Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3137392e3130382e34362e302f32332d3233203d3e20323634383836.roa
File:                     3137392e3130382e34362e302f32332d3233203d3e20323634383836.roa (raw, json)
Hash identifier:          /g4p177m60oB7pifjnIp+A+SkOFMAdQsMJLyD37IYi8=
Subject key identifier:   B5:03:ED:46:6C:64:FB:97:62:3D:27:56:65:0F:37:F2:D9:0B:F7:D7
Certificate issuer:       /CN=BE343E3D32BA67E514AD2010392367A6DF1F003E
Certificate serial:       3556C09D30DA73DFB12590FEE5465DB27C7698F7
Authority key identifier: BE:34:3E:3D:32:BA:67:E5:14:AD:20:10:39:23:67:A6:DF:1F:00:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE343E3D32BA67E514AD2010392367A6DF1F003E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3137392e3130382e34362e302f32332d3233203d3e20323634383836.roa
Signing time:             Thu 17 Nov 2022 18:25:18 +0000
ROA not before:           Thu 17 Nov 2022 18:20:18 +0000
ROA not after:            Thu 16 Nov 2023 18:25:18 +0000
asID:                     264886
IP address blocks:        179.108.46.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:56:c0:9d:30:da:73:df:b1:25:90:fe:e5:46:5d:b2:7c:76:98:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE343E3D32BA67E514AD2010392367A6DF1F003E
        Validity
            Not Before: Nov 17 18:20:18 2022 GMT
            Not After : Nov 16 18:25:18 2023 GMT
        Subject: CN=B503ED466C64FB97623D2756650F37F2D90BF7D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:60:59:53:1c:af:72:96:ae:00:68:de:e6:25:
                    e1:bf:91:ea:f4:50:b9:e1:43:ec:25:8f:e7:e1:3e:
                    bf:c6:30:51:49:67:3b:a3:96:81:c4:fc:ce:42:57:
                    a5:c7:f3:5e:eb:51:d4:b6:e4:9b:0f:b1:b3:28:4e:
                    38:61:c9:cc:e1:8b:38:41:bb:0f:fd:aa:a3:69:47:
                    28:0c:0b:0f:26:98:d2:48:0c:7d:37:72:78:2c:b8:
                    e0:11:42:bb:1f:45:4a:a7:90:00:ed:93:5c:54:ae:
                    ec:c3:3b:9d:5c:b1:39:c2:85:f1:ce:d0:ac:e1:0d:
                    7c:43:ce:2a:67:b9:bd:06:44:3c:7f:ec:3f:ea:80:
                    3e:c7:0c:e5:9a:da:4d:76:9d:d9:09:61:0e:0c:ad:
                    08:9e:26:cf:14:5f:c5:46:45:07:53:0c:09:14:ae:
                    de:ba:e6:d8:fa:be:e0:89:1d:6b:58:89:08:c0:7f:
                    70:24:25:ca:4b:3f:0f:e8:71:8d:d6:98:37:b3:81:
                    87:24:3a:39:88:3f:69:65:5c:36:d4:83:bb:ba:03:
                    7f:cf:29:ee:92:37:76:53:18:0c:c3:4c:3b:8e:80:
                    e3:c5:78:93:da:3c:e3:cd:54:45:4e:a4:44:dc:0d:
                    a7:8d:7d:2d:72:ae:d7:10:08:d7:89:ca:b6:82:9e:
                    45:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:03:ED:46:6C:64:FB:97:62:3D:27:56:65:0F:37:F2:D9:0B:F7:D7
            X509v3 Authority Key Identifier:
                keyid:BE:34:3E:3D:32:BA:67:E5:14:AD:20:10:39:23:67:A6:DF:1F:00:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/BE343E3D32BA67E514AD2010392367A6DF1F003E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE343E3D32BA67E514AD2010392367A6DF1F003E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3137392e3130382e34362e302f32332d3233203d3e20323634383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:0f:f8:78:96:94:8b:45:4e:c0:87:88:b9:c0:19:11:5e:86:
         1c:9e:6b:70:f5:af:be:aa:58:f0:04:a8:01:d0:11:0d:37:7a:
         e2:86:84:64:e8:df:6d:fa:80:74:08:33:c3:f8:44:a1:82:18:
         98:3a:3c:b5:60:f2:5d:1b:b7:a1:d0:c9:e3:ac:08:c2:e4:d0:
         b2:1c:78:ca:b1:80:d3:ea:da:ab:3b:e7:c5:e8:0a:80:7d:f8:
         37:ff:40:42:a1:8a:38:39:5f:4e:48:a2:23:fb:ef:32:70:4d:
         e5:27:16:88:e0:4a:10:16:d5:f3:0a:f9:eb:97:f6:6b:c1:7b:
         fd:aa:bb:c7:f7:cd:90:0b:ed:98:91:83:fc:56:82:d0:75:71:
         5d:e1:ed:db:a6:c4:38:f5:5d:64:85:6d:61:5d:16:19:b1:5e:
         fb:85:80:ec:83:30:c7:8d:88:ec:18:22:b6:22:76:52:b8:fc:
         3b:b5:2f:fa:8e:30:90:88:0b:a4:73:6f:1d:bd:97:ad:d9:4c:
         53:dc:a2:63:aa:5f:d2:4d:2e:41:7c:fe:8e:b9:c5:12:23:79:
         18:cd:7c:55:65:a5:90:6f:5f:fb:cd:cb:f9:91:5f:a5:23:ad:
         55:54:b4:24:30:f3:8c:5b:a7:ff:f3:c0:af:14:fb:aa:24:7d:
         bb:d1:c3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----