Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136322e302f32332d3233203d3e20323730373933.roa
File:                     3230312e3135392e3136322e302f32332d3233203d3e20323730373933.roa (raw, json)
Hash identifier:          JvokKGGRRMjbOKF8N0TgVilj841ALeTt/QesBVVDRFo=
Subject key identifier:   AB:04:69:9E:FA:A1:C6:26:EA:43:CF:87:83:26:7C:2F:B9:E8:6F:BE
Certificate issuer:       /CN=96B144FE6CA3062A1FE26385A6C33A9C6A21A266
Certificate serial:       3AD34B5064E230993E08ABF3E6A9B9173056ED58
Authority key identifier: 96:B1:44:FE:6C:A3:06:2A:1F:E2:63:85:A6:C3:3A:9C:6A:21:A2:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/96B144FE6CA3062A1FE26385A6C33A9C6A21A266.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136322e302f32332d3233203d3e20323730373933.roa
Signing time:             Mon 26 Sep 2022 17:38:50 +0000
ROA not before:           Mon 26 Sep 2022 17:33:50 +0000
ROA not after:            Mon 25 Sep 2023 17:38:50 +0000
asID:                     270793
IP address blocks:        201.159.162.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:d3:4b:50:64:e2:30:99:3e:08:ab:f3:e6:a9:b9:17:30:56:ed:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96B144FE6CA3062A1FE26385A6C33A9C6A21A266
        Validity
            Not Before: Sep 26 17:33:50 2022 GMT
            Not After : Sep 25 17:38:50 2023 GMT
        Subject: CN=AB04699EFAA1C626EA43CF8783267C2FB9E86FBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e1:3e:5e:48:b2:90:7c:98:f2:3a:3b:59:ce:
                    4c:0e:f4:22:2d:08:90:48:41:c7:e5:d0:ef:e8:7a:
                    85:f7:0a:61:64:d4:02:77:37:be:ca:fa:9e:f9:2b:
                    31:69:07:51:ab:db:54:f3:ec:6e:89:45:d5:ce:f1:
                    78:52:43:2e:ae:9f:60:91:c9:56:33:32:a4:df:19:
                    58:9a:e3:dd:da:fc:90:b4:21:5d:e3:78:05:30:cb:
                    1c:24:44:c2:56:59:7e:72:a3:d0:2e:ca:f2:78:6b:
                    ce:5b:c7:07:61:41:6b:4d:f2:1f:ec:7d:bd:37:92:
                    e8:4a:17:a5:3f:10:c1:64:ba:da:fb:6b:2c:34:c9:
                    f7:b5:31:17:c7:87:50:a2:88:d0:10:73:d8:fb:40:
                    b1:03:ee:21:0a:ed:54:e6:f9:24:18:3b:ef:e2:90:
                    fe:92:f6:fa:70:3d:1f:56:2c:57:e5:4f:84:5f:df:
                    b2:59:18:5f:d3:4d:94:cd:ef:79:47:8e:2e:24:68:
                    1d:ba:08:e5:a7:28:c5:9c:c2:8b:bc:9d:5c:fd:00:
                    3e:21:39:67:50:1f:a1:fc:33:80:22:ee:84:1b:28:
                    91:79:d1:d5:03:8d:7c:52:55:d9:37:f8:1b:88:21:
                    8d:ff:b0:be:33:23:7e:30:db:65:3d:59:6e:02:e1:
                    bf:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:04:69:9E:FA:A1:C6:26:EA:43:CF:87:83:26:7C:2F:B9:E8:6F:BE
            X509v3 Authority Key Identifier:
