Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e32322f33322d3332203d3e20323637323536.roa
File:                     34352e3233322e35302e32322f33322d3332203d3e20323637323536.roa (raw, json)
Hash identifier:          Zr921JudhYWxL2RXXkyKW30t141/kixeXpK4hnbWAqw=
Subject key identifier:   E4:28:9F:0A:4D:A7:61:9C:02:FE:EB:9A:48:43:FA:B9:EE:04:D9:A7
Certificate issuer:       /CN=0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B
Certificate serial:       45AAF57DB510BAF3781C7E7AEACB517F872730A0
Authority key identifier: 0D:C3:30:1F:CB:DE:2B:A3:C4:D2:9A:F5:8D:A6:14:50:72:D1:00:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e32322f33322d3332203d3e20323637323536.roa
Signing time:             Sun 11 Sep 2022 23:27:03 +0000
ROA not before:           Sun 11 Sep 2022 23:22:03 +0000
ROA not after:            Sun 10 Sep 2023 23:27:03 +0000
asID:                     267256
IP address blocks:        45.232.50.22/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:aa:f5:7d:b5:10:ba:f3:78:1c:7e:7a:ea:cb:51:7f:87:27:30:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B
        Validity
            Not Before: Sep 11 23:22:03 2022 GMT
            Not After : Sep 10 23:27:03 2023 GMT
        Subject: CN=E4289F0A4DA7619C02FEEB9A4843FAB9EE04D9A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:7a:93:89:49:32:d9:31:c8:39:1d:31:06:49:
                    2e:3a:33:ee:4f:cb:99:40:7d:20:c0:82:5c:72:58:
                    fd:c2:ad:fb:51:a7:11:59:37:fe:49:d1:cf:3b:23:
                    7f:49:0e:cd:2d:d2:92:da:ef:a8:a8:a0:42:be:a7:
                    3f:72:5f:c3:ec:13:c7:1f:db:e4:7b:d8:1a:f0:3b:
                    d0:6a:76:06:42:cb:5f:c9:74:f1:a4:e7:1e:18:48:
                    06:f4:20:f5:fd:cc:04:af:a0:4c:00:3d:35:c6:85:
                    8a:61:39:8e:11:6b:53:ce:05:ae:6d:2a:80:47:d1:
                    21:8b:6b:11:1f:fc:90:b8:ca:13:ea:f7:6f:a5:bb:
                    d7:21:8f:a1:5f:ce:e3:8a:9f:27:72:56:ba:90:32:
                    04:a9:5a:d1:fd:80:e1:75:de:f1:08:f3:b2:57:3b:
                    ff:b7:2f:f1:a2:f2:3f:b7:02:16:fb:97:10:0b:4f:
                    7b:9d:fa:f3:70:25:ff:25:76:81:80:65:dd:c2:57:
                    b8:29:25:29:79:9f:90:87:5a:59:0e:5e:1d:1a:26:
                    97:1e:06:c8:c9:d9:58:98:be:95:51:1e:53:8f:40:
                    c5:47:06:7a:e7:af:a5:e9:d7:00:f6:f8:3e:3d:cf:
                    b3:ae:7e:bd:d8:68:30:58:bf:da:d4:85:37:7d:af:
                    83:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:28:9F:0A:4D:A7:61:9C:02:FE:EB:9A:48:43:FA:B9:EE:04:D9:A7
            X509v3 Authority Key Identifier:
                keyid:0D:C3:30:1F:CB:DE:2B:A3:C4:D2:9A:F5:8D:A6:14:50:72:D1:00:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e32322f33322d3332203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.50.22/32

    Signature Algorithm: sha256WithRSAEncryption
         77:a6:04:d1:8b:aa:a6:46:dd:04:96:76:90:ce:38:2e:8f:79:
         7d:60:d8:27:13:da:e1:fd:cc:c4:31:c1:4b:e5:d7:f6:76:53:
         0c:97:33:ec:6b:a9:07:8d:53:30:1f:cc:3b:03:6c:de:36:75:
         6f:47:b4:70:9d:98:4f:b3:14:0d:32:2a:70:74:b8:e6:a6:c3:
         cd:df:20:95:9f:95:8e:cd:7e:d8:13:91:3a:77:97:a7:f2:ce:
         e8:76:ab:dd:8b:1f:e8:81:2c:75:9b:d2:5a:82:15:58:e0:3f:
         17:39:d9:6f:fa:51:9a:7b:4e:0f:6d:f2:81:66:a4:f0:50:da:
         af:42:b9:28:0c:6a:ce:64:29:05:2d:f2:d7:82:56:60:32:d4:
         31:9e:9e:d6:2c:02:e0:08:95:5d:d7:31:00:04:bf:50:d2:5c:
         20:53:a0:12:be:a3:ab:f6:a1:ae:86:12:df:74:68:52:4f:69:
         ba:d3:09:32:08:81:60:ab:98:b5:ea:df:c3:a1:a3:a7:c8:e4:
         c4:07:93:1f:be:29:ae:9a:7a:2f:b4:7a:14:10:d8:bc:f3:27:
         3c:80:4c:2b:ab:b8:ab:c7:85:fe:94:c8:52:98:23:fe:bf:93:
         19:bf:8c:e8:2a:8d:35:8c:62:b9:47:96:b7:c9:93:43:ce:c7:
         ae:0e:7a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----