Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ByKLqbvTtVTKwhaGPWwCQdyyjKtw8HzDPhAZrKws37DA/0/3138372e37332e3139322e302f32302d3234203d3e203533303534.roa
File:                     3138372e37332e3139322e302f32302d3234203d3e203533303534.roa (raw, json)
Hash identifier:          hrLMtjrLOy4tH3qPc4LiBhyXmNIkvT9Q2iHx+mf+ulw=
Subject key identifier:   ED:59:C8:09:47:7D:C6:2E:C5:6E:C2:D4:7A:92:E4:A1:5E:B4:CD:51
Certificate issuer:       /CN=633D7E82F439756EBE59F84532231EBA00A839CF
Certificate serial:       2DF7CF2324F1D9AC6FA254663D7C7CA14A9D7E85
Authority key identifier: 63:3D:7E:82:F4:39:75:6E:BE:59:F8:45:32:23:1E:BA:00:A8:39:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/633D7E82F439756EBE59F84532231EBA00A839CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ByKLqbvTtVTKwhaGPWwCQdyyjKtw8HzDPhAZrKws37DA/0/3138372e37332e3139322e302f32302d3234203d3e203533303534.roa
Signing time:             Sat 28 May 2022 12:54:01 +0000
ROA not before:           Sat 28 May 2022 12:49:01 +0000
ROA not after:            Sat 27 May 2023 12:54:01 +0000
asID:                     53054
IP address blocks:        187.73.192.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:f7:cf:23:24:f1:d9:ac:6f:a2:54:66:3d:7c:7c:a1:4a:9d:7e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633D7E82F439756EBE59F84532231EBA00A839CF
        Validity
            Not Before: May 28 12:49:01 2022 GMT
            Not After : May 27 12:54:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d2:97:cd:c7:2b:20:af:4b:38:70:f1:33:13:
                    b3:30:59:8e:91:7a:ec:49:a4:46:d5:49:f0:cc:fe:
                    0b:20:be:d6:51:ee:b2:58:67:a3:ba:16:fa:4e:b8:
                    c1:5c:56:82:80:57:3e:c4:37:9a:ed:a1:3e:b3:4d:
                    b4:93:ab:3f:9b:df:78:d7:8f:8a:e0:1f:b1:0e:59:
                    a5:dc:92:6b:88:a6:74:96:29:0e:cf:91:4c:33:0b:
                    6e:6d:58:3f:dc:6f:9a:3f:a0:44:c7:37:1a:fa:11:
                    4f:53:36:5b:27:ef:2f:61:ad:6f:b6:ea:5e:4c:fe:
                    f0:c4:2a:de:4a:2d:b1:41:26:33:3b:7b:42:8e:9f:
                    f9:59:dc:2e:c3:7e:36:d7:b1:83:32:97:a7:a6:79:
                    68:ed:6e:fc:11:c8:c3:39:0f:ef:2a:45:58:00:b5:
                    67:15:3d:6a:34:d2:f8:3e:1b:55:8a:ba:fe:0b:6f:
                    b5:66:9a:9b:5f:aa:65:7b:6d:8d:5d:30:ef:a5:ef:
                    63:15:11:1c:28:02:f6:16:c6:d5:11:58:9c:da:d8:
                    40:6b:fa:e3:20:38:10:73:f4:d3:f7:1e:72:5f:74:
                    a2:18:21:8b:84:2b:3d:94:1d:df:2b:9d:23:d5:12:
                    c3:a5:3b:47:e5:6c:35:3a:d7:0a:26:38:f4:a3:94:
                    a2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:59:C8:09:47:7D:C6:2E:C5:6E:C2:D4:7A:92:E4:A1:5E:B4:CD:51
            X509v3 Authority Key Identifier:
