Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/1/3137372e3132362e36382e302f32322d3232203d3e20323632333338.roa
File:                     3137372e3132362e36382e302f32322d3232203d3e20323632333338.roa (raw, json)
Hash identifier:          gqKpSPVh4FFX3OzLnH7Wky0QDbUTAE5CIX7rDmZJj/k=
Subject key identifier:   24:50:1A:3B:47:56:88:CA:61:E3:10:D2:9F:C1:EE:5A:2D:38:14:EF
Certificate issuer:       /CN=2F2EEA78F2A61B130D9274580167C650F0352C20
Certificate serial:       57E37F7232704697FC1E4ADCCAB54B71892373A4
Authority key identifier: 2F:2E:EA:78:F2:A6:1B:13:0D:92:74:58:01:67:C6:50:F0:35:2C:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F2EEA78F2A61B130D9274580167C650F0352C20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/1/3137372e3132362e36382e302f32322d3232203d3e20323632333338.roa
Signing time:             Tue 16 Apr 2024 12:20:11 +0000
ROA not before:           Tue 16 Apr 2024 12:15:11 +0000
ROA not after:            Tue 15 Apr 2025 12:20:11 +0000
asID:                     262338
IP address blocks:        177.126.68.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:e3:7f:72:32:70:46:97:fc:1e:4a:dc:ca:b5:4b:71:89:23:73:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F2EEA78F2A61B130D9274580167C650F0352C20
        Validity
            Not Before: Apr 16 12:15:11 2024 GMT
            Not After : Apr 15 12:20:11 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fa:8e:26:44:57:97:67:bc:84:48:d0:80:b8:
                    12:23:f9:e6:6d:47:8a:fc:ff:fc:dd:6c:66:06:bb:
                    fb:14:b7:3b:4e:1f:9c:eb:49:25:0d:d5:46:7b:21:
                    2c:e9:e0:46:5e:28:e7:9d:11:a5:a2:b7:a2:41:6e:
                    ed:0b:a3:e4:75:c6:d5:3d:c5:9b:a2:c1:36:e6:fc:
                    a9:a9:22:33:4d:1d:4f:ab:46:b0:fd:b8:72:25:0e:
                    10:73:f7:34:dd:12:1b:b4:36:65:e0:52:db:b0:41:
                    5b:cc:e4:d3:1d:89:0c:6d:15:83:8c:1f:f2:62:ad:
                    30:1a:77:ef:46:6c:38:dd:cd:74:49:40:1c:16:63:
                    e6:cb:ef:d7:f1:45:e7:ee:d8:22:f1:80:81:3e:1e:
                    e6:db:6e:18:fb:5e:0a:22:3b:40:19:1a:e2:11:6c:
                    30:d7:c6:56:40:8b:0b:e3:21:5f:db:56:59:e4:b2:
                    1f:28:13:8b:24:98:b7:99:92:1f:03:07:b3:56:b5:
                    3b:12:20:b3:6f:cc:73:15:37:fc:f7:e4:ee:c6:6c:
                    55:49:76:62:27:65:2f:b2:22:97:60:d3:16:40:70:
                    4e:e9:df:d1:de:9b:19:ce:10:13:5f:3a:4d:89:57:
                    d9:c3:e9:36:08:6f:28:84:e2:da:9f:16:d0:b5:f6:
                    7b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:50:1A:3B:47:56:88:CA:61:E3:10:D2:9F:C1:EE:5A:2D:38:14:EF
            X509v3 Authority Key Identifier:
                keyid:2F:2E:EA:78:F2:A6:1B:13:0D:92:74:58:01:67:C6:50:F0:35:2C:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/1/2F2EEA78F2A61B130D9274580167C650F0352C20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F2EEA78F2A61B130D9274580167C650F0352C20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/1/3137372e3132362e36382e302f32322d3232203d3e20323632333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:98:97:39:34:4c:03:aa:62:dc:97:0b:0d:ed:3b:20:3e:5b:
         cd:77:9b:e9:0d:6c:1f:6d:a8:08:89:37:ce:21:f8:ef:11:27:
         c5:ab:39:d4:40:d7:b0:73:2f:91:b1:07:50:da:b4:69:36:04:
         12:a9:62:86:40:7a:4e:ba:ff:06:ed:c3:5d:df:61:a3:a4:ce:
         bd:59:32:32:48:b3:f9:82:67:55:56:61:33:d5:fc:e2:e8:d1:
         83:94:e5:0b:10:75:05:d7:e2:97:d5:07:ee:97:eb:c3:ac:45:
         72:94:cb:66:5b:38:df:3a:f8:a5:c9:be:76:3f:e7:b5:5b:75:
         25:9b:20:ba:19:49:be:ae:84:a7:51:87:35:28:15:75:15:37:
         9d:ef:01:63:42:a3:c8:5e:5a:02:8a:62:99:29:fb:11:f8:3b:
         e8:9f:f0:d6:a5:2b:7f:58:a9:77:ea:c7:f1:c9:2a:05:10:c2:
         68:d9:2e:b4:df:34:08:fb:31:0f:cc:0a:5b:47:05:54:31:a8:
         7e:97:f1:86:cf:eb:75:c3:be:d3:1d:ec:07:d7:5e:ab:52:0b:
         56:f1:c3:9a:1b:45:da:dd:63:0a:45:01:87:52:b6:a8:d2:81:
         62:1c:4b:1f:df:04:8a:03:67:d4:60:db:76:49:05:79:f4:81:
         cc:a1:30:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----