Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GCwP9pdoi5dvim88NoieosrwmJ3CxjmM91QcfQwER2Jv/0/34352e37302e362e302f32332d3332203d3e20323733353833.roa
File:                     34352e37302e362e302f32332d3332203d3e20323733353833.roa (raw, json)
Hash identifier:          unPkpn+cOjNq2pQ6o4VDyXfGjGAAu6F6zGQE+9WEjeM=
Subject key identifier:   4F:2A:0B:88:3C:0F:3E:AC:7B:78:3C:38:65:75:EC:62:E3:F8:DE:76
Certificate issuer:       /CN=918E3D533FF7AF184E0CF5C520F9E95AFC9AAD85
Certificate serial:       61DB60EA315E8824CFBAB650C01A36EBEB2836C7
Authority key identifier: 91:8E:3D:53:3F:F7:AF:18:4E:0C:F5:C5:20:F9:E9:5A:FC:9A:AD:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/918E3D533FF7AF184E0CF5C520F9E95AFC9AAD85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GCwP9pdoi5dvim88NoieosrwmJ3CxjmM91QcfQwER2Jv/0/34352e37302e362e302f32332d3332203d3e20323733353833.roa
Signing time:             Thu 16 Nov 2023 11:57:27 +0000
ROA not before:           Thu 16 Nov 2023 11:52:27 +0000
ROA not after:            Thu 14 Nov 2024 11:57:27 +0000
asID:                     273583
IP address blocks:        45.70.6.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:db:60:ea:31:5e:88:24:cf:ba:b6:50:c0:1a:36:eb:eb:28:36:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=918E3D533FF7AF184E0CF5C520F9E95AFC9AAD85
        Validity
            Not Before: Nov 16 11:52:27 2023 GMT
            Not After : Nov 14 11:57:27 2024 GMT
        Subject: CN=4F2A0B883C0F3EAC7B783C386575EC62E3F8DE76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:23:a9:38:74:e0:4d:63:39:74:4c:7d:f4:ee:
                    b0:97:49:66:ab:87:74:61:e8:63:69:1b:ad:df:05:
                    b7:81:8e:74:24:c4:ac:f2:3e:66:ee:46:6d:36:a8:
                    77:b0:e2:22:33:7e:28:16:e2:e7:1c:76:59:29:df:
                    b4:8f:ae:ae:50:b9:93:43:f7:09:3d:5c:c6:52:b9:
                    fe:3c:a9:38:e1:f1:fa:80:82:d8:9a:65:7d:e0:b0:
                    81:e2:df:8d:1c:c8:65:09:37:c9:02:b3:eb:d8:3a:
                    f5:a6:3f:f1:fe:1d:2e:43:19:ed:a3:26:8f:42:66:
                    d7:bb:b3:4c:31:38:11:4a:0d:a2:2b:dc:b7:db:d2:
                    c3:85:cc:67:a2:82:fb:94:8a:60:82:af:48:57:1c:
                    20:c7:ae:6a:d1:2d:26:d2:6c:89:08:b3:fe:8b:16:
                    9e:14:03:6c:f8:0d:ac:08:e3:28:31:14:0e:a9:76:
                    3c:3c:f9:12:a8:7d:a3:6a:1a:51:46:16:c5:07:26:
                    8a:a8:5d:39:37:5b:e9:e0:98:49:ee:79:60:73:93:
                    70:9d:e6:36:87:8f:20:e3:3f:f0:eb:69:d6:ef:1c:
                    61:53:2e:92:0f:7c:a6:3c:d7:3e:b5:15:e1:75:70:
                    f1:e7:62:96:ff:05:f7:4a:ba:2c:86:04:b8:0b:57:
                    17:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:2A:0B:88:3C:0F:3E:AC:7B:78:3C:38:65:75:EC:62:E3:F8:DE:76
            X509v3 Authority Key Identifier:
                keyid:91:8E:3D:53:3F:F7:AF:18:4E:0C:F5:C5:20:F9:E9:5A:FC:9A:AD:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GCwP9pdoi5dvim88NoieosrwmJ3CxjmM91QcfQwER2Jv/0/918E3D533FF7AF184E0CF5C520F9E95AFC9AAD85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/918E3D533FF7AF184E0CF5C520F9E95AFC9AAD85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GCwP9pdoi5dvim88NoieosrwmJ3CxjmM91QcfQwER2Jv/0/34352e37302e362e302f32332d3332203d3e20323733353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:37:4c:34:71:d4:9b:f3:4f:19:12:f7:21:fc:18:11:17:10:
         35:6b:77:b5:e0:18:93:47:3f:0e:c9:0a:0e:c1:68:64:39:07:
         67:d6:0f:de:82:76:4b:f3:89:e2:db:4f:79:fb:d2:b9:b1:9b:
         a0:05:f1:81:a4:3a:6c:2e:b5:57:6c:4a:76:a3:2e:22:9d:5d:
         3e:b0:b3:64:ca:c9:ed:5a:c2:78:08:55:83:10:c7:73:4c:d1:
         51:ad:9d:29:f2:7e:ad:50:27:99:59:23:b7:80:8f:67:c8:44:
         36:e7:5f:44:00:7b:bb:5c:64:6c:98:b9:2a:61:80:70:77:73:
         dd:99:04:8f:30:a3:8f:0d:ea:2c:be:47:1a:a9:52:f9:75:6c:
         10:29:a9:f0:fb:b8:a1:81:39:85:3c:e4:ae:86:a7:89:ff:bf:
         df:84:20:98:80:52:c0:ec:f6:09:e2:dc:41:ed:e3:60:8b:73:
         f0:3d:08:e6:ed:e8:ad:3f:5a:c6:87:d6:5c:c3:f6:14:51:d1:
         ed:a4:d5:c0:b8:8e:5c:3d:11:37:ef:fb:88:7b:b5:bd:43:9b:
         d4:ef:21:63:90:50:8a:a0:7a:fe:59:40:ca:55:5f:6e:f7:ef:
         79:0f:de:21:32:4f:f2:b7:cd:3c:91:6f:85:07:3a:e7:c1:03:
         6c:ee:e5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----