Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/34352e3137302e3134342e302f32332d3233203d3e20323638313630.roa
File:                     34352e3137302e3134342e302f32332d3233203d3e20323638313630.roa (raw, json)
Hash identifier:          bU2VKhNjmNSYfkO/AwNI71lB2LLjnv0aDVANN6ufEaI=
Subject key identifier:   1D:4A:44:2D:44:E5:94:2D:BB:63:8F:A1:DB:AE:FB:D0:BA:4F:CF:DC
Certificate issuer:       /CN=1C11E8770FA62CB23F7D77E2C262D80D54B60BF0
Certificate serial:       234A3C4D71B159D8492BC3F3E135037E01EA93B0
Authority key identifier: 1C:11:E8:77:0F:A6:2C:B2:3F:7D:77:E2:C2:62:D8:0D:54:B6:0B:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C11E8770FA62CB23F7D77E2C262D80D54B60BF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/34352e3137302e3134342e302f32332d3233203d3e20323638313630.roa
Signing time:             Tue 06 Dec 2022 15:22:48 +0000
ROA not before:           Tue 06 Dec 2022 15:17:48 +0000
ROA not after:            Tue 05 Dec 2023 15:22:48 +0000
asID:                     268160
IP address blocks:        45.170.144.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:4a:3c:4d:71:b1:59:d8:49:2b:c3:f3:e1:35:03:7e:01:ea:93:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C11E8770FA62CB23F7D77E2C262D80D54B60BF0
        Validity
            Not Before: Dec  6 15:17:48 2022 GMT
            Not After : Dec  5 15:22:48 2023 GMT
        Subject: CN=1D4A442D44E5942DBB638FA1DBAEFBD0BA4FCFDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f2:49:0f:df:ff:7b:e8:5e:38:2a:ed:10:1f:
                    9d:e9:d4:40:b2:21:c8:b1:51:71:0f:a6:ae:04:3e:
                    82:3a:f2:34:5a:84:2e:d8:8b:57:c3:b0:4d:94:ef:
                    e6:04:8b:5c:19:2b:a6:a5:56:90:d5:37:15:37:24:
                    21:e9:8d:04:79:c8:ec:0a:ca:14:4f:85:bd:31:d0:
                    54:ca:77:34:13:12:a9:8e:d8:d5:90:ae:89:67:46:
                    f2:27:3e:a6:41:42:74:45:9d:14:cd:bd:bf:37:d3:
                    d8:0d:7a:2a:ba:ab:80:49:88:93:7f:7b:bf:50:47:
                    37:e2:42:88:68:27:0e:d1:64:81:1b:10:1a:09:b9:
                    42:19:62:2b:33:d0:5a:b0:33:ad:41:35:27:fd:7a:
                    c0:db:19:cb:72:46:28:90:92:61:87:16:59:09:6b:
                    70:b5:d2:c3:54:11:b4:0d:07:25:47:77:e1:64:39:
                    f7:1a:d8:29:d9:b5:f1:87:85:c3:f3:34:b6:f4:b5:
                    e6:e1:5b:28:6f:34:6d:01:39:9c:5e:14:9b:6e:c4:
                    0f:2d:e2:1d:00:49:c8:27:89:2c:c7:05:19:3a:58:
                    16:52:14:fa:8a:48:5b:fd:bb:fc:4f:46:c1:de:24:
                    da:d6:ab:6f:4a:c4:cf:d7:cc:a9:b7:32:97:b6:1b:
                    f1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:4A:44:2D:44:E5:94:2D:BB:63:8F:A1:DB:AE:FB:D0:BA:4F:CF:DC
            X509v3 Authority Key Identifier:
