Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e36342e302f32302d3230203d3e203238333039.roa
File:                     3138372e34342e36342e302f32302d3230203d3e203238333039.roa (raw, json)
Hash identifier:          UCKSLxUtvvgA9g9DbiUO+9Boo0L5QwIT9X0mP/fRKWQ=
Subject key identifier:   52:F0:B6:5E:D7:78:91:3E:1F:AB:92:19:DE:50:FC:04:7C:51:A3:84
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       2CCCAADC6B22CA94D32FBF72F0FEC6D0994D83E5
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e36342e302f32302d3230203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:49 +0000
ROA not before:           Thu 14 Sep 2023 18:42:49 +0000
ROA not after:            Thu 12 Sep 2024 18:47:49 +0000
asID:                     28309
IP address blocks:        187.44.64.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:cc:aa:dc:6b:22:ca:94:d3:2f:bf:72:f0:fe:c6:d0:99:4d:83:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:49 2023 GMT
            Not After : Sep 12 18:47:49 2024 GMT
        Subject: CN=52F0B65ED778913E1FAB9219DE50FC047C51A384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:59:ee:ed:11:9a:ba:66:67:f6:bf:39:04:01:
                    93:95:c3:47:53:6b:57:8a:ba:78:70:e3:aa:3d:4e:
                    93:10:d2:89:58:42:23:66:da:2f:3f:34:cf:6e:1e:
                    40:0e:55:dc:3a:42:aa:1e:fc:38:6d:e7:49:eb:4b:
                    b9:5b:b3:b2:00:32:ee:ee:27:0d:92:5a:2e:4b:fa:
                    b6:e4:3f:04:93:eb:66:9c:26:db:e1:68:31:0c:cf:
                    b1:d5:0e:39:2e:ad:c7:5d:96:6d:71:37:97:c0:08:
                    49:98:e7:28:c8:0b:8e:2f:0b:5a:17:27:a1:96:83:
                    02:88:ee:70:3a:3c:aa:d6:c4:b6:98:8b:8c:95:1f:
                    0c:66:99:c2:a5:35:30:00:74:0c:ac:48:27:50:b1:
                    5a:5f:c8:b5:b2:d6:84:21:fa:56:96:7a:76:da:7c:
                    57:f4:ea:0f:30:8b:9f:af:1c:79:c3:14:42:bd:96:
                    94:1c:f5:fc:d4:29:61:9a:d5:ef:07:bc:0a:46:dc:
                    03:b5:41:c3:1b:68:ba:38:c8:42:fd:b4:1e:1c:f6:
                    1e:5c:3d:39:16:e9:9e:1c:e2:91:66:68:31:a7:dc:
                    15:ea:63:34:58:b1:bc:ad:cc:d4:25:72:1c:92:f3:
                    a1:f7:c7:fd:44:9a:41:02:7a:fd:56:75:3f:bc:76:
                    8e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F0:B6:5E:D7:78:91:3E:1F:AB:92:19:DE:50:FC:04:7C:51:A3:84
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e36342e302f32302d3230203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.44.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         12:9d:3a:5f:f0:d5:db:59:48:80:da:24:63:24:91:fa:55:4b:
         39:97:70:91:d6:63:87:22:8f:e0:dd:d2:66:ef:9a:87:c0:5a:
         9e:65:20:e3:d7:4c:09:51:6e:e1:11:f0:55:85:0f:4f:17:54:
         7e:9c:d9:87:c0:cf:ab:d9:10:58:72:b9:f1:e0:52:a3:38:eb:
         97:01:14:3b:6e:0d:30:db:6e:26:80:b1:f6:24:fc:ea:46:a3:
         2a:79:25:3c:ea:ba:2c:1b:2a:81:ab:0d:f0:28:99:4f:88:97:
         1f:12:36:fa:96:5f:fb:3e:d3:be:6c:bc:bd:c3:82:58:de:f5:
         f3:39:f0:5e:ac:75:00:cb:da:75:27:73:2d:62:40:69:b8:96:
         90:c7:e0:3f:72:60:25:a5:04:52:d1:97:fc:d3:05:1a:54:e0:
         28:23:ee:ed:80:9f:79:e2:55:64:1b:03:97:9a:09:70:ba:fb:
         c6:33:f5:36:58:c3:ab:55:bd:3f:74:f1:a8:82:83:02:a1:48:
         c8:ea:25:40:0e:3c:b0:7a:89:07:03:71:c0:c7:95:ce:da:eb:
         00:8e:aa:69:cc:bf:cc:74:d8:0c:3e:d8:2a:ae:81:9a:ed:b5:
         27:12:3f:cb:73:6d:1a:6f:f2:f4:f4:43:cf:73:12:52:1a:af:
         77:bd:16:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----