Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/0/3136342e3136332e3230382e302f32332d3233203d3e20323637343237.roa
File:                     3136342e3136332e3230382e302f32332d3233203d3e20323637343237.roa (raw, json)
Hash identifier:          D0UvEVV+e2SEVAkzkVW8ARe8WEouh5zSf8Rh/EEU1kE=
Subject key identifier:   90:5D:07:03:25:04:5C:6D:F2:E2:5A:64:33:95:39:92:80:ED:9C:32
Certificate issuer:       /CN=341D9DFC8FB9930D8BDCAC1A5A49AC459CFF5B8B
Certificate serial:       25AEAF3EA9879EB990E62F61F1BCFEB17923DB2F
Authority key identifier: 34:1D:9D:FC:8F:B9:93:0D:8B:DC:AC:1A:5A:49:AC:45:9C:FF:5B:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/341D9DFC8FB9930D8BDCAC1A5A49AC459CFF5B8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/0/3136342e3136332e3230382e302f32332d3233203d3e20323637343237.roa
Signing time:             Wed 31 Aug 2022 02:35:51 +0000
ROA not before:           Wed 31 Aug 2022 02:30:51 +0000
ROA not after:            Wed 30 Aug 2023 02:35:51 +0000
asID:                     267427
IP address blocks:        164.163.208.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ae:af:3e:a9:87:9e:b9:90:e6:2f:61:f1:bc:fe:b1:79:23:db:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=341D9DFC8FB9930D8BDCAC1A5A49AC459CFF5B8B
        Validity
            Not Before: Aug 31 02:30:51 2022 GMT
            Not After : Aug 30 02:35:51 2023 GMT
        Subject: CN=905D070325045C6DF2E25A643395399280ED9C32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a1:d9:19:63:b2:ff:16:01:d6:85:d5:8d:56:
                    df:36:c8:3a:30:3f:62:86:94:94:23:eb:db:bd:71:
                    02:99:b3:cf:43:98:ec:6e:8b:d3:34:c5:ed:c9:af:
                    8c:8a:6f:1b:ef:a4:17:6a:64:88:4f:89:c7:1b:18:
                    8e:2f:de:1b:a6:38:0d:4f:dd:52:53:7d:1d:78:e3:
                    4e:30:9c:76:12:29:8d:5f:ae:0f:f7:64:df:94:22:
                    36:03:c4:0a:2d:6b:32:e1:20:8d:23:e3:2e:99:62:
                    b5:2a:c6:03:61:63:f0:2a:0e:ea:19:6d:c9:2a:d7:
                    4e:fc:a8:c8:7e:92:b7:36:c3:04:31:19:2b:99:d3:
                    2c:a0:9c:bc:f2:83:85:5e:be:be:96:d2:28:83:f0:
                    16:df:7c:c4:fc:ff:e0:f3:3a:bc:fa:13:0d:7d:f5:
                    99:96:6e:e7:59:fc:1d:0e:f4:16:9b:25:73:c0:0a:
                    20:17:35:36:36:4f:5f:dd:b2:3e:bb:c4:fd:a0:1b:
                    27:a6:95:54:94:d2:5b:13:12:74:04:0c:d5:58:68:
                    b2:d3:83:07:d2:47:12:21:26:69:46:a8:fd:6a:b4:
                    21:64:88:44:ff:07:e9:62:3a:ff:59:f0:99:96:1c:
                    e0:b3:84:a6:94:da:1a:65:20:d5:ff:bb:7a:c5:93:
                    74:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:5D:07:03:25:04:5C:6D:F2:E2:5A:64:33:95:39:92:80:ED:9C:32
            X509v3 Authority Key Identifier:
                keyid:34:1D:9D:FC:8F:B9:93:0D:8B:DC:AC:1A:5A:49:AC:45:9C:FF:5B:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/0/341D9DFC8FB9930D8BDCAC1A5A49AC459CFF5B8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/341D9DFC8FB9930D8BDCAC1A5A49AC459CFF5B8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/0/3136342e3136332e3230382e302f32332d3233203d3e20323637343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:c4:91:35:5c:9d:45:d3:9d:14:10:1e:df:dd:9f:04:56:12:
         61:5f:9a:5e:ec:1b:bc:90:8e:77:91:f7:44:32:d7:ec:d2:66:
         79:54:0c:e8:41:a2:30:b9:eb:11:74:01:11:1c:2c:9b:c7:8d:
         66:16:ea:02:9e:85:c4:e4:89:63:1d:c2:6e:1e:a1:b6:13:a0:
         d1:72:fc:96:f7:bd:98:75:d1:14:f7:46:5c:e2:0b:0c:a0:38:
         c5:be:a7:90:e7:b7:3b:6f:cf:6a:71:b8:ab:c8:1b:2e:31:72:
         07:fe:76:ae:68:81:b6:27:aa:1e:98:74:ef:d0:23:5e:d2:61:
         3d:9c:a8:f1:b2:94:52:e5:aa:8c:84:3d:81:14:c4:52:d1:9a:
         9a:fa:49:39:22:f6:f6:cf:08:58:a3:32:58:f6:5e:23:b2:51:
         f8:ea:ec:a4:3f:b2:78:4a:0a:24:5b:8f:fe:e7:b4:14:86:42:
         31:fc:82:35:c7:5f:04:ab:b5:e3:8b:c7:28:d8:d5:18:0b:78:
         a2:f8:ca:22:a2:ed:f8:e7:60:29:56:4d:fa:99:2c:43:85:54:
         bf:26:b8:8d:11:04:e8:01:87:7f:02:4e:a7:6f:36:79:dc:d5:
         e8:48:f8:04:70:62:e3:b1:dc:b4:32:94:29:c0:d5:f9:cf:58:
         fb:cc:7b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----