Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/0/3136382e3232372e32382e302f32322d3332203d3e20323632383830.roa
File:                     3136382e3232372e32382e302f32322d3332203d3e20323632383830.roa (raw, json)
Hash identifier:          xriS3hCHtk0T+CFmhnvm+OgGD+ZPVFzswj3pFmqZ1kA=
Subject key identifier:   B3:A7:4C:9D:B5:6A:95:2F:00:6A:6C:61:19:B8:11:0B:25:5C:51:23
Certificate issuer:       /CN=4331C75604BDCB26E64B954974D729F616D10D84
Certificate serial:       023D8AD42858B9954D1F81D12208A69D6F6F0346
Authority key identifier: 43:31:C7:56:04:BD:CB:26:E6:4B:95:49:74:D7:29:F6:16:D1:0D:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4331C75604BDCB26E64B954974D729F616D10D84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/0/3136382e3232372e32382e302f32322d3332203d3e20323632383830.roa
Signing time:             Mon 29 Jan 2024 19:37:00 +0000
ROA not before:           Mon 29 Jan 2024 19:32:00 +0000
ROA not after:            Mon 27 Jan 2025 19:37:00 +0000
asID:                     262880
IP address blocks:        168.227.28.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:3d:8a:d4:28:58:b9:95:4d:1f:81:d1:22:08:a6:9d:6f:6f:03:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4331C75604BDCB26E64B954974D729F616D10D84
        Validity
            Not Before: Jan 29 19:32:00 2024 GMT
            Not After : Jan 27 19:37:00 2025 GMT
        Subject: CN=B3A74C9DB56A952F006A6C6119B8110B255C5123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c6:91:c7:5a:9b:87:45:c4:e2:e2:c2:fe:5d:
                    d5:6c:90:48:0c:fc:67:6a:47:2b:bf:f1:9f:26:9f:
                    41:8a:d0:6e:8b:0f:a6:ab:78:7d:05:46:d7:0e:2c:
                    8e:a1:a8:52:c5:1b:60:35:6b:00:d2:51:40:c3:9f:
                    20:d3:d4:48:b8:97:e4:d3:9c:cd:74:a3:46:b2:22:
                    08:2b:6b:98:76:49:2f:32:09:a9:1c:44:8c:04:6e:
                    07:f4:18:f1:51:dc:fb:2d:94:be:42:db:35:75:6a:
                    79:ac:11:94:01:6c:67:77:be:1c:30:c5:61:40:73:
                    03:f9:ec:ce:1a:2a:66:29:99:ba:33:7e:cd:4e:c5:
                    df:10:06:16:d9:60:c9:8a:bd:24:67:f5:8b:ef:00:
                    ee:f0:91:88:29:4e:32:15:17:2d:88:f7:75:58:f8:
                    18:44:2f:38:5c:73:fa:26:4d:79:8e:0d:89:22:ce:
                    5b:26:1e:f5:40:45:90:c2:e9:18:24:4e:da:7c:53:
                    53:c5:81:97:1e:f5:40:de:37:fd:50:90:0f:b8:b1:
                    d0:f8:05:3d:45:67:00:c9:08:29:a8:1d:46:8d:71:
                    e6:1d:08:2b:f5:b6:19:21:40:08:0e:a5:63:fe:c3:
                    78:e4:ea:42:04:29:eb:e6:c0:43:82:5b:4b:a6:00:
                    cb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A7:4C:9D:B5:6A:95:2F:00:6A:6C:61:19:B8:11:0B:25:5C:51:23
            X509v3 Authority Key Identifier:
                keyid:43:31:C7:56:04:BD:CB:26:E6:4B:95:49:74:D7:29:F6:16:D1:0D:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/0/4331C75604BDCB26E64B954974D729F616D10D84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4331C75604BDCB26E64B954974D729F616D10D84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/0/3136382e3232372e32382e302f32322d3332203d3e20323632383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:e9:7e:5c:85:12:01:43:df:b6:c1:47:d1:b9:7d:30:77:f2:
         e7:44:6c:19:97:f9:c8:1c:7f:df:c5:79:70:fb:53:1c:c6:be:
         23:9b:e5:b1:27:f0:4b:ae:85:e4:b7:2f:22:52:cd:94:9f:f7:
         77:79:f5:80:49:da:3f:03:a7:7a:9b:4b:01:b2:25:b3:c4:06:
         43:68:30:67:58:f4:6d:ee:72:d6:67:77:0a:77:9e:1d:d7:d5:
         fc:7e:fc:1e:91:9a:4f:ce:c3:fb:0e:c3:ed:ba:75:d3:97:ea:
         d7:57:de:e4:97:12:03:f7:2c:95:82:04:be:cf:78:15:98:95:
         df:73:1a:c9:ba:41:6e:5e:0c:4a:f1:d4:d7:09:ec:f5:0a:d4:
         84:2a:2b:a5:5b:01:eb:b8:5a:ed:b2:bd:3c:f8:2b:e5:5e:a4:
         32:45:e6:5d:82:0e:0a:ae:7f:c2:61:f3:1d:f3:f6:2f:a6:c9:
         c7:69:19:d0:cd:5c:06:82:11:4c:24:83:62:fa:a6:f0:f7:5c:
         1c:99:57:42:f4:28:06:68:69:23:e9:a2:06:3c:b8:41:9c:92:
         b0:e6:8e:3d:3e:50:97:6a:70:cf:db:9f:79:72:59:8e:21:b7:
         9d:fb:20:85:de:26:eb:52:7f:df:02:df:77:57:b0:17:0a:f6:
         b9:38:8d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----