Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0/3137392e34322e342e302f32332d3233203d3e20323731313034.roa
File:                     3137392e34322e342e302f32332d3233203d3e20323731313034.roa (raw, json)
Hash identifier:          1iRiJksFGi8uN9cLYEOFQCIDmxztIkvBDgO/sA16xOs=
Subject key identifier:   F5:7E:BE:D0:1F:E8:8A:A6:60:09:B4:59:E6:61:A7:41:12:41:49:A0
Certificate issuer:       /CN=696EBF66C996090BCB0C788A9A0A4BFCD2E1B31C
Certificate serial:       23FA2CE1FA3D3FF0C9174D72E259585DBACAA935
Authority key identifier: 69:6E:BF:66:C9:96:09:0B:CB:0C:78:8A:9A:0A:4B:FC:D2:E1:B3:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/696EBF66C996090BCB0C788A9A0A4BFCD2E1B31C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0/3137392e34322e342e302f32332d3233203d3e20323731313034.roa
Signing time:             Tue 18 Apr 2023 23:42:14 +0000
ROA not before:           Tue 18 Apr 2023 23:37:14 +0000
ROA not after:            Tue 16 Apr 2024 23:42:14 +0000
asID:                     271104
IP address blocks:        179.42.4.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:fa:2c:e1:fa:3d:3f:f0:c9:17:4d:72:e2:59:58:5d:ba:ca:a9:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696EBF66C996090BCB0C788A9A0A4BFCD2E1B31C
        Validity
            Not Before: Apr 18 23:37:14 2023 GMT
            Not After : Apr 16 23:42:14 2024 GMT
        Subject: CN=F57EBED01FE88AA66009B459E661A741124149A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ff:aa:3e:59:85:04:80:54:a0:41:d0:99:ed:
                    53:b5:b0:30:bd:ce:38:4a:2b:b7:de:19:fb:23:a4:
                    bd:0e:55:4e:af:f9:6b:dd:05:70:ea:80:86:fb:80:
                    7b:1a:fe:3f:65:99:c7:73:3b:4f:fd:be:07:87:dd:
                    a2:1f:3d:71:f3:e2:44:95:6a:77:2b:89:b2:ea:18:
                    eb:1a:2e:d8:d2:de:17:da:f0:81:d6:24:e2:64:3a:
                    e1:77:34:1b:3a:0a:76:55:2a:c7:08:40:10:3f:37:
                    0b:2e:f8:15:95:3f:77:20:aa:d5:14:75:3e:b7:25:
                    83:0d:42:2d:83:92:ed:47:09:f6:a7:bf:62:4f:bc:
                    d7:44:b6:8e:99:37:6c:93:61:de:ae:d5:c1:f7:48:
                    2f:cf:09:41:c3:83:bd:5f:0a:db:5f:2a:41:a7:52:
                    7f:b7:44:03:6f:98:f7:29:10:0f:7f:f6:a0:1d:44:
                    38:9c:0e:c1:8b:d4:7f:4e:ba:2f:9b:e8:92:1e:30:
                    e0:e0:18:27:f6:64:69:2b:23:09:be:8d:64:49:a8:
                    5c:39:0f:75:d2:4c:c2:22:18:71:7d:4d:26:b3:a8:
                    b2:b1:60:cc:6f:ed:ad:b7:b2:f3:46:c4:74:6e:b0:
                    1d:4f:c5:40:42:02:7c:23:7e:6b:8f:a0:8a:13:3f:
                    99:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:7E:BE:D0:1F:E8:8A:A6:60:09:B4:59:E6:61:A7:41:12:41:49:A0
            X509v3 Authority Key Identifier:
                keyid:69:6E:BF:66:C9:96:09:0B:CB:0C:78:8A:9A:0A:4B:FC:D2:E1:B3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0/696EBF66C996090BCB0C788A9A0A4BFCD2E1B31C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/696EBF66C996090BCB0C788A9A0A4BFCD2E1B31C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0/3137392e34322e342e302f32332d3233203d3e20323731313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:1f:0e:09:5d:1f:dc:d5:b3:5d:ef:32:dc:f0:15:e1:e7:40:
         1b:be:22:00:a0:3a:1b:24:6d:11:be:f5:47:80:19:0a:72:3d:
         a8:8c:ed:c9:4b:1d:8d:a1:85:44:4b:dd:ed:c2:db:8a:12:c8:
         de:61:f2:2a:2b:9f:ce:d0:cd:19:20:46:19:35:7e:05:b0:55:
         b8:5c:88:8d:9d:03:62:39:9c:fa:74:74:23:8b:40:12:6c:38:
         3d:2f:79:3c:0c:96:e5:71:38:58:9d:1e:0a:98:9a:21:d5:e8:
         91:08:d3:eb:28:97:f8:08:21:61:3b:ba:ab:77:91:cd:a5:06:
         00:aa:8f:3c:06:40:a3:3f:e6:f1:c7:89:c5:46:b3:22:2f:8c:
         2a:de:54:06:d5:29:f2:0c:67:8e:85:64:fd:41:43:b2:ac:0b:
         ea:5e:33:26:9b:8c:1b:e8:b9:b4:0f:03:35:1b:dd:bb:f7:9c:
         fc:f1:3c:4a:25:f7:6d:a6:57:f5:ac:d1:ec:8d:c5:da:1f:dd:
         15:b4:26:e5:15:14:a8:e2:93:d9:65:65:03:db:8f:19:b7:41:
         04:bd:42:a4:f7:39:08:ca:23:07:79:b5:f2:c0:de:19:28:9a:
         e3:1e:d3:18:c0:93:7a:6f:28:25:d9:e9:81:84:86:24:5d:86:
         3a:89:d3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----