Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e3138302e302e302f31342d3234203d3e203238353733.roa
File:                     3138372e3138302e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          u+n3rUm12QnnvX8SA6VLjue+QFcMGkzY50L30TIyCVk=
Subject key identifier:   EC:EA:F0:44:00:39:09:46:43:CA:1B:DA:14:3A:EC:72:81:89:69:FE
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       18F1072F82528D03DE363A6226AA031A6C92BF89
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e3138302e302e302f31342d3234203d3e203238353733.roa
Signing time:             Wed 03 Apr 2024 18:31:46 +0000
ROA not before:           Wed 03 Apr 2024 18:26:46 +0000
ROA not after:            Wed 02 Apr 2025 18:31:46 +0000
asID:                     28573
IP address blocks:        187.180.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:f1:07:2f:82:52:8d:03:de:36:3a:62:26:aa:03:1a:6c:92:bf:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Apr  3 18:26:46 2024 GMT
            Not After : Apr  2 18:31:46 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6c:ac:8d:3d:99:b4:7d:84:c4:41:0d:88:af:
                    32:72:9e:fd:8e:a7:bc:36:40:70:44:03:fb:c8:b0:
                    8c:d1:46:77:eb:52:ac:cf:ee:ca:44:c2:5a:a0:4e:
                    94:34:eb:94:65:a5:c1:f7:ae:f9:d9:a7:95:5a:a4:
                    f1:2c:ce:dd:25:d7:2e:10:1c:c4:5c:17:71:ec:e9:
                    f0:82:d7:1e:98:98:77:66:c9:dd:2e:d1:80:63:4d:
                    ee:04:ec:26:ec:6f:5c:48:70:b8:9f:a9:27:41:1f:
                    a0:e8:9b:c2:16:23:34:bc:65:da:17:b1:9c:cf:93:
                    e6:33:87:2c:6d:8c:c2:4d:1a:8b:33:a7:0d:f5:b6:
                    8f:a6:c7:c7:b1:d7:d5:76:37:16:47:d4:e0:50:ec:
                    73:7d:a5:c0:6a:c0:ae:3a:5e:e7:1e:78:ee:09:9d:
                    57:d6:a8:a2:f6:0b:4e:03:52:ad:a9:6b:1b:01:18:
                    5a:18:53:99:48:77:d1:4a:35:af:48:5e:45:e2:79:
                    c9:96:a9:53:4c:25:17:38:b7:f9:55:f0:30:5f:3b:
                    50:8e:16:b8:12:16:6b:5a:2e:8f:c7:1d:28:41:4f:
                    d9:2f:62:9d:76:bf:6a:5a:13:8d:ff:f0:e8:ee:be:
                    8a:1f:49:3c:56:af:c9:bf:95:ff:9c:e3:19:ba:3e:
                    a6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:EA:F0:44:00:39:09:46:43:CA:1B:DA:14:3A:EC:72:81:89:69:FE
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e3138302e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.180.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         c8:a9:e2:e1:de:5e:04:66:d0:47:32:28:69:89:31:07:7c:7b:
         c9:01:ef:e6:13:2e:3b:60:52:0d:a3:20:0b:b0:95:0c:3e:4d:
         1a:96:ad:97:d4:8a:a2:ef:98:8d:5b:6a:3b:d4:97:b0:23:e3:
         12:a9:24:50:92:09:4d:dd:4c:ad:8f:c7:a4:23:de:2b:b6:a2:
         c8:0a:a1:a3:88:62:a2:0f:2b:67:64:15:cf:09:92:ce:ec:d7:
         b3:e9:78:f5:f8:25:84:a8:17:38:5b:a3:2b:aa:b2:42:cf:50:
         25:56:09:23:57:06:7c:39:7e:f5:a0:9f:22:a2:9d:db:6b:66:
         cd:2d:b9:23:0e:6f:5b:49:e8:b2:a9:60:81:ed:37:af:00:25:
         1b:7c:80:ff:5e:ba:1b:6f:e8:cd:84:be:62:1c:4b:e8:ec:16:
         c3:b8:fe:53:fa:7b:dd:88:fd:b0:45:46:0c:0c:fd:0d:5e:94:
         64:a1:72:c1:ca:57:65:9a:ef:7d:20:e7:17:86:fc:10:67:6d:
         ce:de:74:a7:b4:23:a2:1e:e0:89:04:77:2b:45:e8:fb:47:ae:
         86:09:8c:42:d9:c5:5e:37:41:a9:e9:c2:bf:cb:87:c4:c6:17:
         70:79:ac:c8:bb:05:9f:20:20:17:6d:b9:33:e9:dc:ec:51:b3:
         97:ae:e6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----