Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/34352e3233372e39322e302f32322d3332203d3e20323638323637.roa
File:                     34352e3233372e39322e302f32322d3332203d3e20323638323637.roa (raw, json)
Hash identifier:          4cvzM+huDnUEGeXEsuh4Yi2c8Tdfj/mvExfjsieBO2s=
Subject key identifier:   3B:79:36:56:63:9C:DC:0F:96:E1:7F:51:E4:3D:B6:E9:1E:A8:7A:F0
Certificate issuer:       /CN=D8ECFE7B56C795535B855B9D4F0CD7E02E452649
Certificate serial:       1E98227F61FF82C3B402C22D3FF4628E800881E0
Authority key identifier: D8:EC:FE:7B:56:C7:95:53:5B:85:5B:9D:4F:0C:D7:E0:2E:45:26:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8ECFE7B56C795535B855B9D4F0CD7E02E452649.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/34352e3233372e39322e302f32322d3332203d3e20323638323637.roa
Signing time:             Sat 09 Dec 2023 17:00:00 +0000
ROA not before:           Sat 09 Dec 2023 16:55:00 +0000
ROA not after:            Sat 07 Dec 2024 17:00:00 +0000
asID:                     268267
IP address blocks:        45.237.92.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:98:22:7f:61:ff:82:c3:b4:02:c2:2d:3f:f4:62:8e:80:08:81:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8ECFE7B56C795535B855B9D4F0CD7E02E452649
        Validity
            Not Before: Dec  9 16:55:00 2023 GMT
            Not After : Dec  7 17:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a4:31:95:d0:9c:ff:05:e6:42:8f:d4:bc:b5:
                    6d:99:44:b3:73:f9:f3:9e:d6:32:72:82:80:85:73:
                    ac:ed:95:5a:86:c7:bc:7a:7f:ae:e9:0c:c2:82:5d:
                    70:1e:2c:4f:4b:99:21:dd:b0:79:a6:24:c9:2b:6a:
                    0a:2c:90:35:c1:9c:e4:59:08:f5:94:15:08:3b:aa:
                    04:58:45:92:7f:c8:e3:ac:6c:12:22:07:70:ae:b4:
                    f9:34:3e:f6:f8:e0:2a:88:7f:1c:12:b7:c4:d3:d8:
                    39:aa:1c:9f:68:25:1d:17:91:1f:80:32:9b:30:3f:
                    ca:c4:fd:ac:67:58:d5:40:1c:09:56:38:ee:85:51:
                    22:a2:46:b7:fa:98:c1:22:8a:7b:dc:ab:5a:38:c0:
                    96:08:fc:43:83:12:eb:d0:62:bb:3b:15:e6:6c:8d:
                    e1:40:cc:69:14:4d:90:bc:c4:2f:79:6b:7d:99:17:
                    6d:9f:22:c8:6e:26:e9:e1:e7:88:8f:88:58:4f:e0:
                    a7:cf:74:5e:da:d8:f9:b2:d2:40:0b:5e:3a:48:53:
                    26:5a:a6:44:b0:15:5d:13:87:49:d4:8d:ec:04:9a:
                    8c:a1:6c:43:28:92:45:6f:20:2f:e3:5e:ec:97:7c:
                    c9:bd:cc:f7:a7:25:7a:94:18:ef:3c:a3:0e:f8:69:
                    43:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:79:36:56:63:9C:DC:0F:96:E1:7F:51:E4:3D:B6:E9:1E:A8:7A:F0
            X509v3 Authority Key Identifier:
                keyid:D8:EC:FE:7B:56:C7:95:53:5B:85:5B:9D:4F:0C:D7:E0:2E:45:26:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/D8ECFE7B56C795535B855B9D4F0CD7E02E452649.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8ECFE7B56C795535B855B9D4F0CD7E02E452649.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/34352e3233372e39322e302f32322d3332203d3e20323638323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:f5:1b:e5:b0:9b:46:6d:da:a7:f3:16:4b:70:8f:fc:b8:08:
         f4:03:78:3c:4c:3b:34:b7:14:d0:ab:f0:8f:85:a7:35:e8:1e:
         4e:67:26:18:79:b8:bc:bb:f2:00:ce:97:f9:65:ca:c3:0c:5f:
         8a:a1:3d:0a:ff:3f:e2:76:5b:86:f8:03:8a:9f:30:d9:9a:89:
         54:a5:70:44:d7:d1:6a:60:9a:d4:89:97:33:3d:f3:6e:bd:c7:
         4a:96:f5:ac:ee:1d:8e:fa:44:7b:8f:4b:48:95:58:d5:fe:b3:
         d9:1b:b2:19:59:04:49:14:74:dd:53:b0:65:d5:a3:d4:54:9d:
         f0:5b:fc:eb:4c:6d:23:69:bd:26:1d:11:33:a4:a0:68:88:f3:
         e4:9e:a7:65:ae:89:02:a1:83:f4:97:94:5a:5e:96:dc:5a:37:
         5e:ab:4f:2c:3c:3e:35:50:02:f5:74:fe:76:ea:78:e4:e2:32:
         11:76:49:f4:a7:7a:a6:a0:a4:7a:e6:12:0a:e3:2e:a3:c3:b8:
         31:e9:66:5f:fb:33:69:59:46:6f:a2:0c:cf:23:72:cd:13:c7:
         0d:b9:c2:de:50:b4:5d:c4:a1:f9:88:2e:5a:b0:44:43:43:22:
         ec:18:8e:2b:84:30:bf:ec:f8:40:b6:85:fd:42:f1:f6:ff:12:
         8a:4d:d4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----