Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137302e3234342e39362e302f32332d3233203d3e20323636343934.roa
File:                     3137302e3234342e39362e302f32332d3233203d3e20323636343934.roa (raw, json)
Hash identifier:          bcUf9H2ifZJvTd/BIdL6fc93PHVWXTN6SIulE6n/jyU=
Subject key identifier:   90:F2:0C:C0:8E:42:B6:D7:5B:28:69:8C:B6:CF:A8:F1:0F:A5:83:CD
Certificate issuer:       /CN=AD86B2A3E3ADB80A9FD084644564B388C98D93E9
Certificate serial:       6112D403CFBE27B1CC0AB512B1F2696B650B17D1
Authority key identifier: AD:86:B2:A3:E3:AD:B8:0A:9F:D0:84:64:45:64:B3:88:C9:8D:93:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD86B2A3E3ADB80A9FD084644564B388C98D93E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137302e3234342e39362e302f32332d3233203d3e20323636343934.roa
Signing time:             Wed 22 Mar 2023 19:32:04 +0000
ROA not before:           Wed 22 Mar 2023 19:27:04 +0000
ROA not after:            Wed 20 Mar 2024 19:32:04 +0000
asID:                     266494
IP address blocks:        170.244.96.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:12:d4:03:cf:be:27:b1:cc:0a:b5:12:b1:f2:69:6b:65:0b:17:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD86B2A3E3ADB80A9FD084644564B388C98D93E9
        Validity
            Not Before: Mar 22 19:27:04 2023 GMT
            Not After : Mar 20 19:32:04 2024 GMT
        Subject: CN=90F20CC08E42B6D75B28698CB6CFA8F10FA583CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:53:b5:34:1f:4a:41:41:55:31:84:df:18:e5:
                    a1:ff:05:a3:39:2f:fd:0f:44:06:75:f7:df:92:47:
                    da:43:6a:52:c5:9d:86:6f:4d:89:0c:b4:b7:ad:d2:
                    85:18:79:8d:80:dd:28:6d:29:6b:af:03:e8:b4:05:
                    f5:d2:11:e7:a0:a8:36:39:5d:cf:dc:39:b0:74:36:
                    09:77:2e:a6:71:69:b4:f2:d9:12:f1:87:69:19:74:
                    94:92:2a:a8:85:3b:d3:63:1c:9b:88:42:96:67:6f:
                    9a:66:fa:c1:0e:d8:b3:4d:12:ec:cc:6c:a1:c3:5b:
                    e2:ad:65:dd:b1:fd:33:8f:9f:9d:97:2d:2d:9f:9a:
                    12:c8:d9:b9:41:7a:65:a1:f2:9c:3d:9e:89:e8:82:
                    6d:72:29:a3:25:39:9d:a2:28:c3:2f:ec:18:8c:88:
                    35:28:54:63:36:bf:f9:86:c4:5e:c0:20:e2:b6:32:
                    da:e3:16:8b:75:78:15:4c:94:f9:5b:60:14:70:17:
                    b6:6b:14:3b:1e:61:ac:44:44:06:ce:08:97:6d:1f:
                    60:0d:5e:04:07:03:13:46:1e:73:3e:cb:4d:46:7d:
                    7c:7a:3f:83:48:45:79:4b:16:b8:98:44:74:0e:c3:
                    a6:b8:86:58:ad:c7:a6:3d:e5:fb:16:91:44:1e:0a:
                    f3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F2:0C:C0:8E:42:B6:D7:5B:28:69:8C:B6:CF:A8:F1:0F:A5:83:CD
            X509v3 Authority Key Identifier:
                keyid:AD:86:B2:A3:E3:AD:B8:0A:9F:D0:84:64:45:64:B3:88:C9:8D:93:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/AD86B2A3E3ADB80A9FD084644564B388C98D93E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD86B2A3E3ADB80A9FD084644564B388C98D93E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137302e3234342e39362e302f32332d3233203d3e20323636343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:51:a1:04:07:40:40:b5:ed:47:88:00:7d:3d:d1:62:ca:0f:
         6a:fa:ba:37:16:10:33:fa:07:cc:e9:47:cd:9f:39:2e:85:7d:
         d3:42:44:9f:b4:2a:10:30:d8:4a:05:be:cb:ca:69:bb:3b:39:
         6f:67:25:1d:5f:16:7c:7c:fb:4b:e1:b5:e7:95:79:1b:0d:99:
         07:64:b2:2f:8c:c2:59:f2:a8:e2:d7:b7:1a:c0:61:ed:db:42:
         1d:6f:5a:d0:ad:f5:b8:9b:0a:e8:29:9f:2a:a5:d9:2f:3b:9d:
         aa:5d:e3:fa:d1:fa:cf:4b:9a:fe:df:44:da:48:e7:57:69:cc:
         f9:ba:74:72:81:ce:9e:dd:f9:01:6b:71:55:1f:76:e1:83:e0:
         b1:9e:44:06:1d:6c:a1:67:e4:23:e0:0d:00:7a:da:6e:13:5a:
         d0:54:01:3a:69:57:86:7d:23:10:fa:c2:81:2b:48:cb:53:de:
         f2:cf:50:4f:d0:d7:5d:16:e4:70:ff:ab:ac:38:3e:87:4a:90:
         cc:4c:53:d5:8f:15:b9:09:76:1b:08:52:6e:de:de:da:95:26:
         c3:c6:c7:f5:62:03:08:a6:c0:66:3b:e9:8a:09:e9:64:78:e8:
         1a:6b:52:7b:c3:8c:d2:7d:06:09:3a:66:18:0d:bf:06:01:aa:
         b6:b0:01:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----