Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e32352f33322d3332203d3e20323637323536.roa
File:                     34352e3233322e35302e32352f33322d3332203d3e20323637323536.roa (raw, json)
Hash identifier:          sk687ut4Y0GVAENaIIM4BrAHiU0j283syS63EtLhdeA=
Subject key identifier:   51:60:1B:78:36:C8:A6:0F:06:67:70:61:5C:9C:F1:BB:65:68:85:84
Certificate issuer:       /CN=0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B
Certificate serial:       438BE8D32DC7426C4C73A69B736345C956B74AF1
Authority key identifier: 0D:C3:30:1F:CB:DE:2B:A3:C4:D2:9A:F5:8D:A6:14:50:72:D1:00:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e32352f33322d3332203d3e20323637323536.roa
Signing time:             Sun 11 Sep 2022 23:17:15 +0000
ROA not before:           Sun 11 Sep 2022 23:12:15 +0000
ROA not after:            Sun 10 Sep 2023 23:17:15 +0000
asID:                     267256
IP address blocks:        45.232.50.25/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:8b:e8:d3:2d:c7:42:6c:4c:73:a6:9b:73:63:45:c9:56:b7:4a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B
        Validity
            Not Before: Sep 11 23:12:15 2022 GMT
            Not After : Sep 10 23:17:15 2023 GMT
        Subject: CN=51601B7836C8A60F066770615C9CF1BB65688584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e3:22:a7:b9:c3:35:ff:f2:35:a0:75:1e:b0:
                    f4:cf:58:86:11:56:df:8b:69:ec:4e:02:71:ab:4f:
                    ce:20:5e:28:59:c9:42:d5:c0:92:50:c3:7c:29:1f:
                    c9:8f:4b:70:01:7d:10:7b:53:e5:9d:f6:15:90:a4:
                    6d:78:eb:84:89:f9:4f:fe:41:82:0c:92:49:68:92:
                    e8:1f:0d:ce:93:c2:47:0a:a8:ec:3c:e0:23:7c:05:
                    9c:d3:e6:c7:31:48:ec:e2:8d:15:53:f9:52:35:34:
                    c8:39:0c:c5:20:91:ae:35:c4:d7:b7:65:b2:62:81:
                    20:a7:e1:7f:ad:44:cb:85:89:a0:9d:17:ef:29:1e:
                    84:e2:8d:56:5c:f4:30:23:a2:be:0a:d2:7c:35:b1:
                    ad:56:75:fb:7f:b2:d7:59:54:33:bf:5a:3a:06:71:
                    b4:69:9e:05:16:31:62:53:38:8f:71:47:bb:06:81:
                    c4:f6:ad:a0:2b:87:82:77:d8:53:b9:57:96:d0:be:
                    14:94:c7:ee:14:da:22:d9:48:37:f0:0d:e3:f9:3b:
                    6c:52:77:a8:c8:4a:7f:2c:0c:c3:62:cf:9c:1d:07:
                    2b:42:e5:a3:09:f0:f7:08:20:9a:f3:60:a8:0d:b7:
                    85:a7:0f:93:6b:39:ef:4f:19:8c:c5:e9:a6:4d:34:
                    0b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:60:1B:78:36:C8:A6:0F:06:67:70:61:5C:9C:F1:BB:65:68:85:84
            X509v3 Authority Key Identifier:
                keyid:0D:C3:30:1F:CB:DE:2B:A3:C4:D2:9A:F5:8D:A6:14:50:72:D1:00:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e32352f33322d3332203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.50.25/32

    Signature Algorithm: sha256WithRSAEncryption
         67:98:e3:66:3d:7a:a1:15:69:c8:48:cc:b6:69:3b:0a:be:0a:
         10:c4:3e:39:ef:cc:14:13:9b:de:7a:1f:b2:6d:d5:1b:74:84:
         05:17:db:59:68:af:4b:b4:95:27:0d:4d:f5:eb:4f:a3:15:c2:
         7a:5b:bb:43:0b:4a:38:e8:6c:3f:a4:ea:97:45:74:23:23:5a:
         6f:5f:eb:c3:78:82:89:ab:f5:ed:42:fa:cb:3c:47:d7:df:19:
         f4:2c:4a:6b:ac:e7:3d:2a:04:24:8d:ad:9c:3b:b7:bf:c3:86:
         bd:02:34:69:aa:57:00:a3:c6:af:69:2e:01:64:7c:50:74:2a:
         ff:72:d2:cf:2e:1c:52:5c:e4:e9:ff:ad:9b:fc:8e:b9:ca:e0:
         17:d7:9f:f9:39:d1:26:e1:dc:23:50:23:4a:aa:93:de:80:16:
         42:e9:51:75:1b:ac:a2:57:33:b6:5d:c4:c5:3d:1f:be:4d:a3:
         ca:37:07:f8:c1:9b:b5:53:b9:78:b2:7e:66:a3:8c:a4:82:ca:
         4a:49:d2:41:ce:6c:ec:d4:b8:4d:27:49:65:97:48:ad:43:f7:
         91:77:a5:3b:1c:ef:5d:a3:ee:fd:55:52:00:be:9a:2f:52:74:
         cf:7e:fd:8d:db:b3:d2:d9:95:1e:1c:2f:20:6f:73:e4:ec:08:
         c1:dc:a8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----