Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3134342e302f32342d3234203d3e20323634343835.roa
File:                     3138392e39312e3134342e302f32342d3234203d3e20323634343835.roa (raw, json)
Hash identifier:          r3h7hgdw0KtPDwDpfvof3D6UN5af1J5pO1xhbCDnRbo=
Subject key identifier:   2F:EA:D1:9B:07:56:8D:99:4C:F1:B8:54:04:B7:26:5B:61:53:93:53
Certificate issuer:       /CN=6EEDEE8327CA5E254B6084A6EEF690900FDBE887
Certificate serial:       0680C21506C3AF53DA852AF4E41DC42253D28E89
Authority key identifier: 6E:ED:EE:83:27:CA:5E:25:4B:60:84:A6:EE:F6:90:90:0F:DB:E8:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6EEDEE8327CA5E254B6084A6EEF690900FDBE887.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3134342e302f32342d3234203d3e20323634343835.roa
Signing time:             Wed 14 Sep 2022 12:46:30 +0000
ROA not before:           Wed 14 Sep 2022 12:41:30 +0000
ROA not after:            Wed 13 Sep 2023 12:46:30 +0000
asID:                     264485
IP address blocks:        189.91.144.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:80:c2:15:06:c3:af:53:da:85:2a:f4:e4:1d:c4:22:53:d2:8e:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EEDEE8327CA5E254B6084A6EEF690900FDBE887
        Validity
            Not Before: Sep 14 12:41:30 2022 GMT
            Not After : Sep 13 12:46:30 2023 GMT
        Subject: CN=2FEAD19B07568D994CF1B85404B7265B61539353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ae:3f:05:00:15:ba:0c:b9:8a:8b:7e:db:f0:
                    4e:b0:f9:9e:a1:05:24:8a:ad:e4:e3:a1:27:be:32:
                    10:83:47:55:8f:32:e8:a4:72:9d:f1:82:eb:20:ad:
                    e8:f8:32:3e:bf:03:b9:59:09:67:2f:32:44:dc:df:
                    d5:a1:4a:83:85:91:44:7e:96:e8:75:57:31:ea:cb:
                    bb:98:56:25:d6:22:56:bb:f9:f3:fe:8d:93:f7:49:
                    dc:0e:aa:9c:7d:b4:18:1b:f8:58:f9:5d:f5:3f:d9:
                    92:e6:81:7b:da:77:e9:18:96:de:e6:01:22:c0:32:
                    43:71:f8:66:e5:c6:df:55:99:7a:2d:d5:07:ef:09:
                    6d:06:ad:8e:b3:d0:e2:ff:8c:3b:0a:9e:31:0b:56:
                    ef:0c:13:64:2f:03:34:a8:d6:e5:4e:de:9f:fb:da:
                    e7:c7:cf:29:44:22:6f:98:2a:96:f4:ef:5a:db:c9:
                    a6:a3:77:cc:8f:d0:8d:17:1c:6f:aa:26:2f:20:5b:
                    cc:d0:eb:65:91:dd:57:39:0e:1f:b4:36:78:e6:34:
                    ea:ed:5f:53:33:14:70:f0:69:32:40:15:65:5c:6b:
                    3c:e5:ff:00:d4:97:d2:ec:f7:51:98:ff:4a:5f:43:
                    ec:f2:80:b1:c9:57:d3:bd:e4:d3:d8:0f:11:ab:5f:
                    78:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:EA:D1:9B:07:56:8D:99:4C:F1:B8:54:04:B7:26:5B:61:53:93:53
            X509v3 Authority Key Identifier:
                keyid:6E:ED:EE:83:27:CA:5E:25:4B:60:84:A6:EE:F6:90:90:0F:DB:E8:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/6EEDEE8327CA5E254B6084A6EEF690900FDBE887.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6EEDEE8327CA5E254B6084A6EEF690900FDBE887.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3134342e302f32342d3234203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:47:37:f1:34:b2:2f:46:5e:4d:d2:56:0a:c9:dd:b0:ca:eb:
         39:5a:e8:66:25:ba:61:81:84:8b:9a:3a:af:08:4f:01:16:87:
         c1:81:af:48:d3:1a:3d:06:44:a6:ed:73:8d:38:d3:40:4a:86:
         ac:0b:29:4b:f2:a2:65:34:7f:93:78:49:6c:84:af:8b:94:55:
         9f:08:85:98:0e:c0:54:92:30:47:94:34:34:ca:74:ef:8f:d3:
         e8:c3:05:43:e4:c7:60:e0:e4:b9:fa:97:2f:c0:93:b2:2a:50:
         d5:02:38:1f:5f:a9:6c:a0:82:4b:8b:ce:15:7a:50:c4:45:ec:
         dc:90:e7:47:80:d2:3f:95:7b:7d:05:0a:ef:6b:84:dd:50:4a:
         86:e1:f4:a4:ee:cb:7d:f2:80:36:07:1d:77:01:39:b0:27:21:
         fb:29:e9:f8:72:47:9b:4c:d1:53:02:d5:bb:17:f2:8e:89:49:
         7c:30:52:9b:73:3d:93:80:5f:01:35:28:47:cb:71:1f:29:d6:
         16:78:6b:df:d3:3a:af:f4:03:20:9c:dc:8d:3a:e4:30:27:2e:
         0a:a6:e1:4c:54:62:5f:f1:c8:6d:3d:1b:24:fb:bb:44:63:8e:
         9d:1d:9c:3c:bc:38:31:c3:d7:61:04:2a:10:d5:e9:4f:73:c3:
         a5:7c:da:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----