Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/3133382e302e3131342e302f32332d3233203d3e20323634353434.roa
File:                     3133382e302e3131342e302f32332d3233203d3e20323634353434.roa (raw, json)
Hash identifier:          RsSzdQ87Skfi0JAzSJiyJ01AN2hV6sr1/+Xy1FJLXzI=
Subject key identifier:   35:A7:1A:BC:13:F2:52:3D:6C:99:C2:FD:DD:41:2C:71:DF:FA:A1:A1
Certificate issuer:       /CN=8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2
Certificate serial:       1C0EDA13BE294A7F56CDF0FA669522F3F9541CA9
Authority key identifier: 8F:BA:83:61:34:31:13:7A:FC:0E:EC:6F:AC:92:B6:DD:0A:F7:48:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/3133382e302e3131342e302f32332d3233203d3e20323634353434.roa
Signing time:             Tue 18 Apr 2023 23:42:02 +0000
ROA not before:           Tue 18 Apr 2023 23:37:02 +0000
ROA not after:            Tue 16 Apr 2024 23:42:02 +0000
asID:                     264544
IP address blocks:        138.0.114.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:0e:da:13:be:29:4a:7f:56:cd:f0:fa:66:95:22:f3:f9:54:1c:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2
        Validity
            Not Before: Apr 18 23:37:02 2023 GMT
            Not After : Apr 16 23:42:02 2024 GMT
        Subject: CN=35A71ABC13F2523D6C99C2FDDD412C71DFFAA1A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:07:e1:cb:35:96:1c:a0:ad:1f:1c:d7:39:9b:
                    67:73:37:b1:52:a7:14:62:56:a4:68:3d:cc:f1:a6:
                    4b:05:7d:9e:5a:c3:f6:d2:1f:8f:19:45:97:c4:49:
                    18:1a:23:10:6e:ce:25:04:56:fe:a2:7e:5d:95:a7:
                    1d:b2:79:71:56:58:e1:09:81:e3:ea:85:6d:ef:0b:
                    7a:0a:56:0c:05:16:0d:42:69:6c:aa:30:5b:03:06:
                    83:21:24:71:99:ec:b7:34:50:3a:ff:cf:cc:c4:5e:
                    fd:e7:87:1b:37:89:22:a8:22:7b:a2:e2:b0:16:97:
                    0c:0a:92:a2:4e:ce:72:8a:71:b8:db:cb:cd:c4:c0:
                    fb:1e:e5:b2:1a:8a:ec:ab:d3:5e:20:49:d4:6d:46:
                    07:d4:08:fe:ef:cf:8e:e1:fa:a5:a9:de:f9:8a:2a:
                    42:cb:0e:b9:fb:79:b6:41:1d:e1:15:19:25:58:bb:
                    15:2a:54:4d:17:44:10:bf:2c:2e:df:c6:28:34:98:
                    d7:2b:7d:60:08:14:5f:80:07:0d:15:f4:f9:1a:f0:
                    cb:17:67:71:75:83:a8:33:7b:73:05:04:46:5f:6d:
                    1f:35:02:30:01:55:c7:24:4f:2b:b8:f9:18:7c:69:
                    8d:54:b2:a5:0b:41:41:1e:d1:c0:a9:d2:9c:e4:b0:
                    9f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A7:1A:BC:13:F2:52:3D:6C:99:C2:FD:DD:41:2C:71:DF:FA:A1:A1
            X509v3 Authority Key Identifier:
                keyid:8F:BA:83:61:34:31:13:7A:FC:0E:EC:6F:AC:92:B6:DD:0A:F7:48:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/3133382e302e3131342e302f32332d3233203d3e20323634353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:a1:88:a9:21:b2:f1:dd:aa:81:0c:ea:84:41:85:5b:93:cf:
         36:a5:31:f4:63:a7:ed:88:d9:5b:48:ed:85:0d:86:94:b9:e2:
         0d:e5:86:78:08:1e:d9:9f:42:f9:d2:f4:62:1c:54:08:9a:55:
         5f:f0:ff:c9:cc:e0:40:7d:24:10:dd:18:61:20:77:8a:46:5b:
         cc:38:c9:43:b5:b9:39:6b:d5:1b:9e:26:f2:2d:73:45:30:0c:
         01:05:4b:98:be:48:dd:fe:a5:82:db:d8:07:3f:7f:50:6e:79:
         54:0e:c7:13:5f:60:41:ed:09:a7:9b:c6:d7:9a:28:60:d2:a4:
         ca:41:c4:8d:d4:60:53:bb:59:a1:6b:be:67:0d:85:11:94:fc:
         78:1a:ba:e2:74:0a:96:0b:6e:ea:08:4d:2b:86:89:4d:4b:da:
         42:bf:32:c3:28:fb:96:c8:97:29:d9:ad:9c:9f:d7:32:26:7c:
         5e:d0:25:25:20:1b:08:c8:ad:a7:f5:70:6f:2c:c8:cf:82:5f:
         56:69:3f:a2:1a:6b:85:0c:18:1b:bc:4f:5a:d8:70:78:e0:f7:
         87:69:6f:63:99:d7:e9:2f:3e:e6:21:cf:cf:fd:84:8d:6a:df:
         52:8e:7a:4e:2d:cf:f4:06:cf:6a:8b:9e:5c:19:7d:11:17:67:
         aa:70:49:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----