                keyid:96:B1:44:FE:6C:A3:06:2A:1F:E2:63:85:A6:C3:3A:9C:6A:21:A2:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/96B144FE6CA3062A1FE26385A6C33A9C6A21A266.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/96B144FE6CA3062A1FE26385A6C33A9C6A21A266.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136322e302f32332d3233203d3e20323730373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:80:d3:8c:02:19:1b:89:e1:9b:58:67:21:ac:ca:09:ee:ad:
         cc:fc:be:90:85:0a:a9:78:a9:06:dc:c2:80:5a:94:19:63:e3:
         33:f0:30:e9:14:d8:6c:b1:58:d7:7b:e8:d4:32:4f:58:59:46:
         25:2c:7c:44:bf:c6:af:9a:b2:86:96:39:6e:aa:ac:80:84:f9:
         fa:4d:ff:70:73:1f:8d:8e:55:c1:80:28:ac:ea:2e:63:94:66:
         ab:5f:20:cc:ab:be:8a:15:4f:93:4a:64:94:42:09:bd:75:e7:
         91:1f:8a:b9:77:1d:0a:d5:5e:eb:58:eb:89:3d:c1:98:23:41:
         57:fe:d5:a0:20:d6:a2:37:1a:ed:a2:eb:a5:55:e3:8f:d7:2c:
         c5:d5:32:0b:9b:05:f1:84:e7:f8:9c:83:78:55:13:e7:47:42:
         e5:73:45:60:20:21:03:3a:b7:13:b5:d0:70:ba:dd:94:ea:3f:
         40:1e:09:cb:85:00:1a:f9:41:a9:43:9f:78:56:06:bb:a0:16:
         87:41:56:c6:20:bf:6e:1a:1a:d9:2d:53:fb:b0:9f:d0:25:32:
         a1:1e:86:4a:ed:97:d8:2b:b8:76:89:d7:82:79:d6:9e:5c:3a:
         07:a7:2b:b1:b7:d6:61:ec:8e:d7:ee:59:a2:09:8e:07:14:d3:
         a2:ef:a3:0f
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUOtNLUGTiMJk+CKvz5qm5FzBW7VgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZCMTQ0RkU2Q0EzMDYyQTFGRTI2Mzg1QTZDMzNBOUM2
QTIxQTI2NjAeFw0yMjA5MjYxNzMzNTBaFw0yMzA5MjUxNzM4NTBaMDMxMTAvBgNV
BAMTKEFCMDQ2OTlFRkFBMUM2MjZFQTQzQ0Y4NzgzMjY3QzJGQjlFODZGQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC64T5eSLKQfJjyOjtZzkwO9CIt
CJBIQcfl0O/oeoX3CmFk1AJ3N77K+p75KzFpB1Gr21Tz7G6JRdXO8XhSQy6un2CR
yVYzMqTfGVia493a/JC0IV3jeAUwyxwkRMJWWX5yo9AuyvJ4a85bxwdhQWtN8h/s
fb03kuhKF6U/EMFkutr7ayw0yfe1MRfHh1CiiNAQc9j7QLED7iEK7VTm+SQYO+/i
kP6S9vpwPR9WLFflT4Rf37JZGF/TTZTN73lHji4kaB26COWnKMWcwou8nVz9AD4h
OWdQH6H8M4Ai7oQbKJF50dUDjXxSVdk3+BuIIY3/sL4zI34w22U9WW4C4b+JAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUqwRpnvqhxibqQ8+HgyZ8L7nob74wHwYDVR0j
BBgwFoAUlrFE/myjBiof4mOFpsM6nGohomYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUF0M29hYmVpUHZUQW42U2dUd3NRS1REcmtMMWJNaDM3dlJQb2pYOEV1
bzMvMC85NkIxNDRGRTZDQTMwNjJBMUZFMjYzODVBNkMzM0E5QzZBMjFBMjY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk2QjE0NEZFNkNBMzA2MkEx
RkUyNjM4NUE2QzMzQTlDNkEyMUEyNjYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FBdDNvYWJlaVB2VEFuNlNnVHdzUUtURHJrTDFiTWgzN3ZSUG9qWDhFdW8zLzAv
MzIzMDMxMmUzMTM1MzkyZTMxMzYzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzczMDM3MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAcmfojANBgkqhkiG9w0BAQsFAAOCAQEAh4DT
jAIZG4nhm1hnIazKCe6tzPy+kIUKqXipBtzCgFqUGWPjM/Aw6RTYbLFY13vo1DJP
WFlGJSx8RL/Gr5qyhpY5bqqsgIT5+k3/cHMfjY5VwYAorOouY5Rmq18gzKu+ihVP
k0pklEIJvXXnkR+KuXcdCtVe61jriT3BmCNBV/7VoCDWojca7aLrpVXjj9csxdUy
C5sF8YTn+JyDeFUT50dC5XNFYCAhAzq3E7XQcLrdlOo/QB4Jy4UAGvlBqUOfeFYG
u6AWh0FWxiC/bhoa2S1T+7Cf0CUyoR6GSu2X2Cu4donXgnnWnlw6B6crsbfWYeyO
1+5ZogmOBxTTou+jDw==
-----END CERTIFICATE-----