Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5vH1WE5jxJxtx2wdHZ7WqZibqz64rAKeS9BnUVZPTUXk/0/34352e3233322e3232342e302f32322d3332203d3e20323637323738.roa
File:                     34352e3233322e3232342e302f32322d3332203d3e20323637323738.roa (raw, json)
Hash identifier:          aF4LB+njx5MZedayLsmh8uP+BmjovhaTBaGvI2jc1BQ=
Subject key identifier:   AB:AB:94:D2:13:81:B4:E5:1D:1F:52:A1:7D:9B:B6:E7:EF:16:B6:94
Certificate issuer:       /CN=C74D4B5426800DA8B95D0FF9F784C7F8F7E600CD
Certificate serial:       33DA5CFE9774EA01722B17BD929EE44A072489AE
Authority key identifier: C7:4D:4B:54:26:80:0D:A8:B9:5D:0F:F9:F7:84:C7:F8:F7:E6:00:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C74D4B5426800DA8B95D0FF9F784C7F8F7E600CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5vH1WE5jxJxtx2wdHZ7WqZibqz64rAKeS9BnUVZPTUXk/0/34352e3233322e3232342e302f32322d3332203d3e20323637323738.roa
Signing time:             Wed 12 Jul 2023 12:18:22 +0000
ROA not before:           Wed 12 Jul 2023 12:13:22 +0000
ROA not after:            Wed 10 Jul 2024 12:18:22 +0000
asID:                     267278
IP address blocks:        45.232.224.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:da:5c:fe:97:74:ea:01:72:2b:17:bd:92:9e:e4:4a:07:24:89:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C74D4B5426800DA8B95D0FF9F784C7F8F7E600CD
        Validity
            Not Before: Jul 12 12:13:22 2023 GMT
            Not After : Jul 10 12:18:22 2024 GMT
        Subject: CN=ABAB94D21381B4E51D1F52A17D9BB6E7EF16B694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:33:b8:cc:1c:40:d3:9c:a6:bf:25:6f:9e:33:
                    30:54:eb:a4:46:6c:66:8c:0e:ca:34:48:88:5b:58:
                    1a:fd:c5:7d:b7:f9:bb:63:f5:c3:27:99:26:4c:b2:
                    f1:c9:a1:b2:53:d5:da:60:62:e9:73:ff:8a:50:3f:
                    be:94:64:0e:84:67:07:3e:b8:92:f5:7f:6c:ec:b2:
                    87:e1:41:a7:70:c4:2e:92:57:d0:d1:5e:b9:2e:7d:
                    7c:98:24:0c:8f:12:a4:76:c2:c3:89:ff:ee:35:08:
                    0d:38:99:1f:7c:fc:77:a3:bc:43:f4:7c:e7:6f:fe:
                    d2:4e:55:85:0a:b1:44:f5:01:0d:bf:b1:2c:dd:47:
                    29:92:46:f4:f3:16:49:57:7b:08:e2:0f:37:47:f9:
                    9a:e5:1c:9f:8e:e6:d3:eb:32:22:b1:24:88:6f:1c:
                    9d:b9:2b:ad:06:ad:83:b3:7d:db:60:ff:ae:1b:6b:
                    1f:c6:cb:95:8d:34:5a:c2:69:22:9b:09:bd:db:75:
                    1c:dc:a8:3f:13:43:4c:85:1d:7a:79:f8:ea:5e:bd:
                    b3:62:6a:13:80:c4:5b:5b:e0:11:13:dd:42:4d:b9:
                    c3:7b:8e:c3:7f:e2:d7:f5:ee:2d:75:62:89:d1:19:
                    b5:d6:aa:f9:48:83:12:63:32:ff:1a:21:da:19:11:
                    25:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:AB:94:D2:13:81:B4:E5:1D:1F:52:A1:7D:9B:B6:E7:EF:16:B6:94
            X509v3 Authority Key Identifier:
                keyid:C7:4D:4B:54:26:80:0D:A8:B9:5D:0F:F9:F7:84:C7:F8:F7:E6:00:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5vH1WE5jxJxtx2wdHZ7WqZibqz64rAKeS9BnUVZPTUXk/0/C74D4B5426800DA8B95D0FF9F784C7F8F7E600CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C74D4B5426800DA8B95D0FF9F784C7F8F7E600CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5vH1WE5jxJxtx2wdHZ7WqZibqz64rAKeS9BnUVZPTUXk/0/34352e3233322e3232342e302f32322d3332203d3e20323637323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:22:65:7b:cd:2a:fa:b3:e3:a7:b5:1e:1b:c3:d5:67:c2:ee:
         88:14:8c:41:c0:1a:9a:7a:79:e5:50:69:18:9c:eb:37:f0:06:
         b7:9e:b9:23:6c:da:c1:de:89:9d:ef:8e:b6:19:8b:27:a2:6d:
         ca:1e:06:95:7a:64:7a:75:34:a3:f4:3e:d4:6a:76:bb:a7:79:
         ce:b3:c6:39:11:56:60:27:f0:bb:80:8c:de:81:a9:be:9f:d9:
         5f:93:49:d0:b8:3c:6d:13:c1:24:f4:9d:be:1b:4d:d7:ec:a3:
         f4:5c:4c:26:e6:a4:48:f9:da:e6:d2:20:c3:81:a2:63:cb:50:
         82:6b:ad:ad:06:ed:8f:d9:76:6c:73:8e:44:80:cb:1e:62:f8:
         15:b1:21:9b:f0:38:d8:8d:c3:f2:46:fd:c9:a0:91:4f:c7:53:
         eb:5a:34:98:39:a7:74:b7:bc:bd:02:12:90:02:b0:a4:e7:43:
         e9:5e:ea:78:da:49:6f:51:09:ca:16:f1:39:23:d1:a4:c5:80:
         f0:bd:aa:de:b3:4d:1a:0e:1d:c3:82:9d:fb:40:98:d1:6d:cd:
         55:bb:e8:7b:ac:49:36:76:ce:8f:e4:18:87:40:d1:6f:8b:89:
         e9:77:8d:4c:2c:97:b3:c2:4a:98:a2:0a:9d:ec:33:4b:a9:15:
         5b:83:79:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----