Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0/3137372e3130352e3132382e302f32302d3230203d3e203238363334.roa
File:                     3137372e3130352e3132382e302f32302d3230203d3e203238363334.roa (raw, json)
Hash identifier:          drS/UuYiuLeSNGJVBJvD16kF3OyttqDR5McSzRoSgxM=
Subject key identifier:   9C:53:77:AD:D3:D7:22:CA:4F:FA:90:09:54:A5:E1:15:37:47:A8:B2
Certificate issuer:       /CN=2A38124DA4255FE32B70B911C7C0AD42921CFCAB
Certificate serial:       08EEADBC88B9C3C97F81D24EEF9C3B31A849E916
Authority key identifier: 2A:38:12:4D:A4:25:5F:E3:2B:70:B9:11:C7:C0:AD:42:92:1C:FC:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A38124DA4255FE32B70B911C7C0AD42921CFCAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0/3137372e3130352e3132382e302f32302d3230203d3e203238363334.roa
Signing time:             Mon 08 May 2023 15:16:40 +0000
ROA not before:           Mon 08 May 2023 15:11:40 +0000
ROA not after:            Mon 06 May 2024 15:16:40 +0000
asID:                     28634
IP address blocks:        177.105.128.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ee:ad:bc:88:b9:c3:c9:7f:81:d2:4e:ef:9c:3b:31:a8:49:e9:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A38124DA4255FE32B70B911C7C0AD42921CFCAB
        Validity
            Not Before: May  8 15:11:40 2023 GMT
            Not After : May  6 15:16:40 2024 GMT
        Subject: CN=9C5377ADD3D722CA4FFA900954A5E1153747A8B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f6:ff:fa:44:8c:ba:55:83:51:00:d0:d8:31:
                    13:57:e2:cf:60:f1:5d:1c:56:8c:0e:57:19:7e:28:
                    8a:9a:63:6f:4a:64:43:b5:e9:c6:44:9e:32:d5:1a:
                    e9:cb:50:c0:e3:e3:b6:a5:df:be:17:a1:07:d4:51:
                    05:ea:68:d8:d7:a7:27:0f:f1:f0:bf:33:d9:ed:c4:
                    9b:8e:29:6e:98:9b:ba:af:b4:02:29:eb:0a:26:a1:
                    a6:cc:0d:2e:ce:8a:3f:f4:a9:c0:57:97:29:47:14:
                    03:95:91:91:4c:fb:63:31:79:ab:d0:54:b5:45:74:
                    a1:cc:7e:91:db:1b:3b:4e:ba:e6:d7:14:a1:99:48:
                    e9:fe:73:93:13:dc:c6:96:08:48:af:e6:e5:a3:a7:
                    db:1f:79:bd:b9:59:62:d9:42:a2:aa:1b:fb:0d:be:
                    d5:4a:2a:b9:59:96:79:76:cf:b0:9e:48:94:3d:37:
                    ba:4a:e8:74:75:b9:5a:13:8d:2e:34:14:0e:4a:a2:
                    a6:67:04:94:e2:3a:48:9d:ec:60:96:a0:d0:51:c2:
                    26:f1:2b:d0:52:09:ae:97:45:f9:2c:19:d2:c0:75:
                    4e:51:a1:9c:e1:64:1a:5e:bf:f0:bb:cb:16:a4:1a:
                    e5:db:1b:1d:a9:99:ae:dc:66:01:99:85:8a:9f:f3:
                    54:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:53:77:AD:D3:D7:22:CA:4F:FA:90:09:54:A5:E1:15:37:47:A8:B2
            X509v3 Authority Key Identifier:
                keyid:2A:38:12:4D:A4:25:5F:E3:2B:70:B9:11:C7:C0:AD:42:92:1C:FC:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0/2A38124DA4255FE32B70B911C7C0AD42921CFCAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A38124DA4255FE32B70B911C7C0AD42921CFCAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0/3137372e3130352e3132382e302f32302d3230203d3e203238363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5c:85:83:ac:3c:3d:43:77:fc:fb:06:83:c9:28:31:05:02:65:
         25:eb:a1:06:88:21:66:e7:4d:9a:2a:68:75:98:d6:a0:6b:c4:
         6f:61:9f:f2:67:02:86:eb:1c:ac:1f:1c:80:85:64:aa:ac:06:
         c3:c1:fd:ab:96:69:d1:1e:09:d6:1d:2d:42:41:ca:bc:ac:45:
         83:7e:5b:d2:22:42:ab:bd:d6:c7:44:c9:dc:56:8b:f4:33:27:
         f0:9b:3d:81:7d:e7:5f:3f:a3:ac:d6:53:fd:6a:a3:5e:1c:a0:
         95:5d:30:64:db:7b:ca:41:3b:b0:2f:30:4e:5b:c6:07:5f:11:
         45:05:88:07:28:8b:97:4c:74:9f:9d:56:7e:96:2e:cd:9c:4a:
         02:18:5a:05:35:4a:bf:20:79:6a:cb:26:82:fa:e6:14:50:b6:
         3e:fd:1c:40:16:3f:5d:e3:b7:14:0c:0c:1d:73:69:e2:76:fb:
         3e:4d:df:9d:fd:0c:9d:69:8f:cb:45:c1:6e:e7:69:47:d3:bf:
         23:11:9b:89:4b:b9:2b:f9:30:66:2e:bd:b6:bb:1e:ab:a2:88:
         51:bc:9f:8b:80:e5:c9:dc:d6:81:12:75:e6:dd:43:7a:f7:d8:
         88:b1:b4:c4:77:65:fe:32:7c:89:f8:2f:ba:58:1a:1e:3a:c6:
         95:06:35:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----