Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/34352e3233322e3135362e302f32322d3332203d3e20323637323730.roa
File:                     34352e3233322e3135362e302f32322d3332203d3e20323637323730.roa (raw, json)
Hash identifier:          8g4azgb9m6s8wWyDWrtw3RwUjw68+ghGQnBntTrhFKU=
Subject key identifier:   99:3A:04:E5:94:44:9B:ED:5A:56:E3:6F:25:28:A2:A4:10:C7:DD:75
Certificate issuer:       /CN=81B32A0DFD35A761A0E4773BF209978F18CBA8F9
Certificate serial:       6522507AF28165E5DB6F63B4083D00AC3CF8F185
Authority key identifier: 81:B3:2A:0D:FD:35:A7:61:A0:E4:77:3B:F2:09:97:8F:18:CB:A8:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81B32A0DFD35A761A0E4773BF209978F18CBA8F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/34352e3233322e3135362e302f32322d3332203d3e20323637323730.roa
Signing time:             Wed 16 Aug 2023 18:46:11 +0000
ROA not before:           Wed 16 Aug 2023 18:41:11 +0000
ROA not after:            Wed 14 Aug 2024 18:46:11 +0000
asID:                     267270
IP address blocks:        45.232.156.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:22:50:7a:f2:81:65:e5:db:6f:63:b4:08:3d:00:ac:3c:f8:f1:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81B32A0DFD35A761A0E4773BF209978F18CBA8F9
        Validity
            Not Before: Aug 16 18:41:11 2023 GMT
            Not After : Aug 14 18:46:11 2024 GMT
        Subject: CN=993A04E594449BED5A56E36F2528A2A410C7DD75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:ce:35:76:58:64:7c:76:07:f8:ea:4f:05:dd:
                    bb:3b:95:a2:0e:3c:8e:a8:a4:91:df:7c:9e:69:20:
                    67:9c:1d:62:b8:42:d4:b0:ea:f5:0b:30:84:6a:6c:
                    10:4b:26:79:98:f3:60:ad:57:f1:90:5f:60:12:bb:
                    e0:76:dd:b4:3c:2a:64:40:a6:51:88:b7:fc:8e:2e:
                    22:7f:d2:63:07:4e:b6:31:16:6b:6a:ba:fb:03:29:
                    8f:cd:53:35:f0:56:f1:a0:6a:95:2d:f2:b8:43:25:
                    57:53:f6:96:98:4f:e5:20:6d:e7:1c:d5:f2:fd:4e:
                    27:34:18:e0:f7:12:0e:15:fc:09:11:f5:32:b1:9a:
                    79:8b:07:24:fc:b9:97:84:3b:f3:c1:28:59:80:cf:
                    af:d8:ba:f3:8c:b8:05:3b:cb:e4:25:c8:26:7a:df:
                    25:f7:ab:2a:6a:8b:40:b1:47:21:6b:88:a6:75:5e:
                    54:a9:f5:2d:9e:0f:44:30:33:40:42:30:11:c2:3e:
                    44:07:dc:e4:5e:48:f3:3e:ce:a4:23:19:18:7d:f4:
                    f6:84:0c:18:50:76:e9:83:88:65:7d:9f:1a:6f:da:
                    df:8c:48:cf:a0:6f:43:41:0b:57:96:b4:5e:f7:94:
                    c7:e2:19:15:c7:e1:d4:0b:80:7a:03:27:1f:72:f6:
                    27:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:3A:04:E5:94:44:9B:ED:5A:56:E3:6F:25:28:A2:A4:10:C7:DD:75
            X509v3 Authority Key Identifier:
                keyid:81:B3:2A:0D:FD:35:A7:61:A0:E4:77:3B:F2:09:97:8F:18:CB:A8:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/81B32A0DFD35A761A0E4773BF209978F18CBA8F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81B32A0DFD35A761A0E4773BF209978F18CBA8F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/34352e3233322e3135362e302f32322d3332203d3e20323637323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:e5:76:9b:d9:30:7c:8e:66:89:ac:fd:e5:19:5e:40:b0:b1:
         01:5b:db:3c:d3:ca:3e:f4:86:d2:cb:8d:82:a2:6e:96:9d:fd:
         5e:ec:aa:78:89:93:4e:7e:d2:36:c4:fd:1f:51:dc:4c:d3:14:
         47:38:b3:dc:51:9e:2d:ef:cd:15:8d:61:3b:2b:2a:c8:90:8a:
         ec:90:87:a1:87:fc:fa:29:62:e4:c1:19:08:ea:c1:33:d1:49:
         fc:9d:30:87:f4:b2:64:11:69:40:56:11:7f:2d:60:b2:a3:c9:
         63:c2:ca:83:33:56:42:d8:15:5f:62:81:d4:a1:03:25:89:37:
         49:49:75:2e:b4:23:be:39:aa:5b:e6:30:a4:d5:fc:1a:34:96:
         7f:ce:b7:da:97:b5:ab:87:a9:f4:8f:9b:ce:d0:0b:92:9c:0f:
         f0:6d:a8:b1:f5:9a:94:6f:4f:48:ca:64:cd:03:70:64:fa:97:
         e0:7e:98:ba:d3:b8:d9:9c:b2:aa:32:51:bd:19:ae:ba:2a:81:
         92:5a:75:a9:9b:4d:53:88:90:6f:13:9c:4c:9e:81:6d:48:e5:
         8b:be:f3:78:ea:00:cd:b0:b6:b4:c9:b0:d2:73:2b:07:5c:0d:
         36:77:f3:d0:da:2f:cb:9f:6d:ca:70:04:bd:3c:e7:09:ca:30:
         f2:d6:81:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----