Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/3133382e33362e3139322e302f32322d3332203d3e20323634353835.roa
File:                     3133382e33362e3139322e302f32322d3332203d3e20323634353835.roa (raw, json)
Hash identifier:          0hJ2+qKRkUuUtmRR1Uzj8ow8tPa9f2PZSgocZRPtZ/4=
Subject key identifier:   FB:A5:E5:DD:62:CE:C6:77:C2:D5:1F:BA:98:5F:45:F1:D4:1F:4F:C6
Certificate issuer:       /CN=07833EE00DABA87DB5F29925F1042F428FD9200E
Certificate serial:       0C355231475545A52A7C72CFE5676EDB1A8086BC
Authority key identifier: 07:83:3E:E0:0D:AB:A8:7D:B5:F2:99:25:F1:04:2F:42:8F:D9:20:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/07833EE00DABA87DB5F29925F1042F428FD9200E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/3133382e33362e3139322e302f32322d3332203d3e20323634353835.roa
Signing time:             Wed 15 Mar 2023 19:52:28 +0000
ROA not before:           Wed 15 Mar 2023 19:47:28 +0000
ROA not after:            Wed 13 Mar 2024 19:52:28 +0000
asID:                     264585
IP address blocks:        138.36.192.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:35:52:31:47:55:45:a5:2a:7c:72:cf:e5:67:6e:db:1a:80:86:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07833EE00DABA87DB5F29925F1042F428FD9200E
        Validity
            Not Before: Mar 15 19:47:28 2023 GMT
            Not After : Mar 13 19:52:28 2024 GMT
        Subject: CN=FBA5E5DD62CEC677C2D51FBA985F45F1D41F4FC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ea:ba:92:3e:19:98:86:1c:20:b6:d5:95:b2:
                    4f:00:3d:f6:24:bf:f0:47:c2:05:8d:80:5b:3b:11:
                    42:cb:c4:1a:b0:b1:fa:4a:7b:2b:17:ec:70:30:a1:
                    38:70:ab:3c:35:e5:0a:e5:2d:0e:5c:dd:e8:02:a6:
                    b9:b3:44:88:51:0e:bb:ac:8b:8c:df:58:ad:d2:76:
                    c6:e5:72:75:7c:56:5a:07:d0:02:a7:3e:f0:02:47:
                    37:0f:b2:d5:f3:f9:36:85:c0:0e:6b:92:8e:e7:6b:
                    9a:82:d3:31:c5:87:49:ef:bf:e6:5e:84:86:de:f0:
                    b9:b0:38:00:0b:88:52:ca:f8:e9:ef:54:c5:66:07:
                    4b:a1:bc:33:39:a4:5e:69:8d:f1:2e:0d:53:94:ae:
                    f7:5f:70:d8:42:7b:f5:b3:06:9d:58:1f:9a:e3:ae:
                    1e:6c:c0:9f:18:18:8f:cd:13:e2:7d:6f:16:24:56:
                    86:06:bc:9e:38:39:62:7c:eb:4f:46:69:c2:19:63:
                    e1:c0:10:8b:40:60:bf:b8:bd:05:14:1c:6a:c7:8b:
                    69:9a:5b:86:01:fd:80:22:7f:1b:bd:ca:2c:10:3d:
                    a2:d3:42:b5:a6:2d:ab:86:a7:69:80:5d:87:a9:d4:
                    c3:6c:89:a9:88:67:cf:01:aa:c4:46:8d:f7:19:71:
                    b7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A5:E5:DD:62:CE:C6:77:C2:D5:1F:BA:98:5F:45:F1:D4:1F:4F:C6
            X509v3 Authority Key Identifier:
