Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/2/34352e3233382e362e302f32332d3233203d3e20323638333038.roa
File:                     34352e3233382e362e302f32332d3233203d3e20323638333038.roa (raw, json)
Hash identifier:          oSyXUuWxnC79aZVjUeY1wqesB6xC2UVmyv+WoE31yn8=
Subject key identifier:   1D:E6:70:EB:17:DA:C4:47:46:F1:1C:82:DF:94:6F:B5:8F:81:1D:03
Certificate issuer:       /CN=7E71CA6C0D976155FE8642D776AC920AA8929FA7
Certificate serial:       71CBAE04F2ADE349352C525252FF8CFF733540DC
Authority key identifier: 7E:71:CA:6C:0D:97:61:55:FE:86:42:D7:76:AC:92:0A:A8:92:9F:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E71CA6C0D976155FE8642D776AC920AA8929FA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/2/34352e3233382e362e302f32332d3233203d3e20323638333038.roa
Signing time:             Mon 21 Aug 2023 14:42:28 +0000
ROA not before:           Mon 21 Aug 2023 14:37:28 +0000
ROA not after:            Mon 19 Aug 2024 14:42:28 +0000
asID:                     268308
IP address blocks:        45.238.6.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:cb:ae:04:f2:ad:e3:49:35:2c:52:52:52:ff:8c:ff:73:35:40:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E71CA6C0D976155FE8642D776AC920AA8929FA7
        Validity
            Not Before: Aug 21 14:37:28 2023 GMT
            Not After : Aug 19 14:42:28 2024 GMT
        Subject: CN=1DE670EB17DAC44746F11C82DF946FB58F811D03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c8:6f:1c:74:96:1f:19:5d:73:d5:02:f9:5b:
                    91:4e:d7:44:19:d2:7e:96:dd:a7:95:50:c2:48:d7:
                    8c:42:f3:92:b1:b9:53:2e:7a:42:72:28:ba:8c:7b:
                    2e:6d:03:ce:c8:98:10:6c:a7:98:1b:67:ad:2b:91:
                    a9:01:cc:f3:1d:c9:61:81:f1:4b:9c:16:c9:b0:30:
                    5e:15:e3:1d:9a:23:47:ae:d4:0e:d4:43:3b:af:cc:
                    53:87:c0:40:32:1d:e5:6c:ec:25:40:17:20:19:54:
                    8e:90:8f:82:cb:31:b7:a1:ee:80:7d:c9:16:c9:de:
                    a6:c8:69:6e:87:5c:65:e9:c6:cf:f9:25:a6:06:f2:
                    1d:1c:4a:ba:cd:58:a7:ec:f5:13:9b:ad:48:44:05:
                    ed:e3:30:01:da:0e:57:18:50:66:66:4e:14:39:99:
                    14:13:09:64:4e:46:3d:08:1f:62:ad:03:da:38:c4:
                    08:ec:56:a9:f9:be:9e:fb:9c:30:cc:7e:0b:c7:8d:
                    8a:fc:f2:42:d1:c2:bd:fd:6e:9a:82:04:a7:61:f5:
                    9c:70:87:30:cf:cc:85:ab:2a:bc:b7:9d:c6:d7:fa:
                    42:4f:7e:1f:96:70:68:6c:62:b7:7c:b9:4e:51:cb:
                    ff:6a:30:6d:fe:52:3a:b6:94:95:63:a2:48:36:20:
                    52:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E6:70:EB:17:DA:C4:47:46:F1:1C:82:DF:94:6F:B5:8F:81:1D:03
            X509v3 Authority Key Identifier:
                keyid:7E:71:CA:6C:0D:97:61:55:FE:86:42:D7:76:AC:92:0A:A8:92:9F:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/2/7E71CA6C0D976155FE8642D776AC920AA8929FA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E71CA6C0D976155FE8642D776AC920AA8929FA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/2/34352e3233382e362e302f32332d3233203d3e20323638333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bc:94:98:56:08:8a:19:69:e5:56:16:bc:4b:c5:ea:f0:f2:9a:
         66:ae:05:f3:9f:b8:1a:ae:f7:59:a5:0a:4d:4d:88:20:b4:36:
         84:68:1f:6f:e5:bd:74:a0:8c:a5:a2:5c:fd:55:ca:8c:66:c6:
         cf:7c:a6:51:fa:a1:23:49:7f:ae:50:64:8a:05:8c:88:37:79:
         57:9d:dc:92:8f:1a:47:43:c8:2f:0b:e0:a6:e2:d0:86:f9:d4:
         c4:9f:54:98:91:6f:dc:15:9f:63:31:2f:f1:88:3d:f3:c2:2e:
         d8:db:62:2a:db:4c:d6:e8:66:a1:7c:55:07:fd:99:97:32:72:
         09:94:4e:b3:7c:c9:6e:bd:a7:b9:81:f9:e1:02:a2:2a:5f:82:
         03:33:60:55:84:16:21:28:41:bd:78:2d:e6:a1:d4:c2:b3:02:
         0c:e4:52:b8:17:85:62:f9:ae:cb:d5:b8:60:83:6b:f6:2f:86:
         6b:87:bd:44:bf:a8:d3:09:2f:ec:a6:88:b5:95:72:06:cd:02:
         9b:be:e4:5d:e8:79:7f:c1:ad:a4:2c:68:63:9c:b7:ec:00:5b:
         67:39:79:14:5f:da:e6:8b:74:4f:60:83:6f:73:df:ef:d5:2e:
         b0:d3:61:6f:18:c0:82:b5:33:0f:d0:2d:90:37:f0:70:26:fc:
         f7:da:bb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----