Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/34352e3137392e34342e302f32322d3332203d3e20323639303737.roa
File:                     34352e3137392e34342e302f32322d3332203d3e20323639303737.roa (raw, json)
Hash identifier:          JqQU/3rRAv65NBz8NU3JwvnYsglvrk6egx4dwXLDf0g=
Subject key identifier:   97:83:56:4D:C9:2E:C4:09:71:56:63:D5:39:FD:25:5C:53:9D:52:21
Certificate issuer:       /CN=64D986FF30B7B19A93980CFBB2C7E7E22D35605D
Certificate serial:       2C95E04E40B93AB06920831517C4E677605C676F
Authority key identifier: 64:D9:86:FF:30:B7:B1:9A:93:98:0C:FB:B2:C7:E7:E2:2D:35:60:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/64D986FF30B7B19A93980CFBB2C7E7E22D35605D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/34352e3137392e34342e302f32322d3332203d3e20323639303737.roa
Signing time:             Fri 03 Feb 2023 14:39:21 +0000
ROA not before:           Fri 03 Feb 2023 14:34:21 +0000
ROA not after:            Fri 02 Feb 2024 14:39:21 +0000
asID:                     269077
IP address blocks:        45.179.44.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:95:e0:4e:40:b9:3a:b0:69:20:83:15:17:c4:e6:77:60:5c:67:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64D986FF30B7B19A93980CFBB2C7E7E22D35605D
        Validity
            Not Before: Feb  3 14:34:21 2023 GMT
            Not After : Feb  2 14:39:21 2024 GMT
        Subject: CN=9783564DC92EC409715663D539FD255C539D5221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:e3:f0:49:dd:cb:a8:f2:c5:44:71:1c:4a:f6:
                    ae:2b:8b:12:4a:d2:a0:8a:9b:80:d8:30:3e:03:ef:
                    9b:e5:ba:dd:33:32:81:95:7c:d0:88:c4:80:41:28:
                    95:a0:1d:9a:38:22:0a:29:af:19:58:f1:fc:f2:1e:
                    2c:0f:e0:3e:a8:ce:1d:3f:04:4a:37:9c:74:ec:2f:
                    4f:d8:28:4f:af:00:a1:51:42:a6:4a:b5:02:78:e5:
                    9d:73:18:66:7f:b8:2d:64:97:27:9e:3b:9a:14:e2:
                    4f:f5:aa:96:b8:e5:43:8a:1e:48:32:93:d7:3f:19:
                    73:91:66:33:98:20:86:2e:3c:88:1c:f5:b5:76:1c:
                    db:d9:c9:53:50:af:08:b4:7a:ec:ea:db:aa:26:f5:
                    09:9f:37:f3:64:c6:7a:96:73:78:b9:12:64:20:ad:
                    bc:bb:d3:4b:b1:a2:c9:b4:1e:46:30:af:1e:ed:8b:
                    d3:70:c8:27:5f:5c:0a:00:fd:41:48:66:a7:0a:28:
                    25:f9:6e:04:48:a1:d0:44:39:58:5d:4b:e3:51:63:
                    b4:44:70:cb:17:51:64:12:38:13:03:7b:d7:74:94:
                    76:6c:77:e6:f3:03:96:62:eb:3b:7e:e7:6a:91:12:
                    c3:32:b3:ba:c9:7f:80:34:df:e6:e4:63:ed:c9:21:
                    5a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:83:56:4D:C9:2E:C4:09:71:56:63:D5:39:FD:25:5C:53:9D:52:21
            X509v3 Authority Key Identifier:
                keyid:64:D9:86:FF:30:B7:B1:9A:93:98:0C:FB:B2:C7:E7:E2:2D:35:60:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/64D986FF30B7B19A93980CFBB2C7E7E22D35605D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/64D986FF30B7B19A93980CFBB2C7E7E22D35605D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/34352e3137392e34342e302f32322d3332203d3e20323639303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:62:9c:44:2d:69:87:b2:40:40:be:f8:1e:2f:ba:d5:99:d1:
         32:17:76:d1:3a:e9:10:c8:ad:1b:33:43:12:91:0b:ab:6c:85:
         6f:f7:2d:3c:45:22:6d:7f:76:ed:dd:cd:1b:d2:68:37:02:92:
         36:79:a3:ac:d1:9c:56:ae:50:76:52:f3:36:62:5f:8f:b2:c3:
         eb:aa:58:4d:89:65:22:4b:02:7a:1a:cd:49:6b:36:78:f9:8c:
         9b:b0:c5:23:c0:29:68:19:47:09:2e:d5:dc:8d:7a:f1:56:97:
         dd:5b:a8:28:75:c7:0d:5d:79:4a:12:ab:2c:8a:10:26:c7:3f:
         8c:e0:db:82:a9:9f:90:8f:ec:e3:83:dd:8f:69:dc:4e:e9:3f:
         f4:55:9c:77:84:0f:f6:1c:bf:da:8b:ca:c2:f1:91:79:45:5c:
         86:f5:dc:ae:8b:5b:3f:2e:e0:04:eb:cf:fe:75:90:17:53:e1:
         9d:ed:f6:cd:13:0f:2a:94:67:a0:76:41:07:7d:73:88:5f:d6:
         dc:21:6b:23:06:de:5e:a8:0f:7a:d4:29:2c:b3:6e:a8:03:24:
         ee:92:b2:1c:70:55:d7:3d:63:a2:71:1f:cb:ec:12:15:0c:26:
         21:89:0b:cf:11:33:12:a8:93:f1:a1:75:e6:2e:a8:8c:e0:14:
         29:22:6c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----