Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/0/34352e3136302e3138322e302f32332d3233203d3e20323638343133.roa
File:                     34352e3136302e3138322e302f32332d3233203d3e20323638343133.roa (raw, json)
Hash identifier:          VdVb9EksNkO2/+8AA/wDClPz+C1VH4ydnFc4vQGLWB0=
Subject key identifier:   88:5B:68:4D:17:F4:C5:5A:B9:A9:9C:5B:AB:BB:89:6F:E5:25:D8:37
Certificate issuer:       /CN=1EC5B0C153629EE217F98299EE68DC1F955EA3AE
Certificate serial:       1B2AB359A2BB5789D03C751ECED5A8CE841B96B0
Authority key identifier: 1E:C5:B0:C1:53:62:9E:E2:17:F9:82:99:EE:68:DC:1F:95:5E:A3:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1EC5B0C153629EE217F98299EE68DC1F955EA3AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/0/34352e3136302e3138322e302f32332d3233203d3e20323638343133.roa
Signing time:             Wed 23 Nov 2022 19:41:07 +0000
ROA not before:           Wed 23 Nov 2022 19:36:07 +0000
ROA not after:            Wed 22 Nov 2023 19:41:07 +0000
asID:                     268413
IP address blocks:        45.160.182.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:2a:b3:59:a2:bb:57:89:d0:3c:75:1e:ce:d5:a8:ce:84:1b:96:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EC5B0C153629EE217F98299EE68DC1F955EA3AE
        Validity
            Not Before: Nov 23 19:36:07 2022 GMT
            Not After : Nov 22 19:41:07 2023 GMT
        Subject: CN=885B684D17F4C55AB9A99C5BABBB896FE525D837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b3:52:f4:c6:0e:c8:b9:05:47:93:84:e3:63:
                    6d:9d:be:8d:86:06:e3:2a:6c:47:7d:68:ff:20:6b:
                    61:51:a1:79:f9:59:18:ae:be:a2:62:fe:70:a1:ae:
                    0a:3a:b4:17:7b:b0:01:f8:11:cc:fb:23:ff:5b:d1:
                    6e:bd:bc:d6:cd:f0:5c:1f:5e:09:f7:23:04:d1:54:
                    12:71:06:27:84:98:de:59:fc:43:e6:34:1f:4b:c7:
                    8d:18:0f:d3:33:e7:79:0e:ae:f8:5c:a5:c5:3f:97:
                    c3:59:65:ba:c7:05:c9:b7:f6:4c:28:f7:18:68:e5:
                    0b:3d:1d:58:62:a3:5b:f8:31:b6:12:bc:4f:2c:0b:
                    13:a7:ac:36:11:63:46:c6:39:7e:6d:31:e8:55:84:
                    c2:5f:0c:aa:b1:9b:81:ea:84:1c:cc:3a:c0:cc:b4:
                    f8:f8:c1:7d:9d:f3:54:14:d0:fc:64:65:b9:96:74:
                    92:1b:ce:7b:3d:d6:82:d9:d9:91:c0:7e:d5:16:f6:
                    5b:cd:d2:59:78:f6:c4:94:ed:11:52:93:be:0e:1b:
                    f5:48:32:7c:06:29:aa:4e:a2:43:a2:fc:82:a2:27:
                    68:9e:6f:a9:8a:7b:c4:d6:5d:f6:b6:4e:d1:e7:aa:
                    e6:67:dc:1f:c4:32:4f:04:18:90:e8:c1:df:b2:fe:
                    2a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:5B:68:4D:17:F4:C5:5A:B9:A9:9C:5B:AB:BB:89:6F:E5:25:D8:37
            X509v3 Authority Key Identifier:
                keyid:1E:C5:B0:C1:53:62:9E:E2:17:F9:82:99:EE:68:DC:1F:95:5E:A3:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/0/1EC5B0C153629EE217F98299EE68DC1F955EA3AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1EC5B0C153629EE217F98299EE68DC1F955EA3AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/0/34352e3136302e3138322e302f32332d3233203d3e20323638343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:33:8f:84:da:b1:1e:89:ba:fa:83:13:c9:28:c8:e6:84:f2:
         4b:22:22:90:ee:13:4b:c7:6e:97:26:6a:cb:b9:88:88:6a:7b:
         78:e4:51:3b:74:f7:98:63:62:2e:75:4e:8d:dd:56:c2:c3:81:
         28:14:da:68:4f:3f:28:cc:6b:70:a9:ef:90:7b:7e:e5:ac:1e:
         08:2f:bd:7a:11:3c:bf:67:7e:97:54:05:ff:91:40:ff:26:ef:
         54:99:49:67:24:89:44:44:c2:c6:1a:8f:aa:53:0a:a5:cf:01:
         b2:0d:cd:1d:da:87:6d:e6:74:c6:17:b4:68:4c:b6:38:0c:0e:
         3e:c0:fc:d0:56:43:63:60:6a:57:aa:81:e0:44:04:a8:11:58:
         95:e3:9e:24:c6:a8:c2:2a:1a:e4:5a:d8:03:70:0b:1c:59:f6:
         9f:41:9a:7c:c1:6f:94:df:75:1f:31:cb:af:92:cc:c9:d4:bb:
         a3:07:b3:6a:8b:dc:77:7a:03:72:14:49:ad:5d:c9:96:3d:e8:
         07:c9:3a:62:98:26:6d:0d:9b:18:8c:81:d2:71:7f:d8:36:94:
         43:cb:e6:8b:d0:fd:7c:90:50:b6:c3:5e:bb:e5:80:35:f8:37:
         5d:72:46:4b:c4:68:8c:4c:d0:14:1c:5a:50:9c:b1:77:a5:a1:
         6a:c2:83:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----