Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e302e302f31372d3332203d3e203238313335.roa
File:                     3137372e34362e302e302f31372d3332203d3e203238313335.roa (raw, json)
Hash identifier:          LtatDV3V7hMVD+BAh0K4lFN+yZgGXUTYPmeCrtjkFtQ=
Subject key identifier:   D0:FD:D2:24:E7:DD:0A:C1:A2:73:7D:3C:90:4C:C8:22:7E:E4:F4:FC
Certificate issuer:       /CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
Certificate serial:       061A880C93C091FF7CFEB2FA719F79ABB331103B
Authority key identifier: 10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e302e302f31372d3332203d3e203238313335.roa
Signing time:             Thu 25 May 2023 18:45:16 +0000
ROA not before:           Thu 25 May 2023 18:40:16 +0000
ROA not after:            Thu 23 May 2024 18:45:16 +0000
asID:                     28135
IP address blocks:        177.46.0.0/17 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:1a:88:0c:93:c0:91:ff:7c:fe:b2:fa:71:9f:79:ab:b3:31:10:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
        Validity
            Not Before: May 25 18:40:16 2023 GMT
            Not After : May 23 18:45:16 2024 GMT
        Subject: CN=D0FDD224E7DD0AC1A2737D3C904CC8227EE4F4FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d4:29:5c:db:5f:e1:c1:6d:b0:ea:34:5b:93:
                    8c:1c:4c:ac:50:4e:c2:7c:91:9b:ff:75:12:3c:1e:
                    e1:2a:b0:d7:a3:fc:da:08:c5:2c:16:fb:e0:14:e3:
                    f4:4c:87:2b:52:4a:1b:38:5c:27:1e:9a:5e:73:02:
                    e4:3b:ac:74:25:73:51:d8:60:48:44:e6:9c:48:25:
                    3e:03:ad:4a:b3:30:18:fc:67:64:e0:63:f0:b2:17:
                    06:b5:b7:24:5f:5d:18:15:01:b4:d9:0d:23:a6:fc:
                    03:f9:9d:04:c3:79:cf:93:b1:66:a4:33:f5:7e:fd:
                    d4:ff:49:4d:bf:f0:d5:e3:d4:d2:4b:50:73:de:f7:
                    8e:87:66:bf:59:3d:3e:82:98:be:be:35:52:b3:ca:
                    58:7d:79:bd:6e:f1:65:4f:1f:cf:6d:20:ef:fb:c9:
                    76:06:c1:9f:dc:2f:1a:32:b9:66:54:a5:62:92:3c:
                    eb:fa:15:97:47:ad:49:10:fc:11:b1:ec:d0:5f:97:
                    36:f3:18:56:fd:53:97:02:11:7d:a9:9a:49:61:45:
                    90:f5:85:cb:a9:d6:8c:4e:05:a9:a0:ef:8a:ba:14:
                    9d:74:1a:b2:8a:a3:fe:54:db:1f:7f:9c:aa:9e:f2:
                    b8:1e:c4:86:67:c0:d1:c2:5c:5f:e2:50:e2:c7:11:
                    66:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:FD:D2:24:E7:DD:0A:C1:A2:73:7D:3C:90:4C:C8:22:7E:E4:F4:FC
            X509v3 Authority Key Identifier:
                keyid:10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e302e302f31372d3332203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.46.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         2d:d0:ca:cc:1e:97:5b:9a:8a:ab:59:0f:b2:3f:49:42:e8:9b:
         dd:87:87:1a:35:9b:f7:68:35:02:44:54:4d:43:ba:49:11:61:
         e8:32:2f:cc:e9:8c:f7:9b:5d:8c:c0:a1:a7:e1:21:55:11:f4:
         1f:04:97:ea:0b:62:22:d4:9c:57:19:fe:b3:46:ab:07:35:d6:
         11:0c:6c:d3:13:d8:19:50:2e:ba:b2:da:ba:39:da:56:3e:f1:
         a0:52:d9:48:40:58:3a:6d:a4:f3:77:1d:08:e8:d1:96:d8:86:
         aa:9e:8c:1e:a7:0e:e6:7b:2d:99:f1:f9:ad:1d:82:86:e8:3a:
         46:dd:85:50:ce:3b:3b:85:99:22:c3:6f:98:7d:6d:49:54:4b:
         a1:2a:5a:b9:43:3b:b6:f7:9c:1c:06:3b:23:a1:e6:ff:ae:5b:
         9a:75:6d:0b:f3:1f:d3:c2:06:20:be:9a:25:a2:98:97:64:bc:
         44:ea:d8:a0:38:9d:d8:4b:ea:20:b3:ac:b3:5f:8a:12:35:40:
         b5:56:66:92:c8:a0:2a:ae:35:0e:5e:b6:bd:e3:b8:7f:8a:38:
         fc:70:ab:88:0b:fa:99:55:12:85:b6:22:9a:8a:be:52:71:c4:
         7d:18:9d:6c:d3:cd:3e:5a:b2:fe:00:2b:3c:5b:2c:9a:fc:5b:
         c9:12:54:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----