Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/34352e3138322e37362e302f32332d3233203d3e20323639323334.roa
File:                     34352e3138322e37362e302f32332d3233203d3e20323639323334.roa (raw, json)
Hash identifier:          oFh+Bb2ugiWBQ9+EPrTFwjII8TnK5leNfHXl5n2ePDw=
Subject key identifier:   E7:61:F6:0D:E8:22:59:CD:EB:72:5E:3A:C9:9B:58:CA:10:70:BD:B5
Certificate issuer:       /CN=5AD163E3334A2AF515A739140ED43D8500612D54
Certificate serial:       11CDC6CF2239F1D1CBA782BFA27C4CD66F87584A
Authority key identifier: 5A:D1:63:E3:33:4A:2A:F5:15:A7:39:14:0E:D4:3D:85:00:61:2D:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AD163E3334A2AF515A739140ED43D8500612D54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/34352e3138322e37362e302f32332d3233203d3e20323639323334.roa
Signing time:             Tue 14 Jun 2022 18:17:19 +0000
ROA not before:           Tue 14 Jun 2022 18:12:19 +0000
ROA not after:            Tue 13 Jun 2023 18:17:19 +0000
asID:                     269234
IP address blocks:        45.182.76.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:cd:c6:cf:22:39:f1:d1:cb:a7:82:bf:a2:7c:4c:d6:6f:87:58:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AD163E3334A2AF515A739140ED43D8500612D54
        Validity
            Not Before: Jun 14 18:12:19 2022 GMT
            Not After : Jun 13 18:17:19 2023 GMT
        Subject: CN=E761F60DE82259CDEB725E3AC99B58CA1070BDB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:33:72:bf:dd:5e:a7:0f:e2:bd:31:81:d2:9e:
                    f2:c1:08:c2:8f:2e:9b:19:49:22:11:5f:66:41:09:
                    9a:fb:24:fe:dd:f7:61:bd:aa:a8:93:63:1d:31:fe:
                    b3:04:11:03:c6:cb:74:3d:83:61:0d:5d:6b:79:e5:
                    40:7e:52:0d:c4:0c:6e:76:f3:d1:9d:9f:30:cf:7f:
                    1b:95:cf:23:44:7c:81:a4:39:fb:c4:17:17:bc:8d:
                    ce:66:fd:03:20:e2:67:f0:ba:dd:26:74:bd:bd:77:
                    ab:a3:b7:02:a4:15:a0:5e:38:58:a7:7d:b1:88:aa:
                    fb:b5:dd:f4:e2:f0:31:90:34:e1:16:46:9c:b2:7c:
                    04:4a:6d:b1:78:c8:18:8a:81:6e:02:40:15:a1:fe:
                    4b:4f:4d:21:bb:ed:fa:36:c8:05:5e:02:50:e6:10:
                    eb:ed:a6:b2:0a:03:be:b5:d5:03:c1:c2:7e:20:f0:
                    53:c6:1e:a0:4a:14:69:ce:a2:cf:98:0e:99:17:79:
                    67:b8:18:b5:38:dc:12:b5:c4:bb:7d:74:e3:ff:63:
                    ae:59:6d:e9:58:ad:1b:b3:5f:83:26:61:42:c5:14:
                    32:19:9a:e3:c2:59:1f:b8:a3:c0:d4:23:13:18:35:
                    e2:c2:6f:4d:d3:74:89:1f:dc:cf:3a:de:86:6d:4e:
                    35:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:61:F6:0D:E8:22:59:CD:EB:72:5E:3A:C9:9B:58:CA:10:70:BD:B5
            X509v3 Authority Key Identifier:
                keyid:5A:D1:63:E3:33:4A:2A:F5:15:A7:39:14:0E:D4:3D:85:00:61:2D:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/5AD163E3334A2AF515A739140ED43D8500612D54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AD163E3334A2AF515A739140ED43D8500612D54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/34352e3138322e37362e302f32332d3233203d3e20323639323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:9f:08:34:32:c8:61:33:c2:45:81:20:4d:78:9d:a2:c2:4f:
         66:f9:e0:8a:d6:7a:af:8d:72:cc:f5:7c:2e:4a:7f:ae:95:06:
         e0:a0:3c:87:e3:60:7b:ae:0b:6e:60:ed:7e:6c:fc:00:48:6a:
         b4:ab:66:a3:ed:49:24:8c:d1:f4:2d:62:b1:f7:e2:45:d7:16:
         37:91:d7:ca:32:86:7b:4e:28:66:44:57:5b:49:5b:00:25:55:
         53:73:57:63:05:5f:d8:53:f1:7a:d0:1c:48:68:4e:e8:fe:89:
         e7:af:eb:d0:c2:a4:3e:0b:0c:14:93:e3:da:16:5a:49:a1:ed:
         03:da:e8:1d:09:83:b6:ce:84:b6:73:3f:d8:e0:f3:fe:bc:ed:
         74:7b:19:db:e1:68:cb:fc:8e:3b:9f:66:03:6f:ef:2e:62:67:
         aa:43:86:d4:9b:9b:e8:6f:98:87:f1:87:ef:df:1f:20:b5:de:
         e1:ec:d1:ac:7b:d7:ac:8d:b7:8a:3f:2c:51:16:27:74:17:23:
         4a:92:64:ab:2c:c7:a6:24:03:58:58:52:14:1c:ec:3d:40:72:
         db:c2:19:05:70:20:fc:92:fe:ac:d0:f1:ed:df:6c:ea:9d:c8:
         87:68:25:9d:ae:ae:d7:15:72:2e:e3:eb:ff:f8:d2:49:cd:be:
         0e:49:d9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----