Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e3234372f33322d3332203d3e20323637323536.roa
File:                     34352e3233322e35302e3234372f33322d3332203d3e20323637323536.roa (raw, json)
Hash identifier:          NNjx5X3c+1+ryJIazD9gphl1G/KmyaoMz//29ny2RAA=
Subject key identifier:   4E:D3:BB:CE:1C:B6:76:3F:EF:D1:88:D1:F9:37:D4:FD:91:16:C0:2A
Certificate issuer:       /CN=0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B
Certificate serial:       38FA9463FDD36DE508CDAC37F16CA8C131DE41D5
Authority key identifier: 0D:C3:30:1F:CB:DE:2B:A3:C4:D2:9A:F5:8D:A6:14:50:72:D1:00:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e3234372f33322d3332203d3e20323637323536.roa
Signing time:             Sun 11 Sep 2022 23:18:00 +0000
ROA not before:           Sun 11 Sep 2022 23:13:00 +0000
ROA not after:            Sun 10 Sep 2023 23:18:00 +0000
asID:                     267256
IP address blocks:        45.232.50.247/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:fa:94:63:fd:d3:6d:e5:08:cd:ac:37:f1:6c:a8:c1:31:de:41:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B
        Validity
            Not Before: Sep 11 23:13:00 2022 GMT
            Not After : Sep 10 23:18:00 2023 GMT
        Subject: CN=4ED3BBCE1CB6763FEFD188D1F937D4FD9116C02A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:3a:fe:21:35:b7:4a:07:86:a0:b7:66:77:8f:
                    64:c5:8c:e5:d4:b3:6c:27:a6:34:e0:2d:5d:58:59:
                    34:f4:e0:f0:11:99:66:d9:72:bb:0b:80:a7:54:b6:
                    e3:b3:15:0e:69:8c:23:d8:84:5f:18:e0:4c:20:d4:
                    58:49:70:35:d2:ad:65:4f:54:61:c1:f1:22:22:f5:
                    b7:ab:d6:45:13:8b:51:81:fa:3c:65:ce:49:dd:7b:
                    9c:e6:c4:99:68:08:fb:94:ab:f3:3d:cb:41:95:18:
                    06:94:cd:c7:c7:15:2a:fe:de:aa:47:1b:9e:c8:d4:
                    ee:04:90:34:48:9a:56:79:20:24:8f:84:6f:83:81:
                    7f:f1:e1:6d:57:22:1e:61:81:d8:2e:0a:03:fa:f1:
                    2a:2c:4a:74:87:69:33:c6:f2:93:87:a0:68:8c:fd:
                    e0:10:83:f0:c7:b6:c1:30:7c:61:73:25:13:f8:bf:
                    2d:5a:94:e6:6f:8d:8b:44:0b:ad:36:90:eb:dd:07:
                    75:5d:d4:70:01:b7:59:8e:63:86:90:e4:0a:75:a4:
                    c4:df:22:56:35:21:25:b6:93:48:75:ce:15:96:30:
                    c0:f6:bc:55:ff:25:e3:d0:b3:6f:b0:7c:12:8d:cf:
                    aa:67:8a:94:eb:5a:6b:77:80:a1:ba:06:d2:04:2b:
                    a0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D3:BB:CE:1C:B6:76:3F:EF:D1:88:D1:F9:37:D4:FD:91:16:C0:2A
            X509v3 Authority Key Identifier:
                keyid:0D:C3:30:1F:CB:DE:2B:A3:C4:D2:9A:F5:8D:A6:14:50:72:D1:00:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e3234372f33322d3332203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.50.247/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:e2:10:d9:8e:b6:26:34:2c:eb:b4:dc:18:78:f2:64:2d:a1:
         e0:79:e4:f6:fe:dc:eb:2a:bb:51:bb:26:9e:83:10:11:82:d7:
         9c:af:4c:53:5e:05:51:d4:e0:f4:af:70:3b:80:65:34:9c:71:
         d0:44:49:5a:a8:53:4f:97:f9:b0:27:1b:91:4b:60:12:61:87:
         68:79:9a:0c:41:73:91:93:4d:7e:a4:6d:63:ba:a6:01:39:d5:
         f0:08:6c:5a:c3:55:64:0a:c2:42:7f:83:05:84:13:24:d3:29:
         96:cc:2a:10:22:9f:1a:5a:23:7b:54:41:56:ce:41:b9:17:64:
         e5:f2:63:2e:85:92:ff:0e:8d:d6:e6:09:42:e2:7e:5e:a3:92:
         c6:7f:41:e5:14:86:e8:5a:a5:e7:18:f4:4d:43:1c:2c:01:8c:
         c6:b0:fd:1f:08:ae:e2:78:cc:42:88:c0:60:01:f8:4c:9d:e0:
         a0:f2:75:19:38:c5:e4:9f:df:8f:5c:38:87:ec:2f:74:db:ad:
         19:9b:2e:b5:01:dd:52:d5:d9:2b:be:54:22:56:77:6e:56:a3:
         9b:29:d3:fc:44:ae:7c:72:e1:99:f1:5b:90:72:0b:e9:5f:b9:
         d0:35:92:92:c9:51:55:c3:2e:5a:f2:3f:45:f0:4b:d4:3b:ad:
         63:26:5e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----