Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/3137302e38322e3230342e302f32332d3332203d3e20323632353838.roa
File:                     3137302e38322e3230342e302f32332d3332203d3e20323632353838.roa (raw, json)
Hash identifier:          O7HvUtgNPS3aodQtLrzGk6huK6Pyt4g441J2c5KHO0I=
Subject key identifier:   74:58:B7:F2:80:B4:5C:3A:C9:58:CA:CD:B1:73:0B:86:6C:D5:63:5D
Certificate issuer:       /CN=77DFC580E6F8C352C451D04DDD8B9E42C5B25745
Certificate serial:       3BAA0C16B29006B7D7D0831DF8569FF9F1FCF0B2
Authority key identifier: 77:DF:C5:80:E6:F8:C3:52:C4:51:D0:4D:DD:8B:9E:42:C5:B2:57:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77DFC580E6F8C352C451D04DDD8B9E42C5B25745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/3137302e38322e3230342e302f32332d3332203d3e20323632353838.roa
Signing time:             Wed 03 Jan 2024 00:27:39 +0000
ROA not before:           Wed 03 Jan 2024 00:22:39 +0000
ROA not after:            Wed 01 Jan 2025 00:27:39 +0000
asID:                     262588
IP address blocks:        170.82.204.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:aa:0c:16:b2:90:06:b7:d7:d0:83:1d:f8:56:9f:f9:f1:fc:f0:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77DFC580E6F8C352C451D04DDD8B9E42C5B25745
        Validity
            Not Before: Jan  3 00:22:39 2024 GMT
            Not After : Jan  1 00:27:39 2025 GMT
        Subject: CN=7458B7F280B45C3AC958CACDB1730B866CD5635D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e7:fb:84:4c:49:01:7b:dc:0b:46:f3:ac:d6:
                    75:34:e1:05:75:7f:ef:ca:e5:c2:10:a9:bc:18:66:
                    a2:6b:77:f0:3c:1d:f7:7b:4f:a8:c4:33:3a:de:a0:
                    5e:91:91:df:2a:3b:7d:6a:a2:d5:48:94:1c:07:ec:
                    71:dd:28:02:44:6b:66:e3:22:3f:d4:07:d2:98:a9:
                    0c:52:2d:e2:61:35:8d:ae:0e:e8:dc:61:76:b5:89:
                    b5:a8:f5:a3:c4:e9:9e:9d:e0:77:d7:ee:ac:58:af:
                    93:a2:12:71:64:89:37:73:bb:c1:e9:60:67:75:d9:
                    30:e4:59:12:94:75:52:eb:75:a2:18:1c:dc:ee:7a:
                    c8:ad:30:3e:62:87:1d:9d:7b:c2:57:06:ba:67:fb:
                    d4:b5:f6:3c:3d:dd:ef:d9:c8:dc:f8:88:22:c6:c6:
                    63:37:99:5b:1b:57:29:69:06:1b:39:39:df:a1:6c:
                    68:06:28:a7:63:b6:77:a5:27:f6:67:1a:4c:05:7c:
                    6d:8c:aa:e2:7a:f9:1e:00:c4:f3:44:cf:f3:92:7d:
                    3d:f8:07:67:fb:ab:de:1d:a0:c1:33:a3:3e:7c:9a:
                    1d:21:66:d2:5c:31:ed:14:16:2a:be:ef:ec:68:fd:
                    c0:ea:8f:58:a7:12:5a:39:c3:fc:43:c5:46:da:3c:
                    82:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:58:B7:F2:80:B4:5C:3A:C9:58:CA:CD:B1:73:0B:86:6C:D5:63:5D
            X509v3 Authority Key Identifier:
                keyid:77:DF:C5:80:E6:F8:C3:52:C4:51:D0:4D:DD:8B:9E:42:C5:B2:57:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/77DFC580E6F8C352C451D04DDD8B9E42C5B25745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77DFC580E6F8C352C451D04DDD8B9E42C5B25745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/3137302e38322e3230342e302f32332d3332203d3e20323632353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:16:9d:db:5f:0c:0d:a6:2d:29:d3:ab:5a:e8:6d:6d:3e:e9:
         51:83:e8:55:99:8d:7c:73:dc:08:da:2a:e9:55:bb:f5:32:1a:
         84:cd:91:23:b2:34:60:1a:bf:b9:e9:ad:c8:7e:e0:28:7b:ba:
         cd:45:73:ac:43:e2:88:0a:de:91:4f:39:79:57:8f:dd:1f:26:
         b7:12:6f:a7:d3:70:59:30:f9:da:0d:66:2b:61:b3:15:58:92:
         b9:ba:b3:12:45:ad:79:da:2a:af:70:f5:e8:3a:7c:32:90:17:
         ea:f0:31:f3:1d:ac:f0:9c:f7:91:15:a3:61:38:e7:1f:85:b2:
         12:e9:6b:aa:a7:e7:23:2b:3d:05:b1:c3:be:fe:e4:1c:82:59:
         be:2b:37:8a:6c:5a:db:2a:c3:e2:40:1d:6d:a2:98:a8:cd:2b:
         7f:3f:30:ce:28:5b:82:00:06:63:f5:d3:f3:aa:4d:c2:56:51:
         9d:eb:77:41:4c:39:ae:ab:01:d2:74:63:67:6f:2e:f1:6c:d0:
         6b:30:01:e4:b8:bf:19:9e:98:ba:60:09:5b:f0:59:d8:88:cb:
         47:c1:4f:68:b5:55:4b:f2:85:f2:17:94:d9:e9:2c:e7:38:a1:
         91:b8:75:28:5e:a8:73:1f:df:04:4f:15:74:75:f3:2a:42:fe:
         66:aa:5a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----