Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/0/3133382e302e37322e302f32322d3332203d3e20323634353331.roa
File:                     3133382e302e37322e302f32322d3332203d3e20323634353331.roa (raw, json)
Hash identifier:          P/upwy6NeJyWHN4Jtd+xL9qoNLpSQce/5iqaGXvE/ig=
Subject key identifier:   60:F8:13:F7:CC:F6:0F:3D:47:FE:DE:33:F2:29:04:AC:D2:56:2B:46
Certificate issuer:       /CN=B286DC4ADA1266D19596D82A464951E0C029EE82
Certificate serial:       0A19555088D40ABFFB59476A0DC78405F9C15674
Authority key identifier: B2:86:DC:4A:DA:12:66:D1:95:96:D8:2A:46:49:51:E0:C0:29:EE:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B286DC4ADA1266D19596D82A464951E0C029EE82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/0/3133382e302e37322e302f32322d3332203d3e20323634353331.roa
Signing time:             Sun 18 Feb 2024 16:25:03 +0000
ROA not before:           Sun 18 Feb 2024 16:20:03 +0000
ROA not after:            Sun 16 Feb 2025 16:25:03 +0000
asID:                     264531
IP address blocks:        138.0.72.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:19:55:50:88:d4:0a:bf:fb:59:47:6a:0d:c7:84:05:f9:c1:56:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B286DC4ADA1266D19596D82A464951E0C029EE82
        Validity
            Not Before: Feb 18 16:20:03 2024 GMT
            Not After : Feb 16 16:25:03 2025 GMT
        Subject: CN=60F813F7CCF60F3D47FEDE33F22904ACD2562B46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:91:9c:58:5a:f6:b1:f5:4f:f5:44:d1:14:48:
                    59:2e:fd:0d:03:59:22:a1:a9:0d:a6:49:d2:88:d8:
                    f8:e4:d2:9f:58:94:9a:16:68:09:1f:fe:09:3e:5c:
                    ea:c6:3c:f4:47:b3:f8:68:0f:10:a7:64:9f:e7:c1:
                    fc:fd:52:ec:95:58:ac:d5:57:77:46:97:0b:50:98:
                    0e:8f:44:19:57:32:3c:2f:f6:96:2c:b2:f0:74:08:
                    f0:f8:be:88:b8:0c:05:a0:dc:47:38:75:25:79:e7:
                    e4:ff:82:07:02:9c:0d:a4:b6:29:52:ed:8d:04:ef:
                    00:0b:63:e0:25:cd:02:8b:29:0c:73:54:77:97:7a:
                    73:a0:3f:6a:a0:13:f6:d7:f0:ed:a3:b6:dc:93:d5:
                    82:89:dc:fb:78:f3:e9:97:50:68:ae:ea:b0:17:1f:
                    f1:f2:f7:1f:a4:58:ad:8a:02:46:dd:7b:84:b6:4a:
                    ad:6a:80:55:49:fa:2a:59:a7:c3:79:45:01:c0:41:
                    41:20:96:a0:82:5a:2a:92:f6:54:b3:a9:d0:7f:c3:
                    50:54:d5:a7:a1:2f:03:21:46:9c:0b:94:71:f7:a9:
                    3b:a8:25:c6:1e:68:9d:03:7d:f9:3d:32:02:ff:a0:
                    e6:a6:1f:ae:aa:44:16:8f:a3:c0:81:57:6c:70:cd:
                    a4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F8:13:F7:CC:F6:0F:3D:47:FE:DE:33:F2:29:04:AC:D2:56:2B:46
            X509v3 Authority Key Identifier:
                keyid:B2:86:DC:4A:DA:12:66:D1:95:96:D8:2A:46:49:51:E0:C0:29:EE:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/0/B286DC4ADA1266D19596D82A464951E0C029EE82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B286DC4ADA1266D19596D82A464951E0C029EE82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/0/3133382e302e37322e302f32322d3332203d3e20323634353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:e5:ef:0a:df:eb:44:84:f1:37:19:2d:6f:91:09:b9:eb:e8:
         a3:12:50:98:e6:a2:3b:53:cb:dc:d4:d7:c1:3c:9c:bf:86:28:
         84:0a:43:5a:f6:45:81:26:3f:61:03:55:e8:28:aa:e1:f1:4e:
         5d:11:9d:c9:4f:df:e2:84:27:fa:66:78:97:ce:48:c6:2a:75:
         1d:c1:7c:c0:60:11:26:63:19:8c:5f:22:4c:ce:42:3b:e9:71:
         17:ab:7a:ae:60:09:54:b4:7d:e3:33:8f:f1:a8:c7:de:0a:5a:
         1d:fb:ae:7f:c5:4e:0b:85:11:36:9f:69:3d:16:48:8e:1c:f7:
         32:e0:a8:d1:c1:f0:fb:8e:94:0f:1f:68:16:29:7d:ee:a2:57:
         c4:cd:5d:1d:1a:81:77:b7:6e:6c:75:4b:27:26:36:04:ed:12:
         d4:a3:5d:f9:fa:4b:66:17:e0:e0:89:71:8e:e3:c8:4a:b2:7a:
         5a:44:18:60:00:f2:80:09:e6:ab:c5:12:27:6d:d3:5e:06:b3:
         9a:27:06:f9:ea:fb:b5:d0:4f:b7:a1:e9:c6:7b:43:1a:c6:98:
         38:2a:bd:d2:09:06:90:65:5c:08:3b:fb:b1:d3:5f:52:e1:ed:
         b8:4c:4b:6c:09:b8:cb:71:cd:32:24:47:2c:3d:ff:b3:98:c0:
         e2:31:b2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----