Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/3138372e3130382e3234302e302f32302d3230203d3e20323633343135.roa
File:                     3138372e3130382e3234302e302f32302d3230203d3e20323633343135.roa (raw, json)
Hash identifier:          ggRw0fca4Sdfie4LCGrJOpcqZZHLYlZ2o7bUOla/Or8=
Subject key identifier:   F7:32:9D:42:4D:60:05:4B:28:03:87:FF:28:17:09:36:8A:95:1E:01
Certificate issuer:       /CN=55035838712C7386E139CC98D786476DBAB79648
Certificate serial:       43EEDAFC4EBD4C78FF6C494FB9E288704053AC7A
Authority key identifier: 55:03:58:38:71:2C:73:86:E1:39:CC:98:D7:86:47:6D:BA:B7:96:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/55035838712C7386E139CC98D786476DBAB79648.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/3138372e3130382e3234302e302f32302d3230203d3e20323633343135.roa
Signing time:             Tue 06 Dec 2022 15:10:45 +0000
ROA not before:           Tue 06 Dec 2022 15:05:45 +0000
ROA not after:            Tue 05 Dec 2023 15:10:45 +0000
asID:                     263415
IP address blocks:        187.108.240.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ee:da:fc:4e:bd:4c:78:ff:6c:49:4f:b9:e2:88:70:40:53:ac:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55035838712C7386E139CC98D786476DBAB79648
        Validity
            Not Before: Dec  6 15:05:45 2022 GMT
            Not After : Dec  5 15:10:45 2023 GMT
        Subject: CN=F7329D424D60054B280387FF281709368A951E01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4b:72:b0:99:47:94:88:7e:ff:9a:d9:e5:8b:
                    a5:5a:b9:88:14:a4:6e:c5:28:e7:85:f8:88:19:41:
                    bf:0c:9c:bd:e7:3c:a3:c0:3d:c8:a6:03:08:ed:5d:
                    9f:3a:43:63:b6:09:a2:e1:b8:f0:a1:36:86:ac:46:
                    8c:50:86:06:bd:0f:b1:8b:6b:30:9d:75:62:24:36:
                    2f:aa:19:f3:a9:66:47:08:55:19:dc:2a:85:61:f6:
                    e5:ae:f3:a7:06:04:49:59:c3:dc:76:d9:ba:be:eb:
                    28:87:f1:5f:ce:0a:1f:58:27:cf:91:e9:02:b5:70:
                    8b:95:a7:e9:e1:dc:7c:da:41:1d:2c:fc:2a:c2:b1:
                    23:97:a6:db:fc:f9:ca:11:00:a2:e0:d5:da:e4:a9:
                    ce:43:67:4e:b8:43:84:96:02:48:f8:a8:a2:a0:c6:
                    6c:22:f7:77:f4:1c:ce:09:8f:f6:61:63:a4:d3:28:
                    a9:da:5d:ea:ee:c1:0b:23:5b:8d:51:16:a2:19:cc:
                    86:bc:e2:46:7c:b4:d6:63:59:c5:ae:1e:4f:3a:f7:
                    94:2b:c8:42:2c:44:37:a3:c6:ed:42:e7:3f:28:44:
                    2d:e7:6f:c1:b9:9a:07:46:01:a3:60:12:2e:02:3b:
                    28:e4:e6:b2:09:e5:a0:c4:3d:a8:50:fb:50:0a:64:
                    d6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:32:9D:42:4D:60:05:4B:28:03:87:FF:28:17:09:36:8A:95:1E:01
            X509v3 Authority Key Identifier:
                keyid:55:03:58:38:71:2C:73:86:E1:39:CC:98:D7:86:47:6D:BA:B7:96:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/55035838712C7386E139CC98D786476DBAB79648.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/55035838712C7386E139CC98D786476DBAB79648.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/3138372e3130382e3234302e302f32302d3230203d3e20323633343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4f:1f:db:05:67:c5:41:11:dd:94:54:69:b0:ae:2e:6c:2d:90:
         4d:29:5f:cc:6c:43:45:7e:41:1e:35:fe:78:6c:b6:68:f5:eb:
         35:85:8f:51:9b:20:16:2e:e6:2a:dd:d3:e3:ff:c3:14:25:0d:
         a4:98:05:db:d2:d1:40:10:d7:a6:77:2e:37:fe:fd:25:aa:cb:
         fa:c8:a3:9d:9c:fc:e5:dd:b9:9f:c1:bb:9c:2f:e4:72:37:61:
         25:d6:cd:d3:da:ad:fe:db:b9:87:f2:78:7f:a0:f7:62:2e:a7:
         62:b5:f1:79:4a:c7:e3:10:e5:6c:1d:92:26:dd:ea:36:86:41:
         26:d1:47:45:cc:ae:a1:ec:2a:01:8d:91:dd:a9:e7:ec:2b:20:
         11:e6:47:35:dd:36:d3:d6:e8:5d:73:d7:c2:d7:ce:32:96:12:
         d1:1c:6b:e2:2a:f0:a3:fc:52:b3:cf:cd:89:23:b3:66:cc:1f:
         19:bd:33:0a:12:59:74:c7:79:d5:15:fd:22:08:d1:9e:5e:73:
         2b:8f:27:3f:b6:7f:ae:74:5d:c9:aa:8b:70:05:70:21:ad:28:
         0e:76:6c:5b:4b:6a:61:75:7d:76:8f:f0:59:89:4b:69:b8:25:
         a5:d4:e8:97:ae:80:48:01:ac:c7:13:1b:7b:84:c2:95:8a:e8:
         77:e4:0d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----