Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3132382e302f32312d3332203d3e203238313832.roa
File:                     3137302e3233312e3132382e302f32312d3332203d3e203238313832.roa (raw, json)
Hash identifier:          GfuyhPXko1FBU8c7NJBghPrpWxMIVTvXxR5JnNLhG9s=
Subject key identifier:   44:B1:CD:0B:B9:2E:E2:B6:28:AD:F8:99:D1:D5:D0:C3:3E:30:7F:55
Certificate issuer:       /CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
Certificate serial:       39D140E61875DC1ABBB9A184D40DEC7D35F82E2F
Authority key identifier: 68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3132382e302f32312d3332203d3e203238313832.roa
Signing time:             Wed 17 Apr 2024 15:18:01 +0000
ROA not before:           Wed 17 Apr 2024 15:13:01 +0000
ROA not after:            Wed 16 Apr 2025 15:18:01 +0000
asID:                     28182
IP address blocks:        170.231.128.0/21 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:d1:40:e6:18:75:dc:1a:bb:b9:a1:84:d4:0d:ec:7d:35:f8:2e:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
        Validity
            Not Before: Apr 17 15:13:01 2024 GMT
            Not After : Apr 16 15:18:01 2025 GMT
        Subject: CN=44B1CD0BB92EE2B628ADF899D1D5D0C33E307F55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f6:46:64:a7:7d:ca:bb:32:dd:73:03:f9:82:
                    02:9c:31:62:50:19:f0:22:4d:f9:f5:27:24:c5:30:
                    ba:39:f6:e0:76:7f:fc:0f:16:b8:25:b2:e7:ff:6f:
                    7b:4b:84:87:cc:36:5f:0b:a2:56:75:b1:31:39:b5:
                    a3:12:7d:c5:5a:bd:b2:81:c4:08:1c:5f:7c:76:aa:
                    71:cb:0e:69:ba:63:c7:3f:f1:9b:4a:41:9b:57:8c:
                    ae:19:bc:15:1e:65:05:c0:ae:e9:19:e6:7d:8b:7c:
                    fb:ed:de:04:6c:30:9b:5b:b6:1d:71:c4:52:6b:9b:
                    2d:27:bd:d1:54:2f:75:c2:50:74:de:84:91:e6:57:
                    1e:6c:4b:d6:13:c2:eb:c3:37:5f:0e:03:7b:34:fd:
                    28:bf:46:29:29:30:47:a9:bf:41:dc:53:97:14:99:
                    15:01:44:8e:d1:a7:cb:f9:af:80:67:37:31:c8:ed:
                    66:40:93:f8:3e:a1:2d:28:34:1d:59:f9:a7:66:41:
                    aa:21:11:6d:c4:59:93:3f:37:16:72:00:25:ed:4a:
                    1a:d8:1b:2e:0c:54:d4:ca:14:e8:8b:9e:15:16:06:
                    aa:18:cf:77:93:7a:ae:92:47:a8:2f:93:a7:93:4e:
                    9d:4d:da:d5:54:1c:82:92:54:de:ab:87:d2:19:fe:
                    7b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B1:CD:0B:B9:2E:E2:B6:28:AD:F8:99:D1:D5:D0:C3:3E:30:7F:55
            X509v3 Authority Key Identifier:
                keyid:68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3132382e302f32312d3332203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         15:11:b1:8e:78:ed:36:7d:c4:07:ba:60:b5:0d:ad:94:31:65:
         fb:a7:0c:e2:e1:a9:ed:d0:d2:c9:ae:98:43:a2:ec:24:a3:20:
         de:2e:36:d8:78:96:60:f9:44:fc:75:2d:8b:44:76:5b:f2:72:
         31:6c:55:2c:0d:7d:e4:85:30:dc:b8:8c:3a:be:c2:6b:50:bc:
         47:6b:f4:2d:a7:96:1b:b4:bf:eb:f9:e2:0f:04:c6:4b:f7:4a:
         0d:60:51:3a:ef:c0:48:8b:82:5c:3f:06:34:33:35:f8:d0:ec:
         30:61:5c:25:25:e6:0f:02:f4:26:d6:a1:6c:56:88:e7:02:95:
         1a:0e:3d:d8:4a:86:ef:4a:bd:9c:22:a1:75:af:5b:13:50:1c:
         2f:1b:52:dc:07:58:5f:f6:43:b3:27:c7:79:2a:da:67:7b:83:
         de:dd:35:96:d3:9b:69:ba:f3:9f:ff:86:06:e3:7d:33:c2:10:
         85:71:9d:12:e6:8a:de:91:df:fe:99:b4:c2:a2:be:fe:18:ad:
         4e:4b:84:87:18:0d:6a:92:a5:7c:30:fe:d3:23:08:a8:23:74:
         38:64:8d:c8:86:4d:5d:62:bb:26:bb:85:c0:72:89:62:cd:35:
         6b:fe:66:82:df:ec:b3:7c:91:bf:79:b9:a6:4d:ee:7c:22:d0:
         f9:b1:a7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----