Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9j7zu2yAnVkGUZMfa1LPWzLtBvr4kCTzZ2NCBGsqMYC7/1/3137392e39372e3232342e302f31392d3234203d3e203238333030.roa
File:                     3137392e39372e3232342e302f31392d3234203d3e203238333030.roa (raw, json)
Hash identifier:          RnvuPdqjWdyq+QTnVjVUZXXqB7g4Fgkd5AEuz49QWmA=
Subject key identifier:   9E:FD:28:E8:A5:2F:97:CC:20:32:52:CA:3F:E9:94:02:23:D9:2B:EC
Certificate issuer:       /CN=FC0F0BAAA791BC20BB92363ED70450B3EA08AB9E
Certificate serial:       55BE42A25CC2FA8BB897B8EA9E7091410069341F
Authority key identifier: FC:0F:0B:AA:A7:91:BC:20:BB:92:36:3E:D7:04:50:B3:EA:08:AB:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC0F0BAAA791BC20BB92363ED70450B3EA08AB9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9j7zu2yAnVkGUZMfa1LPWzLtBvr4kCTzZ2NCBGsqMYC7/1/3137392e39372e3232342e302f31392d3234203d3e203238333030.roa
Signing time:             Thu 23 Mar 2023 19:40:13 +0000
ROA not before:           Thu 23 Mar 2023 19:35:13 +0000
ROA not after:            Thu 21 Mar 2024 19:40:13 +0000
asID:                     28300
IP address blocks:        179.97.224.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:be:42:a2:5c:c2:fa:8b:b8:97:b8:ea:9e:70:91:41:00:69:34:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC0F0BAAA791BC20BB92363ED70450B3EA08AB9E
        Validity
            Not Before: Mar 23 19:35:13 2023 GMT
            Not After : Mar 21 19:40:13 2024 GMT
        Subject: CN=9EFD28E8A52F97CC203252CA3FE9940223D92BEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:89:73:cb:b3:d9:02:9f:15:a8:14:24:d3:19:
                    b7:12:85:0c:7e:ba:fe:73:87:87:2e:03:54:9f:41:
                    78:71:5b:fd:c9:02:55:10:fa:58:e1:9f:bf:ba:b6:
                    65:25:d5:6b:4b:ea:a3:cd:5d:59:a7:fd:9b:06:84:
                    16:5b:21:3b:ff:0d:27:9f:12:3e:dd:0a:75:ce:18:
                    f4:01:f1:dc:fa:4d:a3:61:b5:cb:f6:c7:62:0c:59:
                    c1:4f:b9:9d:6a:ba:b3:54:53:75:95:1b:db:f9:a1:
                    54:65:ac:b5:91:34:60:1d:78:cc:88:ba:cc:9f:5f:
                    a5:ec:85:0e:52:28:c3:9a:f2:a1:cc:28:6f:33:dc:
                    03:51:14:c9:07:77:38:42:65:c1:a5:b8:88:ab:b6:
                    03:19:b5:4c:2a:90:f0:3f:f8:59:cf:19:35:bf:12:
                    09:4b:04:44:6e:8c:36:dd:0c:b1:d7:a5:f9:43:8d:
                    ea:b9:6f:0a:b3:a0:0a:5c:30:32:b8:b8:48:f3:e1:
                    65:4f:ea:7f:5f:ed:16:6f:84:26:5c:f1:44:f5:e1:
                    77:d5:08:c0:5d:60:7e:a9:d4:4d:43:20:9b:48:8a:
                    c1:c7:c4:40:a1:31:3e:b4:2a:b6:69:ab:8d:cc:a6:
                    9e:9a:41:9d:4a:33:75:26:86:2a:eb:f6:f7:88:8c:
                    6c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:FD:28:E8:A5:2F:97:CC:20:32:52:CA:3F:E9:94:02:23:D9:2B:EC
            X509v3 Authority Key Identifier:
                keyid:FC:0F:0B:AA:A7:91:BC:20:BB:92:36:3E:D7:04:50:B3:EA:08:AB:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9j7zu2yAnVkGUZMfa1LPWzLtBvr4kCTzZ2NCBGsqMYC7/1/FC0F0BAAA791BC20BB92363ED70450B3EA08AB9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC0F0BAAA791BC20BB92363ED70450B3EA08AB9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9j7zu2yAnVkGUZMfa1LPWzLtBvr4kCTzZ2NCBGsqMYC7/1/3137392e39372e3232342e302f31392d3234203d3e203238333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1b:77:5f:a7:16:53:24:6b:32:ff:9d:fc:18:6c:a4:e0:55:66:
         92:21:04:29:b1:c5:50:58:f3:8f:6b:b8:9e:91:08:35:7d:cd:
         3d:47:c0:ee:cd:03:f6:0c:24:db:69:26:8f:da:2f:26:c2:eb:
         5f:c0:0e:3f:20:67:1a:8f:87:99:fc:8c:b5:84:f6:5e:09:4f:
         33:50:f8:4f:da:7c:22:3c:95:26:78:d5:51:ba:ba:88:a7:48:
         8f:cb:d9:3f:2f:3d:c4:dd:69:1e:44:57:26:15:1a:c3:e6:82:
         6a:37:a8:17:07:03:6e:00:55:21:fb:09:c4:d7:b9:31:4d:18:
         a7:83:5f:2d:e1:c9:7d:42:2b:bd:e8:c8:f1:7f:93:eb:67:d6:
         4a:bd:b0:51:c8:85:cd:e5:55:e6:31:9f:ec:e5:23:6b:5b:eb:
         cd:ae:78:5e:0b:93:97:6e:d4:b1:2a:02:97:8c:ed:c9:c6:42:
         3c:00:81:e5:11:59:48:f8:fb:6b:bf:08:32:ff:1a:96:fb:2f:
         e1:44:25:fb:79:f0:bd:2d:75:98:9f:f4:cb:a1:10:df:25:e9:
         1f:04:18:41:25:a9:1c:90:6c:a5:dd:f6:92:a2:09:86:99:04:
         7e:04:ed:36:35:91:16:2b:1f:c6:3d:6e:de:a6:08:e2:a1:e6:
         86:79:f4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----