Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BxF85QGg8Q3nCrpY2CmDtmnxYRcwKp6t7jdMovXu5Gjb/0/3139312e3234322e33322e302f32302d3234203d3e20323633343639.roa
File:                     3139312e3234322e33322e302f32302d3234203d3e20323633343639.roa (raw, json)
Hash identifier:          IpokWqvr+5KD8Q9iTlMjPBMrmtHgyLwPoizlK9/+Eug=
Subject key identifier:   2C:86:85:6A:BA:1E:E0:84:BF:CA:68:A1:D9:0A:85:60:ED:70:82:15
Certificate issuer:       /CN=C27022B7E95BA3A6EDB2EBDEA9C142011C269ACE
Certificate serial:       5AF7724D9BC7892ED0676F0EF8ADB76FEE96A4F1
Authority key identifier: C2:70:22:B7:E9:5B:A3:A6:ED:B2:EB:DE:A9:C1:42:01:1C:26:9A:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C27022B7E95BA3A6EDB2EBDEA9C142011C269ACE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BxF85QGg8Q3nCrpY2CmDtmnxYRcwKp6t7jdMovXu5Gjb/0/3139312e3234322e33322e302f32302d3234203d3e20323633343639.roa
Signing time:             Wed 30 Aug 2023 14:00:00 +0000
ROA not before:           Wed 30 Aug 2023 13:55:00 +0000
ROA not after:            Wed 28 Aug 2024 14:00:00 +0000
asID:                     263469
IP address blocks:        191.242.32.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f7:72:4d:9b:c7:89:2e:d0:67:6f:0e:f8:ad:b7:6f:ee:96:a4:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C27022B7E95BA3A6EDB2EBDEA9C142011C269ACE
        Validity
            Not Before: Aug 30 13:55:00 2023 GMT
            Not After : Aug 28 14:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:65:56:01:22:26:e9:ec:a4:ac:dc:1e:29:e9:
                    43:a1:07:f4:e8:13:f8:6c:a0:88:7c:8d:b2:00:15:
                    e5:56:58:ca:45:81:8e:45:d7:13:00:82:04:41:3d:
                    bc:9c:b5:dc:a1:c2:f2:55:00:a1:f6:63:f9:31:2e:
                    2e:21:ec:9c:99:ba:d4:4d:5f:e5:7b:e4:8a:04:7a:
                    6d:df:f9:0d:43:12:7d:b4:7e:51:31:02:7c:fd:d2:
                    70:fd:1d:ce:e8:1f:0a:03:2a:9d:9a:c2:c1:ec:3d:
                    d7:e7:1f:d3:55:5c:ab:6b:4c:c5:9c:53:c5:dd:b1:
                    c2:84:87:9a:f4:60:e3:9d:1e:be:3b:bf:94:f0:22:
                    9a:fe:83:61:7f:a3:f7:61:0e:21:ee:35:bb:01:25:
                    c1:f4:2b:33:c9:c0:64:1f:6b:4d:3d:a1:7b:ed:08:
                    62:2a:b4:72:c1:59:c0:1d:a7:f2:27:e8:07:5e:11:
                    e6:6a:ed:f1:89:c0:76:74:f6:97:fb:cb:00:0c:c3:
                    f8:4e:f9:1e:2a:f9:bf:3d:b4:6b:e7:2d:cb:5d:d8:
                    98:1e:e3:3e:5d:dc:58:ab:cd:05:17:38:ee:ff:20:
                    7a:7a:1d:75:49:72:f9:4c:97:5d:8c:9f:14:dd:86:
                    c2:59:5f:07:8e:76:22:a5:9f:86:b6:a3:ce:f7:4f:
                    50:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:86:85:6A:BA:1E:E0:84:BF:CA:68:A1:D9:0A:85:60:ED:70:82:15
            X509v3 Authority Key Identifier:
                keyid:C2:70:22:B7:E9:5B:A3:A6:ED:B2:EB:DE:A9:C1:42:01:1C:26:9A:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BxF85QGg8Q3nCrpY2CmDtmnxYRcwKp6t7jdMovXu5Gjb/0/C27022B7E95BA3A6EDB2EBDEA9C142011C269ACE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C27022B7E95BA3A6EDB2EBDEA9C142011C269ACE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxF85QGg8Q3nCrpY2CmDtmnxYRcwKp6t7jdMovXu5Gjb/0/3139312e3234322e33322e302f32302d3234203d3e20323633343639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         53:3a:2c:0e:aa:b3:4e:56:58:24:b8:4c:63:a1:fc:32:7c:a9:
         2a:21:37:ab:4f:7a:b3:77:23:ec:97:83:cc:63:8d:55:d6:bb:
         81:43:fd:8b:7a:c0:e0:93:21:58:80:2a:83:21:49:59:a7:fa:
         68:49:9b:98:91:86:78:91:c5:36:0e:4b:1b:5f:10:c3:3f:1a:
         28:68:0c:2b:6e:47:5b:bb:c0:c1:ce:55:8d:43:d8:94:fd:21:
         7a:9a:01:7b:21:8b:f8:6b:76:b7:40:af:c4:50:63:bd:b0:d5:
         c6:6d:ec:fc:cc:43:66:a1:e1:b7:bd:14:0c:08:8c:b6:66:ea:
         a5:85:68:c1:15:ea:69:f2:f6:16:15:c1:59:d5:82:1d:11:26:
         93:9f:ae:2e:93:b1:18:dc:d9:05:68:47:12:cc:3b:2a:3c:7f:
         5c:2d:05:4c:de:29:f5:a8:a5:a8:99:a6:e1:99:35:f8:d0:88:
         16:04:22:ca:75:f7:51:bc:33:ea:7c:53:b2:cd:f1:ad:23:ea:
         be:aa:68:38:bd:f8:b3:90:44:93:18:ed:59:7a:5d:1e:48:df:
         be:79:c9:4f:ea:96:41:4b:f4:13:69:37:24:16:36:af:11:49:
         62:c2:ee:79:79:f0:3c:65:b5:68:ec:3a:50:21:e5:41:e2:91:
         ab:0c:4d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----