Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3133382e3231392e3234342e302f32332d3233203d3e203532383733.roa
File:                     3133382e3231392e3234342e302f32332d3233203d3e203532383733.roa (raw, json)
Hash identifier:          nHvpS/WtPDx9/D/uD1BNUKKmw2Ca1SzdAcLEfnnMmxs=
Subject key identifier:   C5:8C:A0:C9:E7:1B:75:B8:76:9B:1F:5F:D0:D5:10:1B:E8:CC:A5:53
Certificate issuer:       /CN=C64C749CDDED82B52D268A701AC64F5932801E3C
Certificate serial:       30494B5E1FA4266D399ED28B088A6071D95AD72B
Authority key identifier: C6:4C:74:9C:DD:ED:82:B5:2D:26:8A:70:1A:C6:4F:59:32:80:1E:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C64C749CDDED82B52D268A701AC64F5932801E3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3133382e3231392e3234342e302f32332d3233203d3e203532383733.roa
Signing time:             Fri 20 Jan 2023 19:32:06 +0000
ROA not before:           Fri 20 Jan 2023 19:27:06 +0000
ROA not after:            Fri 19 Jan 2024 19:32:06 +0000
asID:                     52873
IP address blocks:        138.219.244.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:49:4b:5e:1f:a4:26:6d:39:9e:d2:8b:08:8a:60:71:d9:5a:d7:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C64C749CDDED82B52D268A701AC64F5932801E3C
        Validity
            Not Before: Jan 20 19:27:06 2023 GMT
            Not After : Jan 19 19:32:06 2024 GMT
        Subject: CN=C58CA0C9E71B75B8769B1F5FD0D5101BE8CCA553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a7:1d:a7:7d:79:c3:2c:7d:94:04:18:12:3c:
                    01:03:d3:6c:9d:e9:07:63:34:fb:6c:83:33:c4:9a:
                    f3:c8:aa:fa:81:bd:21:3e:71:3d:15:61:8a:d9:29:
                    b4:0b:5d:7c:61:35:e6:9f:3c:c1:46:29:e8:bb:89:
                    e6:b7:2d:c3:c7:f7:8a:4a:56:a6:b7:ff:63:3c:b5:
                    1f:f3:bb:ba:64:b5:14:45:67:a4:fe:31:77:cd:14:
                    50:5e:53:a5:08:b4:71:34:db:86:78:12:b8:57:c8:
                    37:1f:d0:be:92:ff:d3:44:c1:9a:8c:4b:34:44:6f:
                    24:f8:77:ab:48:2a:0f:28:34:fd:ae:13:34:9e:ca:
                    22:02:53:36:b7:4b:a5:4a:7b:6f:40:d6:1a:5b:53:
                    2b:f3:c7:f5:a5:65:2f:00:06:d9:50:41:3f:a2:27:
                    4f:0b:c2:3f:0c:d2:38:20:28:fe:e8:3f:2a:fe:83:
                    2b:98:2d:7e:3d:7a:ee:11:e0:11:d4:52:9f:b1:74:
                    56:03:97:29:fc:bc:c0:c2:36:31:6d:08:50:a5:57:
                    40:e1:35:92:e1:0e:e8:18:20:3f:f3:37:6a:c5:45:
                    8f:7b:06:e1:07:18:2e:ee:16:09:b3:21:71:ef:24:
                    70:67:f3:26:fa:c5:ab:8b:e8:80:e5:3a:32:85:1c:
                    89:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:8C:A0:C9:E7:1B:75:B8:76:9B:1F:5F:D0:D5:10:1B:E8:CC:A5:53
            X509v3 Authority Key Identifier:
                keyid:C6:4C:74:9C:DD:ED:82:B5:2D:26:8A:70:1A:C6:4F:59:32:80:1E:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/C64C749CDDED82B52D268A701AC64F5932801E3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C64C749CDDED82B52D268A701AC64F5932801E3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3133382e3231392e3234342e302f32332d3233203d3e203532383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:08:8d:9a:ca:0e:52:09:ec:1f:8c:d1:8d:0f:8a:3d:ce:b5:
         3b:c3:01:81:59:6d:5c:79:ce:30:56:5e:59:c9:83:6c:fa:38:
         18:ab:7b:56:d3:62:c6:26:49:bd:0f:34:01:b6:06:c4:4c:00:
         72:96:be:93:b1:ed:9f:9e:0e:3b:49:1f:b0:46:19:fd:8d:73:
         27:6e:eb:48:17:19:3f:e3:84:6a:d0:cb:78:6b:8a:d9:ca:9f:
         cd:c9:52:8e:58:22:4a:1b:95:47:d6:6a:c8:4e:03:9a:12:e2:
         da:3e:d6:1c:5e:5b:20:21:db:a9:0c:cc:2a:c9:96:05:4c:e8:
         bc:64:65:d8:7a:28:35:bc:11:f1:35:61:69:6e:60:3e:bf:0f:
         0e:c3:d2:9f:2e:a7:cb:88:fc:ad:a3:2d:eb:ad:9c:89:77:60:
         f2:69:bf:8a:62:c0:1b:66:e6:d9:18:eb:f0:c1:91:a9:0a:58:
         f0:d3:27:7f:d7:1d:c3:f1:2b:fa:bc:39:82:5b:e4:c0:2b:2c:
         3f:dc:6a:3c:82:f6:af:f4:4f:7a:8d:aa:e3:3f:83:22:39:d7:
         34:f0:f6:50:94:98:6f:ce:18:4f:dd:e9:bf:51:03:bc:aa:06:
         74:6e:7f:23:48:3d:87:26:5e:8a:b4:0b:a2:02:99:a3:92:7f:
         c9:a2:fb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----