Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/3133382e33362e3139342e302f32332d3233203d3e20323634353835.roa
File:                     3133382e33362e3139342e302f32332d3233203d3e20323634353835.roa (raw, json)
Hash identifier:          4kUj0pp63KrR4JwkKXwQ2A62ZJ6hQVTLM8njZ0sWOnM=
Subject key identifier:   8C:AD:FE:9D:81:A5:57:71:E0:0D:E1:D4:EC:47:F7:81:A1:D6:23:0E
Certificate issuer:       /CN=BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00
Certificate serial:       16C9C3E3B04D16C81D96AD94465DFC5E827532BE
Authority key identifier: BC:60:1E:88:EF:B9:15:EE:FB:93:8F:5E:EE:16:D0:8B:8D:EB:FD:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/3133382e33362e3139342e302f32332d3233203d3e20323634353835.roa
Signing time:             Tue 22 Aug 2023 18:22:50 +0000
ROA not before:           Tue 22 Aug 2023 18:17:50 +0000
ROA not after:            Tue 20 Aug 2024 18:22:50 +0000
asID:                     264585
IP address blocks:        138.36.194.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:c9:c3:e3:b0:4d:16:c8:1d:96:ad:94:46:5d:fc:5e:82:75:32:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00
        Validity
            Not Before: Aug 22 18:17:50 2023 GMT
            Not After : Aug 20 18:22:50 2024 GMT
        Subject: CN=8CADFE9D81A55771E00DE1D4EC47F781A1D6230E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7f:27:f2:04:3e:28:59:97:6c:3d:1d:b2:5d:
                    61:a0:2a:a3:47:ec:41:fa:d1:20:ee:f9:93:44:95:
                    01:a7:ee:21:af:21:7b:dc:d6:c7:b0:62:3a:c1:22:
                    0d:05:bf:40:d3:9b:c0:a9:88:0c:ae:a1:7f:97:d2:
                    eb:7a:bb:52:eb:44:61:c1:4d:e4:b5:f7:ad:96:f3:
                    b9:2c:cc:78:9d:f0:d6:33:6e:19:85:be:59:17:b1:
                    73:76:5e:70:b5:ed:34:db:f3:d3:ae:20:73:8d:13:
                    cc:21:2a:51:1c:66:49:c8:1b:86:e6:f1:85:b5:7f:
                    f0:33:11:db:69:bf:02:2f:60:67:5e:24:20:ea:7c:
                    6a:8f:5b:91:58:89:d5:ad:4c:34:82:91:76:84:47:
                    1c:ff:93:87:00:32:35:1f:3d:1b:75:8f:b4:dd:44:
                    95:36:b8:b1:d5:69:a5:65:ac:cf:38:6a:52:89:48:
                    c1:00:49:a4:a4:d3:6d:98:a2:8d:61:83:73:13:a6:
                    8f:48:9b:5d:3b:0a:df:6e:56:18:88:d8:40:3c:c9:
                    3c:6d:86:52:84:7f:a0:c7:5c:a9:81:09:46:1d:78:
                    93:43:82:07:3b:75:33:0e:7d:18:8e:83:c1:04:78:
                    34:0d:1a:2a:a2:17:7a:cd:3e:0e:cf:ad:e7:f6:d8:
                    5e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:AD:FE:9D:81:A5:57:71:E0:0D:E1:D4:EC:47:F7:81:A1:D6:23:0E
            X509v3 Authority Key Identifier:
