Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/0/3133382e3231392e3138302e302f32322d3332203d3e20323633393435.roa
File:                     3133382e3231392e3138302e302f32322d3332203d3e20323633393435.roa (raw, json)
Hash identifier:          grquM0etDMv6Swf8SSxpXwmjnIcSVxqWpcP1bqm/ks0=
Subject key identifier:   FD:1D:52:53:77:B0:DD:C9:6C:0A:1E:E3:22:8D:93:43:7F:6D:5E:D8
Certificate issuer:       /CN=AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80
Certificate serial:       362845C5F5D86E8971EE6AE05ECA0F9D507431A5
Authority key identifier: AE:34:39:A1:4E:FE:98:DB:77:5A:CE:C2:A1:E4:F5:A7:F7:C3:1C:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/0/3133382e3231392e3138302e302f32322d3332203d3e20323633393435.roa
Signing time:             Tue 27 Feb 2024 17:28:59 +0000
ROA not before:           Tue 27 Feb 2024 17:23:59 +0000
ROA not after:            Tue 25 Feb 2025 17:28:59 +0000
asID:                     263945
IP address blocks:        138.219.180.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:28:45:c5:f5:d8:6e:89:71:ee:6a:e0:5e:ca:0f:9d:50:74:31:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80
        Validity
            Not Before: Feb 27 17:23:59 2024 GMT
            Not After : Feb 25 17:28:59 2025 GMT
        Subject: CN=FD1D525377B0DDC96C0A1EE3228D93437F6D5ED8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:84:2e:01:4e:dd:a3:3c:10:0e:50:88:51:bf:
                    bc:1b:dc:f7:0a:bb:80:21:a8:a0:7a:f0:0e:34:0c:
                    7b:3d:0e:28:5b:d8:35:36:18:86:16:98:cb:1e:7e:
                    cf:65:22:a5:2b:68:72:16:c5:78:a6:70:ac:f8:3b:
                    ff:1b:ee:46:ac:e5:6e:78:85:43:9c:86:c6:8f:13:
                    80:0f:35:b0:2c:b0:32:c3:34:13:c8:ca:79:5a:50:
                    b0:59:3d:3d:80:ed:24:42:b0:00:d0:c8:61:2a:fc:
                    6a:ec:17:10:81:bb:36:d3:3f:ce:57:09:b0:c0:ff:
                    b7:1b:b6:be:49:f6:cd:01:35:71:96:df:3c:72:7f:
                    a8:b4:ba:49:6e:8f:49:70:79:fd:9c:c1:65:e1:44:
                    5e:e3:af:ac:af:93:8a:fb:ae:d5:63:f6:73:d9:ba:
                    e6:53:1f:19:6b:5a:b8:9e:eb:07:7f:eb:e8:87:cc:
                    fa:38:3a:26:db:7b:56:53:4c:29:b2:8a:dd:a8:af:
                    75:b4:fc:a4:04:c6:ea:e6:6a:1a:ad:34:91:55:87:
                    ff:14:c3:36:bc:5c:19:d8:f1:6c:17:06:28:82:2a:
                    ea:2b:b2:39:67:37:03:86:e7:a0:ff:ae:20:c5:68:
                    82:f1:ba:2b:56:2e:8c:93:99:f7:13:75:14:40:d0:
                    6d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:1D:52:53:77:B0:DD:C9:6C:0A:1E:E3:22:8D:93:43:7F:6D:5E:D8
            X509v3 Authority Key Identifier:
                keyid:AE:34:39:A1:4E:FE:98:DB:77:5A:CE:C2:A1:E4:F5:A7:F7:C3:1C:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/0/AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/0/3133382e3231392e3138302e302f32322d3332203d3e20323633393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:49:ec:50:ef:51:f0:c5:05:8d:e6:ef:14:1c:96:0b:20:52:
         f8:e1:7a:6e:1e:3b:11:60:fb:fd:96:22:00:58:01:ff:5a:ef:
         2d:f6:d9:d9:9c:dd:49:d3:9c:f2:05:1d:e3:59:b2:c3:c3:8e:
         27:67:df:87:e7:fd:9a:49:6f:e0:23:33:00:69:bd:d0:e9:7b:
         9a:d6:bb:61:3e:73:e5:36:d7:b3:20:92:fa:f3:39:aa:3f:83:
         a4:5d:e7:b7:6b:f6:c3:97:be:fb:95:2f:80:62:65:2e:d7:a7:
         08:ef:66:74:84:e4:61:76:78:d5:57:ec:21:35:bd:9d:b2:5c:
         8b:71:3f:f3:f4:48:75:6a:25:7f:be:e5:a2:59:e9:c4:c8:32:
         9f:f4:44:8c:36:43:bc:14:bb:5e:23:bd:7b:90:42:e1:19:fe:
         ef:0d:9f:b9:aa:f8:d4:d8:ec:48:bf:35:2f:4c:40:fb:aa:c8:
         d9:9c:31:1a:cb:40:2e:9d:73:29:04:53:93:c1:94:fa:dc:ed:
         39:97:bf:20:39:6a:cd:e2:df:e6:1a:ec:ae:0e:b6:11:18:1f:
         ec:78:2f:e2:61:cb:15:c1:28:63:7d:a2:a3:af:90:0e:78:e1:
         72:7f:84:49:ef:6f:d0:f4:79:0e:4e:96:19:90:bd:14:1e:fd:
         bf:af:d2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----