                keyid:1C:11:E8:77:0F:A6:2C:B2:3F:7D:77:E2:C2:62:D8:0D:54:B6:0B:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/1C11E8770FA62CB23F7D77E2C262D80D54B60BF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C11E8770FA62CB23F7D77E2C262D80D54B60BF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/34352e3137302e3134342e302f32332d3233203d3e20323638313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:78:5e:d7:a2:1d:2c:0a:11:12:b8:b9:3a:fc:18:d0:6d:30:
         3e:fb:ff:3d:2e:2e:02:6f:0d:bd:e4:f6:ec:12:2e:61:e8:0c:
         68:84:ef:f7:55:fd:11:37:96:32:52:a1:f5:71:98:47:42:0b:
         da:8c:dd:bf:a1:91:b3:c8:e5:ee:6d:c9:83:a0:2a:5b:48:7a:
         ca:c9:cf:e8:96:90:74:5a:af:d9:af:9e:98:70:bb:8d:71:fe:
         2c:23:6d:bb:f1:41:85:cd:e1:83:f2:09:f0:3f:4f:d1:92:19:
         0e:f7:9f:b1:f9:a0:b9:12:62:49:f1:2b:a7:99:46:4e:4b:2e:
         22:cb:b2:92:c2:c0:4b:8d:86:b9:93:50:6e:2b:ab:7d:e9:80:
         e8:94:37:76:8b:98:69:8b:f4:1b:c5:9f:47:29:f7:4b:13:35:
         4b:bc:0c:8f:2b:89:a9:03:52:67:94:c3:52:26:bf:64:ac:7c:
         de:77:ed:37:53:26:29:30:31:5b:f9:49:f1:3c:57:71:47:fa:
         ae:a9:2b:56:a7:6a:66:7b:2a:d7:c3:2f:fd:a7:b9:e4:4d:39:
         99:0c:ad:33:ea:7e:1f:96:38:b1:39:39:e1:c8:a8:3f:72:a6:
         96:0b:64:e0:e3:3e:8b:99:23:75:17:b7:ee:a2:23:1e:f0:54:
         18:6e:55:8a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUI0o8TXGxWdhJK8Pz4TUDfgHqk7AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUMxMUU4NzcwRkE2MkNCMjNGN0Q3N0UyQzI2MkQ4MEQ1
NEI2MEJGMDAeFw0yMjEyMDYxNTE3NDhaFw0yMzEyMDUxNTIyNDhaMDMxMTAvBgNV
BAMTKDFENEE0NDJENDRFNTk0MkRCQjYzOEZBMURCQUVGQkQwQkE0RkNGREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC68kkP3/976F44Ku0QH53p1ECy
IcixUXEPpq4EPoI68jRahC7Yi1fDsE2U7+YEi1wZK6alVpDVNxU3JCHpjQR5yOwK
yhRPhb0x0FTKdzQTEqmO2NWQrolnRvInPqZBQnRFnRTNvb8309gNeiq6q4BJiJN/
e79QRzfiQohoJw7RZIEbEBoJuUIZYisz0FqwM61BNSf9esDbGctyRiiQkmGHFlkJ
a3C10sNUEbQNByVHd+FkOfca2CnZtfGHhcPzNLb0tebhWyhvNG0BOZxeFJtuxA8t
4h0AScgniSzHBRk6WBZSFPqKSFv9u/xPRsHeJNrWq29KxM/XzKm3Mpe2G/ELAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUHUpELUTllC27Y4+h26770LpPz9wwHwYDVR0j
BBgwFoAUHBHodw+mLLI/fXfiwmLYDVS2C/AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2JXb290YzNxYVYxb0s3SDZyY1E0RFgzMktCVFB3ZnFvTnluUTRVYmdy
VHkvMC8xQzExRTg3NzBGQTYyQ0IyM0Y3RDc3RTJDMjYyRDgwRDU0QjYwQkYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFDMTFFODc3MEZBNjJDQjIz
RjdENzdFMkMyNjJEODBENTRCNjBCRjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdiV29vdGMzcWFWMW9LN0g2cmNRNERYMzJLQlRQd2Zxb055blE0VWJnclR5LzAv
MzQzNTJlMzEzNzMwMmUzMTM0MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzMTM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtqpAwDQYJKoZIhvcNAQELBQADggEBAHl4Xtei
HSwKERK4uTr8GNBtMD77/z0uLgJvDb3k9uwSLmHoDGiE7/dV/RE3ljJSofVxmEdC
C9qM3b+hkbPI5e5tyYOgKltIesrJz+iWkHRar9mvnphwu41x/iwjbbvxQYXN4YPy
CfA/T9GSGQ73n7H5oLkSYknxK6eZRk5LLiLLspLCwEuNhrmTUG4rq33pgOiUN3aL
mGmL9BvFn0cp90sTNUu8DI8riakDUmeUw1Imv2SsfN537TdTJikwMVv5SfE8V3FH
+q6pK1anamZ7KtfDL/2nueRNOZkMrTPqfh+WOLE5OeHIqD9yppYLZODjPouZI3UX
t+6iIx7wVBhuVYo=
-----END CERTIFICATE-----