Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8rUZdV47RdQzCTaaGAKpnBdpQoQsJFdydhhqgU4CkoMX/0/3137372e3232322e3137362e302f32302d3234203d3e20323633333930.roa
File:                     3137372e3232322e3137362e302f32302d3234203d3e20323633333930.roa (raw, json)
Hash identifier:          XFLueo5FKigIdU8rhoLnhvvw/WJHz/32wB8ptJg0CrQ=
Subject key identifier:   79:25:B6:0A:9D:CE:D6:77:5A:67:6D:A0:96:2D:17:E1:ED:CA:34:FE
Certificate issuer:       /CN=49CF38E1A116647E610408E31A3BE3362B0958DE
Certificate serial:       2240656C37844BFA2080CAC54DF70464EEA1A186
Authority key identifier: 49:CF:38:E1:A1:16:64:7E:61:04:08:E3:1A:3B:E3:36:2B:09:58:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49CF38E1A116647E610408E31A3BE3362B0958DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8rUZdV47RdQzCTaaGAKpnBdpQoQsJFdydhhqgU4CkoMX/0/3137372e3232322e3137362e302f32302d3234203d3e20323633333930.roa
Signing time:             Thu 19 May 2022 16:00:00 +0000
ROA not before:           Thu 19 May 2022 15:55:00 +0000
ROA not after:            Thu 18 May 2023 16:00:00 +0000
asID:                     263390
IP address blocks:        177.222.176.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:40:65:6c:37:84:4b:fa:20:80:ca:c5:4d:f7:04:64:ee:a1:a1:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49CF38E1A116647E610408E31A3BE3362B0958DE
        Validity
            Not Before: May 19 15:55:00 2022 GMT
            Not After : May 18 16:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ef:c9:4c:06:90:c0:5a:cc:3d:51:71:0c:49:
                    65:1a:b0:51:df:9d:b9:c4:35:b2:7c:18:2a:15:5b:
                    44:9a:2b:ed:e4:0b:a4:e6:82:f2:4b:15:aa:43:fb:
                    ec:82:5d:90:1f:2b:28:a9:29:2e:bc:d1:ea:f6:bd:
                    1d:ab:db:f7:21:5c:99:f3:f7:8b:68:0f:e1:17:02:
                    40:74:b3:1d:dd:ab:05:e9:99:52:e1:49:f2:1f:45:
                    50:44:07:6a:25:45:b0:2e:06:ea:ae:82:a1:e3:3e:
                    13:a6:7a:9e:6c:c3:11:39:26:2d:71:98:69:06:75:
                    df:93:26:11:aa:7a:89:9a:04:c8:d8:83:90:69:8d:
                    9e:2a:20:fc:dc:43:56:97:65:54:15:fb:14:95:32:
                    92:d1:54:4d:05:53:ba:5d:6c:c4:51:71:6d:a3:76:
                    56:32:d4:d1:d7:8e:b3:d2:c6:73:de:aa:aa:c8:b7:
                    a4:3e:e4:5a:e6:5a:55:e3:7d:41:f1:f1:09:c8:b7:
                    17:cb:bb:7f:9c:91:23:b8:79:ea:84:90:04:43:7d:
                    bd:b9:94:39:a0:06:d2:10:f6:40:6b:55:46:e6:b4:
                    52:e0:da:c8:d4:f5:3d:fe:fb:60:90:89:16:4d:5a:
                    f9:a1:4f:d3:e3:c9:a7:16:09:37:41:b6:1e:c0:35:
                    54:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:25:B6:0A:9D:CE:D6:77:5A:67:6D:A0:96:2D:17:E1:ED:CA:34:FE
            X509v3 Authority Key Identifier:
                keyid:49:CF:38:E1:A1:16:64:7E:61:04:08:E3:1A:3B:E3:36:2B:09:58:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8rUZdV47RdQzCTaaGAKpnBdpQoQsJFdydhhqgU4CkoMX/0/49CF38E1A116647E610408E31A3BE3362B0958DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49CF38E1A116647E610408E31A3BE3362B0958DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8rUZdV47RdQzCTaaGAKpnBdpQoQsJFdydhhqgU4CkoMX/0/3137372e3232322e3137362e302f32302d3234203d3e20323633333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         70:12:77:35:fd:14:bf:fa:f7:bd:3e:c9:6a:75:11:48:10:8c:
         46:2e:bc:0a:4a:ac:f1:70:91:ab:01:cc:90:4c:c1:44:59:3f:
         79:65:cd:38:64:ba:34:e1:95:de:cb:71:4a:05:31:10:41:76:
         c8:12:0e:3e:fc:e1:5c:31:6a:f5:ce:56:7a:b9:40:37:4e:5f:
         3b:53:3e:1e:80:ca:a1:50:06:da:64:1e:66:70:bc:56:3b:f5:
         dc:a0:ae:6b:9e:17:31:f8:f6:29:45:74:15:2f:1e:7c:63:45:
         a1:1f:66:4a:ac:ef:aa:2f:0a:39:57:35:38:8c:7c:45:b8:ea:
         f9:26:87:6e:99:cc:19:2f:c0:10:a8:7e:c1:2d:28:39:f1:4e:
         c1:c1:bc:cb:ec:04:f7:04:ed:3d:ba:2c:27:e6:f3:c0:e1:90:
         93:9e:f8:5f:e1:c3:56:3d:53:cf:4a:a8:ad:91:6d:83:bb:65:
         0b:07:c0:68:c9:73:5d:8f:65:a2:e6:a2:6d:49:b7:e4:80:e6:
         83:67:f9:f4:43:eb:da:4a:a1:62:21:fd:a0:bd:f3:f6:15:1f:
         37:b1:bf:bd:3d:c0:6b:bd:8b:20:e2:6d:d3:ef:96:e8:11:88:
         9d:f4:2c:51:2b:9f:c5:c9:03:b6:a2:f1:e3:c4:6d:ca:3a:0e:
         1a:38:e9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----