b:86:fb:34:fd:63:cd:63:c6:94:c3:94:af:81:
                    ad:24:a6:b1:38:af:6f:d2:62:60:ca:fd:73:93:e6:
                    d5:5d:f5:bf:f1:a7:06:bb:94:36:cb:0c:9f:0b:bf:
                    1d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:01:07:8F:BC:84:86:C2:60:F0:60:BA:A7:DB:4B:EF:9B:F6:4D:3B
            X509v3 Authority Key Identifier:
                keyid:AE:A7:61:DE:82:F8:C8:DD:58:4B:9A:CB:53:85:D0:6D:FF:71:7C:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/AEA761DE82F8C8DD584B9ACB5385D06DFF717C84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AEA761DE82F8C8DD584B9ACB5385D06DFF717C84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/3230302e39352e3139322e302f31392d3332203d3e203631393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.95.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0a:43:40:e5:0a:57:aa:28:0c:18:50:d8:fb:8f:e1:12:3b:4e:
         e7:70:83:54:29:ba:f2:77:0f:11:ea:c9:e0:47:96:ef:3f:65:
         54:cd:33:20:6a:17:d6:83:3c:1b:2f:34:fd:52:7d:57:82:b2:
         4f:99:dc:0a:f2:30:86:11:69:2d:46:f7:0b:67:5e:6f:a5:97:
         bd:06:ef:cc:10:f6:4e:dd:4b:86:62:41:21:86:8f:2a:e9:c8:
         55:1e:d0:6f:0b:2b:f0:23:f5:9c:bc:e5:98:69:bf:e2:33:d0:
         13:1a:18:23:58:4d:66:1c:26:ad:6c:9f:a3:40:4b:6d:ae:b9:
         5a:9f:c7:9d:40:c8:31:48:4c:4c:87:cf:d2:b1:23:df:c1:8d:
         f0:c3:fc:91:9d:a9:4b:f6:a0:39:f6:1b:03:6e:27:83:5b:b1:
         73:3b:1b:a7:bf:93:35:38:17:ca:37:b0:37:22:f2:6e:2a:37:
         70:a9:e7:d5:ee:02:cd:c2:b9:09:cb:89:99:35:61:55:8f:c9:
         1b:c8:ce:e4:81:44:a6:74:99:c3:e1:ec:a9:06:3e:72:66:8d:
         3d:2d:0f:7f:f3:4e:74:65:fa:73:8e:87:12:f3:33:36:7b:63:
         a9:10:3c:0a:73:06:48:b3:49:19:ff:33:87:8e:81:2b:f4:db:
         82:fe:09:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----