                keyid:BC:60:1E:88:EF:B9:15:EE:FB:93:8F:5E:EE:16:D0:8B:8D:EB:FD:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/3133382e33362e3139342e302f32332d3233203d3e20323634353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:04:47:3c:19:77:2e:c0:81:40:5f:11:c7:69:b8:bf:5e:b6:
         42:3a:14:33:0b:db:67:9b:5c:fe:aa:d1:93:a3:bb:18:ef:04:
         66:8c:dc:d9:1e:7f:08:44:2e:fe:11:0b:1b:d1:63:fd:83:6d:
         85:56:58:76:37:ad:bc:89:f1:72:ce:33:45:52:a5:12:9f:a8:
         f6:9c:72:bf:0e:cf:f0:bb:84:b1:a0:e6:ad:ad:e9:79:06:51:
         90:a6:38:da:cb:79:b9:88:f2:26:93:99:37:69:41:2b:0a:bb:
         ae:26:f2:5e:aa:05:44:7c:06:c8:40:b9:64:50:73:de:96:e1:
         08:0a:81:5b:d8:16:94:6d:7b:64:5d:b6:17:2c:91:5c:39:54:
         ff:1b:16:0e:2d:e1:92:65:2f:f0:3a:8f:1b:ee:ef:1a:2d:92:
         e6:bc:2d:1d:b5:82:aa:6c:20:fd:d3:61:ad:04:0f:2d:4a:db:
         6f:71:d2:56:7f:37:7b:16:14:e5:7a:f4:1a:3c:b5:1c:72:1f:
         ba:0f:a9:ab:d7:f3:d2:1b:84:57:aa:8c:ae:36:74:09:98:9a:
         0b:9f:e8:46:78:71:e8:7f:ca:23:7c:2c:da:dc:c2:4b:7f:dc:
         59:38:47:2f:93:28:21:7f:dd:dd:0c:41:95:33:42:18:67:c2:
         63:14:7c:29
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFsnD47BNFsgdlq2URl38XoJ1Mr4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkM2MDFFODhFRkI5MTVFRUZCOTM4RjVFRUUxNkQwOEI4
REVCRkQwMDAeFw0yMzA4MjIxODE3NTBaFw0yNDA4MjAxODIyNTBaMDMxMTAvBgNV
BAMTKDhDQURGRTlEODFBNTU3NzFFMDBERTFENEVDNDdGNzgxQTFENjIzMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlfyfyBD4oWZdsPR2yXWGgKqNH
7EH60SDu+ZNElQGn7iGvIXvc1sewYjrBIg0Fv0DTm8CpiAyuoX+X0ut6u1LrRGHB
TeS1962W87kszHid8NYzbhmFvlkXsXN2XnC17TTb89OuIHONE8whKlEcZknIG4bm
8YW1f/AzEdtpvwIvYGdeJCDqfGqPW5FYidWtTDSCkXaERxz/k4cAMjUfPRt1j7Td
RJU2uLHVaaVlrM84alKJSMEASaSk022Yoo1hg3MTpo9Im107Ct9uVhiI2EA8yTxt
hlKEf6DHXKmBCUYdeJNDggc7dTMOfRiOg8EEeDQNGiqiF3rNPg7Pref22F6XAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUjK3+nYGlV3HgDeHU7Ef3gaHWIw4wHwYDVR0j
BBgwFoAUvGAeiO+5Fe77k49e7hbQi43r/QAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUo4eEpkaE5YSFlwWFFuemFod0x6eGdIUlc3N2d5OHgzYXp6eWRRQ2J3
NDMvMC9CQzYwMUU4OEVGQjkxNUVFRkI5MzhGNUVFRTE2RDA4QjhERUJGRDAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JDNjAxRTg4RUZCOTE1RUVG
QjkzOEY1RUVFMTZEMDhCOERFQkZEMDAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FKOHhKZGhOWEhZcFhRbnphaHdMenhnSFJXNzdneTh4M2F6enlkUUNidzQzLzAv
MzEzMzM4MmUzMzM2MmUzMTM5MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzQzNTM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGKJMIwDQYJKoZIhvcNAQELBQADggEBAAEERzwZ
dy7AgUBfEcdpuL9etkI6FDML22ebXP6q0ZOjuxjvBGaM3NkefwhELv4RCxvRY/2D
bYVWWHY3rbyJ8XLOM0VSpRKfqPaccr8Oz/C7hLGg5q2t6XkGUZCmONrLebmI8iaT
mTdpQSsKu64m8l6qBUR8BshAuWRQc96W4QgKgVvYFpRte2RdthcskVw5VP8bFg4t
4ZJlL/A6jxvu7xotkua8LR21gqpsIP3TYa0EDy1K229x0lZ/N3sWFOV69Bo8tRxy
H7oPqavX89IbhFeqjK42dAmYmguf6EZ4ceh/yiN8LNrcwkt/3Fk4Ry+TKCF/3d0M
QZUzQhhnwmMUfCk=
-----END CERTIFICATE-----