Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e31382f33322d3332203d3e20323637323536.roa
File:                     34352e3233322e35302e31382f33322d3332203d3e20323637323536.roa (raw, json)
Hash identifier:          SLEW65xRcVo8utJntblVI+XC/8pyir9ENCuzjy4lkhM=
Subject key identifier:   BC:97:58:CB:C6:D1:E2:B8:6D:A8:30:70:F3:AA:26:61:1D:41:13:A0
Certificate issuer:       /CN=0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B
Certificate serial:       6A8F1B1365EFADDDEE9DA5E201261BC620D300CA
Authority key identifier: 0D:C3:30:1F:CB:DE:2B:A3:C4:D2:9A:F5:8D:A6:14:50:72:D1:00:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e31382f33322d3332203d3e20323637323536.roa
Signing time:             Sun 11 Sep 2022 23:28:14 +0000
ROA not before:           Sun 11 Sep 2022 23:23:14 +0000
ROA not after:            Sun 10 Sep 2023 23:28:14 +0000
asID:                     267256
IP address blocks:        45.232.50.18/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:8f:1b:13:65:ef:ad:dd:ee:9d:a5:e2:01:26:1b:c6:20:d3:00:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B
        Validity
            Not Before: Sep 11 23:23:14 2022 GMT
            Not After : Sep 10 23:28:14 2023 GMT
        Subject: CN=BC9758CBC6D1E2B86DA83070F3AA26611D4113A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ed:aa:1e:99:7a:d2:47:54:bf:28:af:cd:2c:
                    ec:cc:61:51:e1:a1:ce:43:f9:9a:87:51:73:7e:29:
                    39:f4:1c:ff:d9:f5:d0:ee:57:71:d4:f6:59:38:92:
                    fa:48:3c:f8:b2:09:43:46:c1:fb:27:95:2b:1d:9f:
                    84:d5:76:b4:f2:73:43:eb:4e:0c:0c:f7:a6:73:a0:
                    3c:80:5a:23:cd:f7:79:47:1e:3b:f1:20:b3:3e:08:
                    67:dd:28:b6:6c:17:1b:6b:29:bf:b4:e4:20:07:77:
                    15:03:da:c4:a4:85:31:66:c1:ae:57:e0:16:f4:ea:
                    95:32:f3:6b:d8:5d:82:e5:b5:6c:a6:87:64:15:98:
                    e5:57:5f:bf:5a:4e:8a:12:fb:e8:48:25:d7:77:22:
                    62:48:97:ab:c3:3d:69:8d:93:72:64:49:55:82:06:
                    77:9b:97:2c:96:b5:d4:77:b9:5c:72:c8:68:16:9b:
                    da:41:53:97:48:0c:80:36:59:ea:20:d8:82:e4:89:
                    fa:60:ec:18:65:05:d3:88:fc:58:66:f4:c1:e5:5b:
                    f3:6b:af:de:10:f4:e2:16:41:a9:e3:c3:b2:6f:62:
                    f9:61:04:49:66:d2:fa:a3:52:7d:0c:2b:54:ae:b6:
                    18:53:81:99:bb:96:af:b9:47:51:6c:b0:83:59:ba:
                    bc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:97:58:CB:C6:D1:E2:B8:6D:A8:30:70:F3:AA:26:61:1D:41:13:A0
            X509v3 Authority Key Identifier:
                keyid:0D:C3:30:1F:CB:DE:2B:A3:C4:D2:9A:F5:8D:A6:14:50:72:D1:00:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e31382f33322d3332203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.50.18/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:44:56:be:3d:c2:ad:a8:31:e1:fb:dd:f4:04:ee:40:a6:9f:
         f3:bd:ff:54:c7:cf:33:5e:3b:3c:65:34:4c:3a:47:00:63:cc:
         f9:37:ac:3d:8d:a6:71:71:9c:41:af:83:68:d7:c2:80:11:23:
         e3:15:10:92:9e:7b:b9:bb:59:ee:e4:64:da:fe:12:4e:8d:7c:
         13:f2:74:6e:d8:26:6a:b4:bc:21:51:98:55:4f:5a:d4:61:77:
         39:5b:ac:0f:e4:3d:6c:cf:1b:26:57:f7:eb:e4:20:93:ba:f2:
         7e:36:fb:25:77:57:39:92:0e:07:21:22:87:85:d6:1b:94:34:
         de:8d:d5:4f:1e:ed:68:60:fb:ee:3d:96:ae:ff:12:8b:cf:01:
         2f:9b:e2:5a:2e:72:0f:ab:2a:6c:9d:e6:f0:05:38:f7:6a:5a:
         75:76:25:8c:eb:4b:d4:48:e9:c6:91:50:5f:3f:fc:c2:65:c4:
         04:bc:76:1b:e7:12:3d:74:5a:4c:04:4c:9c:d3:1b:b0:ae:96:
         3e:db:6d:07:fa:d9:30:ba:9e:72:bc:45:a2:92:4a:12:85:4d:
         1c:d2:95:b9:2d:f0:05:63:55:83:c5:51:07:08:2e:c0:1d:56:
         36:e4:8d:f7:02:8e:c6:02:86:42:04:0c:ce:cf:40:58:c2:bc:
         67:34:c2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----