Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/0/34352e3233302e3230302e302f32322d3332203d3e20323637323038.roa
File:                     34352e3233302e3230302e302f32322d3332203d3e20323637323038.roa (raw, json)
Hash identifier:          L1zWx7pHqwoPZz/bZFOtdnm5ZD6Ujowi8xUvDHQ9cBY=
Subject key identifier:   62:9B:0F:C3:4A:6A:D9:11:D0:B9:44:48:74:95:84:AD:F1:1E:1C:FB
Certificate issuer:       /CN=9AF58802664F504429310F7B4DFD6676DAAB27F4
Certificate serial:       01D6BA6E3959B6105AD83F62BF8C63D114ED08BF
Authority key identifier: 9A:F5:88:02:66:4F:50:44:29:31:0F:7B:4D:FD:66:76:DA:AB:27:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AF58802664F504429310F7B4DFD6676DAAB27F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/0/34352e3233302e3230302e302f32322d3332203d3e20323637323038.roa
Signing time:             Wed 28 Dec 2022 21:28:43 +0000
ROA not before:           Wed 28 Dec 2022 21:23:43 +0000
ROA not after:            Wed 27 Dec 2023 21:28:43 +0000
asID:                     267208
IP address blocks:        45.230.200.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d6:ba:6e:39:59:b6:10:5a:d8:3f:62:bf:8c:63:d1:14:ed:08:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AF58802664F504429310F7B4DFD6676DAAB27F4
        Validity
            Not Before: Dec 28 21:23:43 2022 GMT
            Not After : Dec 27 21:28:43 2023 GMT
        Subject: CN=629B0FC34A6AD911D0B94448749584ADF11E1CFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:87:bc:79:b5:f5:e2:a6:3c:be:e3:90:e6:15:
                    ee:85:a9:5f:f7:4d:a5:26:e1:9e:02:d5:fc:05:02:
                    74:c8:5d:18:a7:32:f7:65:7e:30:80:b6:3f:e0:07:
                    f2:1b:92:32:ac:35:3d:16:dc:1b:2c:4b:3c:94:58:
                    f9:7a:98:fa:36:9a:50:e9:aa:d1:6f:38:1f:2a:b3:
                    bc:06:a6:00:bb:38:44:0b:1c:b6:22:45:a3:ed:50:
                    ca:0e:c2:88:09:b9:44:04:4f:9e:a9:b3:25:ff:eb:
                    01:2f:bb:53:f2:dc:77:fb:6d:df:29:84:a1:6c:2b:
                    0c:08:28:c7:32:eb:25:59:2c:a5:fe:50:2d:b4:1e:
                    b2:64:bb:cc:63:75:54:c4:70:5b:d3:34:65:13:76:
                    6c:a2:9d:fe:ba:2e:8f:57:e3:67:60:ce:7b:32:2d:
                    cf:a0:fd:39:8e:92:0b:f5:bf:45:d8:eb:69:b8:78:
                    8b:d5:52:06:48:b0:3d:fc:ce:ec:a7:10:d9:98:02:
                    b7:02:60:d7:42:64:d5:e6:70:b4:ef:51:02:a9:0b:
                    c8:c6:a3:b6:3a:15:b1:61:3d:25:4c:f5:7b:89:2d:
                    af:0a:a3:e2:12:15:b7:db:56:88:a9:9b:4f:37:ef:
                    4a:36:40:43:82:58:70:1e:dc:28:42:0b:42:95:1a:
                    1a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:9B:0F:C3:4A:6A:D9:11:D0:B9:44:48:74:95:84:AD:F1:1E:1C:FB
            X509v3 Authority Key Identifier:
                keyid:9A:F5:88:02:66:4F:50:44:29:31:0F:7B:4D:FD:66:76:DA:AB:27:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/0/9AF58802664F504429310F7B4DFD6676DAAB27F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AF58802664F504429310F7B4DFD6676DAAB27F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/0/34352e3233302e3230302e302f32322d3332203d3e20323637323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:f8:be:ad:60:46:e4:2b:f4:65:d7:d2:20:64:a2:e2:a5:f5:
         37:d3:98:0e:c2:78:2c:96:b1:75:25:6b:36:ae:67:d9:ca:5a:
         0e:09:4d:44:86:d5:76:a6:70:ca:c5:52:4d:8f:75:62:17:7e:
         86:64:cf:65:d3:ca:96:3c:72:1d:fb:68:bc:20:e6:cc:b7:9f:
         58:d5:40:55:81:bc:ca:e1:06:d8:30:d6:f2:6f:ce:2b:00:63:
         3a:32:aa:75:14:95:93:ae:46:e4:bf:67:5c:92:9c:d5:69:de:
         ed:8e:3f:23:28:f5:69:c1:6c:c7:f4:87:0a:26:5e:6c:5a:3a:
         2b:37:9d:e8:c8:10:68:82:36:0c:40:5a:0e:ec:7e:b9:58:f8:
         50:05:ea:a8:6c:97:07:68:70:e7:91:4d:9c:e8:f4:f7:bc:ae:
         3f:d9:96:a1:02:cd:8a:74:ac:76:5f:48:51:51:b7:3f:d6:34:
         c7:14:99:96:21:a9:32:2c:73:34:b1:44:46:db:bc:54:b4:68:
         fa:36:01:4e:88:ff:5c:26:0e:44:62:24:88:6c:af:97:a4:83:
         4e:09:a7:85:af:19:b2:fc:ff:06:66:7e:cb:a4:12:96:78:e4:
         52:dd:74:7b:5d:0c:51:fb:52:4c:d2:0c:6e:ef:ce:bc:1c:6b:
         ac:b4:0f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----