Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0/34352e3233332e3234342e302f32332d3332203d3e20323637333332.roa
File:                     34352e3233332e3234342e302f32332d3332203d3e20323637333332.roa (raw, json)
Hash identifier:          9c4ojtsjSx+FB8bPUy6ozP0E+7mmR9WKiWNeB6ErOy0=
Subject key identifier:   3B:36:65:C7:A3:90:60:60:3E:61:A0:C2:59:23:EC:56:A0:81:42:5A
Certificate issuer:       /CN=DEC7A278CF3AD64BD52396CE08FE9432FC940997
Certificate serial:       29BF92960864EB03073D387A9B61F5A84132BB6B
Authority key identifier: DE:C7:A2:78:CF:3A:D6:4B:D5:23:96:CE:08:FE:94:32:FC:94:09:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEC7A278CF3AD64BD52396CE08FE9432FC940997.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0/34352e3233332e3234342e302f32332d3332203d3e20323637333332.roa
Signing time:             Sun 29 Jan 2023 21:25:58 +0000
ROA not before:           Sun 29 Jan 2023 21:20:58 +0000
ROA not after:            Sun 28 Jan 2024 21:25:58 +0000
asID:                     267332
IP address blocks:        45.233.244.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:bf:92:96:08:64:eb:03:07:3d:38:7a:9b:61:f5:a8:41:32:bb:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEC7A278CF3AD64BD52396CE08FE9432FC940997
        Validity
            Not Before: Jan 29 21:20:58 2023 GMT
            Not After : Jan 28 21:25:58 2024 GMT
        Subject: CN=3B3665C7A39060603E61A0C25923EC56A081425A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:84:c5:27:9e:8c:a5:05:9c:a2:33:80:d5:ef:
                    13:d6:9f:76:14:78:fe:8e:34:f0:96:1c:91:76:94:
                    e5:19:da:fc:f1:9c:bf:77:da:cb:1a:66:4c:09:c6:
                    44:84:e4:2e:1d:fb:fa:92:8a:34:af:cb:c6:c6:fa:
                    96:cd:31:4c:dd:3d:73:e3:e3:c1:d3:1b:e9:b4:d0:
                    93:76:2f:de:f7:7c:d8:4d:c0:e0:f7:32:9a:ac:fd:
                    8d:3c:2e:f5:f3:e0:bd:f4:0c:8e:14:72:ea:2c:8c:
                    2a:cb:9e:a7:e3:0a:a0:86:fe:1e:4c:d5:d8:ba:c6:
                    31:f0:0c:83:2f:15:d1:89:df:56:76:9c:a8:a5:94:
                    55:34:f7:42:9e:f4:1d:29:ed:49:13:e9:3b:22:ae:
                    46:e6:d3:fd:26:21:a4:dd:a6:15:f2:74:46:c2:e1:
                    77:56:d3:3b:79:86:fe:b3:17:fd:97:b1:00:51:79:
                    77:31:cb:7e:f8:2e:c7:d5:93:6c:03:14:8c:2c:05:
                    a2:d7:7a:c9:a6:a4:02:c0:9a:b2:af:0b:ac:d7:13:
                    9e:82:94:40:8e:9a:1d:a8:e3:0a:f0:5c:ac:2a:4f:
                    58:88:08:84:d6:f7:ad:e2:b7:20:1b:66:0e:73:db:
                    8b:77:a1:4d:ee:38:6f:15:46:6a:9a:49:70:49:93:
                    5f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:36:65:C7:A3:90:60:60:3E:61:A0:C2:59:23:EC:56:A0:81:42:5A
            X509v3 Authority Key Identifier:
                keyid:DE:C7:A2:78:CF:3A:D6:4B:D5:23:96:CE:08:FE:94:32:FC:94:09:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0/DEC7A278CF3AD64BD52396CE08FE9432FC940997.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEC7A278CF3AD64BD52396CE08FE9432FC940997.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0/34352e3233332e3234342e302f32332d3332203d3e20323637333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:a2:69:ee:38:57:a6:35:86:0b:52:0c:06:62:e3:88:b3:7d:
         95:ff:97:1b:68:8c:82:ef:3b:6b:e4:57:2e:29:c8:94:3e:05:
         bb:0f:8a:7f:80:7e:a4:c0:9d:df:7c:c0:24:1d:ac:4b:22:de:
         e1:5d:91:d5:37:4c:01:a0:44:2f:6a:e0:39:3f:57:dc:68:08:
         5f:a1:91:e6:1e:4b:2c:54:5d:27:c4:8c:40:11:e7:7f:03:bc:
         33:e0:8d:d1:3f:48:56:6f:bc:e2:cc:20:3b:0b:1f:e8:1b:07:
         76:0d:63:91:98:39:ec:f4:66:5a:7d:5e:9e:31:26:4b:56:17:
         67:fd:a1:af:43:dd:ff:e8:de:fe:0d:a6:e9:cd:f1:8e:c7:42:
         bb:86:ae:91:98:87:d8:0f:3f:b7:be:cd:8b:c1:2e:22:5a:7d:
         c2:4c:89:3d:2e:5b:d7:4a:be:fb:94:71:c6:c8:d1:57:68:7b:
         ae:09:1e:8a:33:93:b7:c6:6b:18:f1:90:50:e4:7f:3b:7b:6e:
         11:1f:b6:9e:99:24:ab:70:0d:89:40:28:c6:08:cf:b0:34:53:
         e9:03:99:34:f9:07:6c:4e:5d:42:3d:4d:ac:73:30:97:52:42:
         8b:9e:17:03:34:f8:6f:70:bf:71:4a:71:6e:ab:c2:90:08:58:
         06:3a:9e:5a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKb+Slghk6wMHPTh6m2H1qEEyu2swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVDN0EyNzhDRjNBRDY0QkQ1MjM5NkNFMDhGRTk0MzJG
Qzk0MDk5NzAeFw0yMzAxMjkyMTIwNThaFw0yNDAxMjgyMTI1NThaMDMxMTAvBgNV
BAMTKDNCMzY2NUM3QTM5MDYwNjAzRTYxQTBDMjU5MjNFQzU2QTA4MTQyNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDShMUnnoylBZyiM4DV7xPWn3YU
eP6ONPCWHJF2lOUZ2vzxnL932ssaZkwJxkSE5C4d+/qSijSvy8bG+pbNMUzdPXPj
48HTG+m00JN2L973fNhNwOD3Mpqs/Y08LvXz4L30DI4UcuosjCrLnqfjCqCG/h5M
1di6xjHwDIMvFdGJ31Z2nKillFU090Ke9B0p7UkT6Tsirkbm0/0mIaTdphXydEbC
4XdW0zt5hv6zF/2XsQBReXcxy374LsfVk2wDFIwsBaLXesmmpALAmrKvC6zXE56C
lECOmh2o4wrwXKwqT1iICITW963ityAbZg5z24t3oU3uOG8VRmqaSXBJk1/9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUOzZlx6OQYGA+YaDCWSPsVqCBQlowHwYDVR0j
BBgwFoAU3seieM861kvVI5bOCP6UMvyUCZcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm9mU3JIY21uY0ZuR1BSc1E3REJ4QXNMekh4ampyU0RBMTFoeVp2cUdR
VlovMC9ERUM3QTI3OENGM0FENjRCRDUyMzk2Q0UwOEZFOTQzMkZDOTQwOTk3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RFQzdBMjc4Q0YzQUQ2NEJE
NTIzOTZDRTA4RkU5NDMyRkM5NDA5OTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJvZlNySGNtbmNGbkdQUnNRN0RCeEFzTHpIeGpqclNEQTExaHladnFHUVZaLzAv
MzQzNTJlMzIzMzMzMmUzMjM0MzQyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzMjM2
MzczMzMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt6fQwDQYJKoZIhvcNAQELBQADggEBAH+iae44
V6Y1hgtSDAZi44izfZX/lxtojILvO2vkVy4pyJQ+BbsPin+AfqTAnd98wCQdrEsi
3uFdkdU3TAGgRC9q4Dk/V9xoCF+hkeYeSyxUXSfEjEAR538DvDPgjdE/SFZvvOLM
IDsLH+gbB3YNY5GYOez0Zlp9Xp4xJktWF2f9oa9D3f/o3v4NpunN8Y7HQruGrpGY
h9gPP7e+zYvBLiJafcJMiT0uW9dKvvuUccbI0Vdoe64JHoozk7fGaxjxkFDkfzt7
bhEftp6ZJKtwDYlAKMYIz7A0U+kDmTT5B2xOXUI9TaxzMJdSQoueFwM0+G9wv3FK
cW6rwpAIWAY6nlo=
-----END CERTIFICATE-----