                keyid:07:83:3E:E0:0D:AB:A8:7D:B5:F2:99:25:F1:04:2F:42:8F:D9:20:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/07833EE00DABA87DB5F29925F1042F428FD9200E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/07833EE00DABA87DB5F29925F1042F428FD9200E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/3133382e33362e3139322e302f32322d3332203d3e20323634353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:f2:35:80:3a:91:33:b3:0c:d8:d4:fe:a4:88:f6:78:76:eb:
         96:85:20:c9:b8:8c:aa:7b:4b:d8:0f:5c:0d:9c:9f:18:3f:43:
         20:52:ec:77:29:b0:63:98:42:53:14:59:38:d1:34:1e:ba:de:
         a7:c6:fa:26:d3:6c:4b:1a:5a:f8:ed:8d:6b:e9:58:8a:a8:1a:
         50:29:ef:d8:4a:1a:b0:ac:40:cb:72:8f:e3:a2:0d:50:48:ae:
         a7:e4:ed:3b:8b:65:2c:d9:77:2d:c0:a8:eb:ad:1e:57:bd:19:
         c4:9b:2b:ee:f4:3c:38:82:08:bb:79:89:c2:12:33:7b:8f:02:
         3a:05:b0:e3:3a:c7:d3:db:8d:5b:4d:1c:f2:bb:2a:9c:72:dd:
         36:7f:1a:52:64:4e:4c:45:8c:cb:df:e6:ba:5c:8b:82:ec:a9:
         b7:69:ba:9c:b7:cf:df:46:5c:b0:fd:a3:ac:78:cb:f7:cb:83:
         d2:6c:64:f7:09:57:04:70:02:de:fb:9a:a8:a9:5c:f9:c5:de:
         69:07:2e:34:a5:f0:00:a8:14:87:ee:c5:c0:0e:2e:82:fb:16:
         a0:4f:5d:55:08:0e:77:cb:e2:c8:04:a7:38:2f:74:14:f4:5d:
         5d:6b:d7:89:bc:e7:45:e5:73:68:86:bc:1f:ba:4b:86:89:92:
         5a:25:26:e6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDDVSMUdVRaUqfHLP5Wdu2xqAhrwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDc4MzNFRTAwREFCQTg3REI1RjI5OTI1RjEwNDJGNDI4
RkQ5MjAwRTAeFw0yMzAzMTUxOTQ3MjhaFw0yNDAzMTMxOTUyMjhaMDMxMTAvBgNV
BAMTKEZCQTVFNURENjJDRUM2NzdDMkQ1MUZCQTk4NUY0NUYxRDQxRjRGQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC6rqSPhmYhhwgttWVsk8APfYk
v/BHwgWNgFs7EULLxBqwsfpKeysX7HAwoThwqzw15QrlLQ5c3egCprmzRIhRDrus
i4zfWK3SdsblcnV8VloH0AKnPvACRzcPstXz+TaFwA5rko7na5qC0zHFh0nvv+Ze
hIbe8LmwOAALiFLK+OnvVMVmB0uhvDM5pF5pjfEuDVOUrvdfcNhCe/WzBp1YH5rj
rh5swJ8YGI/NE+J9bxYkVoYGvJ44OWJ8609GacIZY+HAEItAYL+4vQUUHGrHi2ma
W4YB/YAifxu9yiwQPaLTQrWmLauGp2mAXYep1MNsiamIZ88BqsRGjfcZcbcRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+6Xl3WLOxnfC1R+6mF9F8dQfT8YwHwYDVR0j
BBgwFoAUB4M+4A2rqH218pkl8QQvQo/ZIA4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUo4eEpkaE5YSFlwWFFuemFod0x6eGdIUlc3N2d5OHgzYXp6eWRRQ2J3
NDMvMC8wNzgzM0VFMDBEQUJBODdEQjVGMjk5MjVGMTA0MkY0MjhGRDkyMDBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA3ODMzRUUwMERBQkE4N0RC
NUYyOTkyNUYxMDQyRjQyOEZEOTIwMEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FKOHhKZGhOWEhZcFhRbnphaHdMenhnSFJXNzdneTh4M2F6enlkUUNidzQzLzAv
MzEzMzM4MmUzMzM2MmUzMTM5MzIyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzQzNTM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKJMAwDQYJKoZIhvcNAQELBQADggEBAHHyNYA6
kTOzDNjU/qSI9nh265aFIMm4jKp7S9gPXA2cnxg/QyBS7HcpsGOYQlMUWTjRNB66
3qfG+ibTbEsaWvjtjWvpWIqoGlAp79hKGrCsQMtyj+OiDVBIrqfk7TuLZSzZdy3A
qOutHle9GcSbK+70PDiCCLt5icISM3uPAjoFsOM6x9PbjVtNHPK7Kpxy3TZ/GlJk
TkxFjMvf5rpci4Lsqbdpupy3z99GXLD9o6x4y/fLg9JsZPcJVwRwAt77mqipXPnF
3mkHLjSl8ACoFIfuxcAOLoL7FqBPXVUIDnfL4sgEpzgvdBT0XV1r14m850Xlc2iG
vB+6S4aJklolJuY=
-----END CERTIFICATE-----