Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5n4XHyaVagitqiqUYFK1sj3DJH1keSd6y1RnnxCp9V1a/0/3138392e31342e302e302f31382d3234203d3e203232363839.roa
File:                     3138392e31342e302e302f31382d3234203d3e203232363839.roa (raw, json)
Hash identifier:          pjBQF0eyWcZpkO2vMunFqH3xza4TIm6X4jXRv5NTC/o=
Subject key identifier:   FC:0E:85:D6:8D:F2:2D:5B:FE:42:F8:42:EB:52:FD:3E:7F:60:B1:0D
Certificate issuer:       /CN=FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD
Certificate serial:       5B2B9181190FE5A04CCCA20FD1A50FAF210EC9BE
Authority key identifier: FE:AA:AC:DC:EA:12:02:AB:4E:4D:D5:BE:CC:48:75:9C:00:40:D1:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5n4XHyaVagitqiqUYFK1sj3DJH1keSd6y1RnnxCp9V1a/0/3138392e31342e302e302f31382d3234203d3e203232363839.roa
Signing time:             Fri 27 Aug 2021 14:18:01 +0000
ROA not before:           Fri 27 Aug 2021 14:13:01 +0000
ROA not after:            Fri 26 Aug 2022 14:18:01 +0000
asID:                     22689
IP address blocks:        189.14.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:2b:91:81:19:0f:e5:a0:4c:cc:a2:0f:d1:a5:0f:af:21:0e:c9:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD
        Validity
            Not Before: Aug 27 14:13:01 2021 GMT
            Not After : Aug 26 14:18:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3d:4d:0c:cf:12:1f:7c:3b:84:cc:e6:ad:dc:
                    88:cc:45:ca:d7:51:26:ef:09:87:f2:6e:94:5b:c0:
                    eb:1f:c8:d7:e3:24:52:ef:0d:a1:8b:a3:66:d6:84:
                    9c:1b:23:da:c0:82:70:24:5c:9d:04:c6:ed:f3:99:
                    89:18:07:17:1f:49:36:9d:e0:05:2a:c4:00:35:cb:
                    d9:a3:18:4b:a4:f4:dd:a1:4f:5a:e4:c4:08:71:0c:
                    21:6f:bd:1a:86:2b:ae:7f:ca:82:2f:96:8e:ab:6a:
                    cb:e4:48:80:d3:54:ad:31:e0:09:00:61:79:a6:9e:
                    8f:97:a4:4d:e2:5e:cb:c0:16:f0:59:99:95:d5:e1:
                    45:7a:41:86:be:fe:6f:b4:08:77:00:cb:9a:67:f7:
                    b4:05:ab:9a:e9:4c:cc:f4:4e:36:3a:dc:c7:af:b4:
                    2a:c0:4d:19:8d:cc:d9:5d:aa:20:4d:68:45:30:63:
                    e5:87:7e:35:b6:b7:89:a4:68:be:46:3b:93:a0:a8:
                    92:87:a2:65:1c:ad:79:48:56:f8:f8:4b:f5:5a:93:
                    9f:35:d0:84:48:7f:23:cf:89:f8:21:32:8c:3e:ed:
                    b0:42:89:0f:95:65:fc:81:60:b6:e9:aa:25:73:68:
                    dc:a4:fe:b4:57:51:4f:d7:cd:14:71:09:9a:b3:07:
                    0a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:0E:85:D6:8D:F2:2D:5B:FE:42:F8:42:EB:52:FD:3E:7F:60:B1:0D
            X509v3 Authority Key Identifier:
                keyid:FE:AA:AC:DC:EA:12:02:AB:4E:4D:D5:BE:CC:48:75:9C:00:40:D1:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5n4XHyaVagitqiqUYFK1sj3DJH1keSd6y1RnnxCp9V1a/0/FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5n4XHyaVagitqiqUYFK1sj3DJH1keSd6y1RnnxCp9V1a/0/3138392e31342e302e302f31382d3234203d3e203232363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0a:e5:9f:76:b7:0a:be:e3:b7:49:54:7a:fb:5e:0b:bd:cb:e1:
         12:29:4c:c6:d0:00:a0:81:4d:0d:93:96:4b:27:a5:fb:40:95:
         38:27:08:a4:76:f3:65:b9:4f:37:97:79:79:c8:90:04:bf:34:
         e9:b7:07:51:67:bc:f9:d4:5e:d5:9b:28:00:dd:1f:38:c4:e6:
         27:47:19:7d:66:e2:73:35:6e:45:a9:a9:b1:c9:a1:03:79:2d:
         84:34:a0:5c:8d:ae:48:40:cd:0f:fe:7b:78:a9:73:12:0d:e8:
         f0:46:5e:a1:93:a6:1d:41:9a:30:a1:d5:f7:75:d3:b7:64:e3:
         c3:16:b3:c3:d4:95:67:73:8f:ae:fb:6e:e3:5e:af:e8:43:0f:
         04:6a:4d:6d:78:c7:e6:d2:9e:86:e1:de:75:4c:0e:36:5a:c3:
         5b:03:b1:46:e5:df:4b:93:28:66:47:56:64:bc:68:09:d3:e3:
         0b:58:19:d4:56:76:ef:0a:80:32:05:79:d5:eb:46:e9:fc:8a:
         a4:3f:b1:aa:17:98:c2:f9:a3:4f:7b:21:91:aa:f7:bf:01:d6:
         0d:fe:8e:2e:84:f1:35:19:d1:62:90:b2:fe:e8:82:26:1f:fb:
         7f:ff:39:c2:02:3e:05:2e:5a:cb:00:4d:a5:58:e7:c8:85:01:
         a1:f8:c9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----