Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/34352e3136392e3130382e302f32332d3233203d3e20323638313036.roa
File:                     34352e3136392e3130382e302f32332d3233203d3e20323638313036.roa (raw, json)
Hash identifier:          C/cbKIwdyXVbgQPoSOR26WE7wRpceQjdumE0vn/JVNs=
Subject key identifier:   95:5F:62:34:9B:CE:73:55:85:04:79:C8:E3:DA:EA:8A:92:CD:36:A9
Certificate issuer:       /CN=B2614F2D35FDF04FB428DEB46E60713A8DCF6B49
Certificate serial:       288D402955A4FD23026297E1716B3F24C4343CB7
Authority key identifier: B2:61:4F:2D:35:FD:F0:4F:B4:28:DE:B4:6E:60:71:3A:8D:CF:6B:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2614F2D35FDF04FB428DEB46E60713A8DCF6B49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/34352e3136392e3130382e302f32332d3233203d3e20323638313036.roa
Signing time:             Mon 25 Apr 2022 14:59:04 +0000
ROA not before:           Mon 25 Apr 2022 14:54:04 +0000
ROA not after:            Mon 24 Apr 2023 14:59:04 +0000
asID:                     268106
IP address blocks:        45.169.108.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:8d:40:29:55:a4:fd:23:02:62:97:e1:71:6b:3f:24:c4:34:3c:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2614F2D35FDF04FB428DEB46E60713A8DCF6B49
        Validity
            Not Before: Apr 25 14:54:04 2022 GMT
            Not After : Apr 24 14:59:04 2023 GMT
        Subject: CN=955F62349BCE7355850479C8E3DAEA8A92CD36A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f3:75:de:a0:c5:7c:80:8a:6d:eb:df:14:a2:
                    56:3f:47:33:57:df:b1:a7:aa:c8:25:6a:70:56:77:
                    74:99:a8:e3:e1:d9:3e:52:2a:c1:ec:9f:94:7a:1a:
                    aa:f2:8a:d2:17:56:b4:20:30:3d:b9:bd:b7:90:a1:
                    08:9c:ff:67:78:0c:3e:ab:a8:f2:02:fc:e6:92:f8:
                    d3:94:7e:95:b0:4a:e2:41:69:6e:fa:0f:c7:b4:14:
                    d3:bc:75:a8:7f:77:32:13:25:3f:d9:53:5f:cb:40:
                    fd:c0:e5:d2:d0:bd:e2:d3:76:c0:69:b8:49:29:a5:
                    34:97:a3:6d:80:75:76:7d:b5:fa:06:65:72:eb:1e:
                    c9:70:96:84:dc:82:37:0d:ab:09:3b:21:8e:a1:89:
                    dc:a6:6d:04:ba:b6:82:8e:09:9c:f7:ce:46:f5:d2:
                    90:60:dc:59:45:1b:80:d3:3a:a8:b2:2c:d4:ac:be:
                    1f:01:bc:c9:66:18:30:32:21:e5:81:b2:80:dc:76:
                    71:92:ac:06:7d:90:e9:1e:fb:89:c5:10:ce:91:5e:
                    3e:6a:7b:cd:2e:d7:2f:20:20:2a:51:e8:e5:14:25:
                    18:b1:94:bb:58:ca:c6:83:18:68:c8:6e:1d:54:33:
                    cb:83:30:52:e9:9d:6d:6e:b5:12:1c:93:87:88:9a:
                    72:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:5F:62:34:9B:CE:73:55:85:04:79:C8:E3:DA:EA:8A:92:CD:36:A9
            X509v3 Authority Key Identifier:
                keyid:B2:61:4F:2D:35:FD:F0:4F:B4:28:DE:B4:6E:60:71:3A:8D:CF:6B:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/B2614F2D35FDF04FB428DEB46E60713A8DCF6B49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2614F2D35FDF04FB428DEB46E60713A8DCF6B49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/34352e3136392e3130382e302f32332d3233203d3e20323638313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:cf:c2:7f:6d:6f:a0:26:cf:f0:ae:10:bf:50:ba:bd:1c:3e:
         1e:f6:24:c1:14:9d:4a:b9:17:35:42:1e:9c:bb:9b:e5:b0:94:
         4b:60:d1:a6:c1:05:3d:4b:6a:78:13:5d:54:0d:05:ab:e1:2a:
         93:85:e7:92:0b:6f:f6:98:e4:8c:e4:6e:ad:26:1a:60:da:ca:
         f3:6e:3f:b0:e2:d4:db:74:9b:c4:00:92:dc:b5:d9:85:35:3c:
         2f:5d:5b:9b:5e:cd:9b:d4:94:15:a0:79:0e:ee:cc:0d:b9:59:
         9f:6c:0d:cb:59:6c:4a:03:3f:13:59:92:57:88:3b:1f:9a:ab:
         0a:73:83:1f:ab:06:a1:36:02:e5:80:dd:1a:6f:ff:fa:df:73:
         4e:15:4e:34:bb:b8:56:cc:4a:a9:9b:f3:4a:18:48:04:c1:07:
         c5:ce:6f:77:6b:54:f9:2b:4e:d1:c9:e4:d3:11:87:b7:8a:b8:
         63:cb:2a:05:b3:9e:d5:04:d4:91:e4:1e:02:3b:f7:6f:e2:9e:
         c6:64:12:2a:60:52:b8:7b:bc:c2:03:87:ed:de:63:a0:69:f2:
         ea:d6:8c:05:58:d9:1a:30:13:61:40:0e:b5:79:2d:c1:91:ba:
         43:8a:24:df:fc:25:40:be:8d:ef:ba:9e:df:06:6d:3c:a2:0a:
         d8:cc:d6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----