Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/34352e3137392e3130382e302f32332d3233203d3e20323639303735.roa
File:                     34352e3137392e3130382e302f32332d3233203d3e20323639303735.roa (raw, json)
Hash identifier:          Q5dYRBQIMUNanplreXB5otBI6xHqN4R3mXTGrOi0v3Q=
Subject key identifier:   65:06:04:74:05:4D:D6:4E:B1:1C:DE:57:72:E1:DE:58:23:FB:9C:F7
Certificate issuer:       /CN=A04E01C2C7CEF30C9831FD37C94F10585E93B941
Certificate serial:       7C553626425E4AD76D1F9966FE3F3BC00EB97E48
Authority key identifier: A0:4E:01:C2:C7:CE:F3:0C:98:31:FD:37:C9:4F:10:58:5E:93:B9:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A04E01C2C7CEF30C9831FD37C94F10585E93B941.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/34352e3137392e3130382e302f32332d3233203d3e20323639303735.roa
Signing time:             Tue 25 Oct 2022 21:42:08 +0000
ROA not before:           Tue 25 Oct 2022 21:37:08 +0000
ROA not after:            Tue 24 Oct 2023 21:42:08 +0000
asID:                     269075
IP address blocks:        45.179.108.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:55:36:26:42:5e:4a:d7:6d:1f:99:66:fe:3f:3b:c0:0e:b9:7e:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A04E01C2C7CEF30C9831FD37C94F10585E93B941
        Validity
            Not Before: Oct 25 21:37:08 2022 GMT
            Not After : Oct 24 21:42:08 2023 GMT
        Subject: CN=65060474054DD64EB11CDE5772E1DE5823FB9CF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c7:ca:55:7b:06:d3:14:47:b5:85:f2:a5:79:
                    fa:18:be:49:7c:15:c0:42:5d:d8:eb:bc:3b:c7:89:
                    0a:63:74:c8:e2:42:8f:93:00:fd:ca:00:84:21:90:
                    3b:58:82:00:6d:6e:2a:02:e2:25:e2:58:c2:44:9f:
                    81:ca:1f:c8:59:47:6e:b1:2f:f7:40:12:74:9c:37:
                    6a:31:9a:37:08:b4:87:b8:7a:90:74:7c:32:42:49:
                    1c:02:ce:90:1f:22:52:ca:a7:91:c4:bc:84:d7:97:
                    74:88:be:f8:5c:1f:fc:9a:77:be:8a:4c:f6:da:7a:
                    64:84:8e:4f:a2:d6:05:e1:54:6a:d1:63:01:b4:1c:
                    06:7b:e1:99:7e:0f:e4:f8:c9:3e:65:a1:6f:08:84:
                    bf:d9:bd:cf:b0:fc:51:d8:b3:dc:26:46:0a:33:fe:
                    a5:25:59:bd:d6:76:43:d6:35:e8:d8:fa:30:4f:cf:
                    48:82:da:ef:35:2e:b6:fc:23:83:96:1e:99:a6:1c:
                    0e:43:66:5e:37:bc:68:7e:3e:80:7a:b2:50:00:d1:
                    c9:93:e2:04:d6:74:51:8d:e0:81:cc:6c:9a:6c:16:
                    29:56:75:4b:a1:ae:c4:b5:df:d1:8a:45:b3:31:8e:
                    d1:32:ec:39:b9:6a:ea:c0:8d:d5:13:a6:c6:58:4f:
                    b1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:06:04:74:05:4D:D6:4E:B1:1C:DE:57:72:E1:DE:58:23:FB:9C:F7
            X509v3 Authority Key Identifier:
                keyid:A0:4E:01:C2:C7:CE:F3:0C:98:31:FD:37:C9:4F:10:58:5E:93:B9:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/A04E01C2C7CEF30C9831FD37C94F10585E93B941.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A04E01C2C7CEF30C9831FD37C94F10585E93B941.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/34352e3137392e3130382e302f32332d3233203d3e20323639303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:bb:5a:a0:46:1a:25:b9:a0:c8:a3:4f:c8:82:96:70:fc:2b:
         b9:04:7c:d9:9a:ee:5e:90:5e:04:7f:61:ed:9d:b4:57:b4:9f:
         49:2e:ff:3e:5f:ca:fa:ea:f3:39:64:d2:99:18:7e:ee:13:7a:
         db:7f:e2:4f:8b:2c:38:93:05:71:9f:92:e2:a4:23:24:7d:9d:
         ab:a9:ca:5b:e2:2e:64:c1:fd:1a:d5:be:c6:af:05:03:9e:62:
         f3:c4:00:fc:90:9f:3c:f8:6f:ea:e8:15:be:d2:e4:12:82:43:
         dc:90:65:63:cf:76:3f:a7:17:f9:ef:35:6d:16:98:98:d0:6b:
         6c:9b:48:f8:f1:22:7a:b1:f0:7a:91:e8:23:2f:d6:ab:bd:ac:
         a8:71:13:9f:f7:e1:ed:0e:b9:65:18:52:26:6b:65:1d:15:df:
         a2:8c:f2:e1:c0:c9:ea:66:d4:b3:bd:7e:9c:b3:38:51:e0:1e:
         c7:36:b9:32:e9:f5:01:4e:80:15:2c:49:a8:50:65:41:c4:15:
         7d:7b:5a:be:e9:20:16:b6:92:11:22:f5:27:3a:ff:41:ef:95:
         e4:86:6c:7d:de:35:46:60:a9:91:fa:14:ad:18:b7:02:8d:8d:
         68:a8:69:60:0d:38:5e:b8:e9:3e:a4:e1:85:4a:fa:cf:2e:e2:
         9f:01:8a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----