                keyid:63:3D:7E:82:F4:39:75:6E:BE:59:F8:45:32:23:1E:BA:00:A8:39:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ByKLqbvTtVTKwhaGPWwCQdyyjKtw8HzDPhAZrKws37DA/0/633D7E82F439756EBE59F84532231EBA00A839CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/633D7E82F439756EBE59F84532231EBA00A839CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByKLqbvTtVTKwhaGPWwCQdyyjKtw8HzDPhAZrKws37DA/0/3138372e37332e3139322e302f32302d3234203d3e203533303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3a:e1:6a:62:ad:aa:98:b7:84:b1:48:43:8d:1e:bf:df:5b:eb:
         ff:f3:df:06:b4:0e:a2:4c:df:4f:66:9d:0a:33:37:5d:bd:af:
         b1:ce:ee:4d:a7:20:37:c4:b4:d5:11:a2:ec:b0:4e:c2:02:d8:
         97:e5:7f:83:92:88:d7:f6:48:2e:31:fe:28:57:3d:ea:4f:14:
         ae:30:a4:34:b5:09:05:ba:bb:e0:5d:a0:07:14:63:cf:ad:f6:
         c2:e3:aa:0f:86:f1:71:52:87:7e:26:9f:03:3e:16:87:d9:fa:
         8a:3e:b2:7c:e3:c1:c8:60:17:10:c1:f9:95:58:9e:0d:b7:ce:
         1e:44:6b:64:35:07:72:6f:11:c2:28:2c:2b:30:de:d8:0a:95:
         94:9e:07:20:1e:ed:70:88:8f:12:f7:ed:ba:4c:8d:d1:b7:62:
         c7:e7:71:9e:45:0a:19:37:84:eb:10:f4:d9:ad:7f:0e:cc:8c:
         ca:de:81:97:40:a3:15:f3:be:ca:4c:c5:d7:18:06:7f:ec:37:
         e0:1f:ff:eb:0b:9a:b6:ef:bb:d9:d8:67:6b:f7:02:7f:d0:e0:
         8c:55:4c:0d:49:1f:53:b7:15:97:dd:7a:48:13:36:19:bf:7e:
         5b:08:74:0f:72:bc:89:95:18:aa:45:89:06:83:09:50:b7:34:
         d2:b6:58:11
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIULffPIyTx2axvolRmPXx8oUqdfoUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMzRDdFODJGNDM5NzU2RUJFNTlGODQ1MzIyMzFFQkEw
MEE4MzlDRjAeFw0yMjA1MjgxMjQ5MDFaFw0yMzA1MjcxMjU0MDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzZEMjk3Q0RDNzJCMjBBRjRC
Mzg3MEYxMzMxM0IzMzA1OThFOTE3QUVDNDlBNDQ2RDU0OUYwQ0NGRTBCMjBCRUQ2
NTFFRUIyNTg2N0EzQkExNkZBNEVCOEMxNUM1NjgyODA1NzNFQzQzNzlBRURBMTNF
QjM0REI0OTNBQjNGOUJERjc4RDc4RjhBRTAxRkIxMEU1OUE1REM5MjZCODhBNjc0
OTYyOTBFQ0Y5MTRDMzMwQjZFNkQ1ODNGREM2RjlBM0ZBMDQ0QzczNzFBRkExMTRG
NTMzNjVCMjdFRjJGNjFBRDZGQjZFQTVFNENGRUYwQzQyQURFNEEyREIxNDEyNjMz
M0I3QjQyOEU5RkY5NTlEQzJFQzM3RTM2RDdCMTgzMzI5N0E3QTY3OTY4RUQ2RUZD
MTFDOEMzMzkwRkVGMkE0NTU4MDBCNTY3MTUzRDZBMzREMkY4M0UxQjU1OEFCQUZF
MEI2RkI1NjY5QTlCNUZBQTY1N0I2RDhENUQzMEVGQTVFRjYzMTUxMTFDMjgwMkY2
MTZDNkQ1MTE1ODlDREFEODQwNkJGQUUzMjAzODEwNzNGNEQzRjcxRTcyNUY3NEEy
MTgyMThCODQyQjNEOTQxRERGMkI5RDIzRDUxMkMzQTUzQjQ3RTU2QzM1M0FENzBB
MjYzOEY0QTM5NEEyRkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxtKXzccrIK9LOHDxMxOzMFmOkXrsSaRG1UnwzP4LIL7WUe6yWGej
uhb6TrjBXFaCgFc+xDea7aE+s020k6s/m99414+K4B+xDlml3JJriKZ0likOz5FM
MwtubVg/3G+aP6BExzca+hFPUzZbJ+8vYa1vtupeTP7wxCreSi2xQSYzO3tCjp/5
Wdwuw34217GDMpenpnlo7W78EcjDOQ/vKkVYALVnFT1qNNL4PhtVirr+C2+1Zpqb
X6ple22NXTDvpe9jFREcKAL2FsbVEVic2thAa/rjIDgQc/TT9x5yX3SiGCGLhCs9
lB3fK50j1RLDpTtH5Ww1OtcKJjj0o5Si/QIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FO1ZyAlHfcYuxW7C1HqS5KFetM1RMB8GA1UdIwQYMBaAFGM9foL0OXVuvln4RTIj
HroAqDnPMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0J5S0xxYnZUdFZUS3do
YUdQV3dDUWR5eWpLdHc4SHpEUGhBWnJLd3MzN0RBLzAvNjMzRDdFODJGNDM5NzU2
RUJFNTlGODQ1MzIyMzFFQkEwMEE4MzlDRi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC82MzNEN0U4MkY0Mzk3NTZFQkU1OUY4NDUzMjIzMUVCQTAwQTgz
OUNGLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CeUtMcWJ2VHRWVEt3aGFHUFd3
Q1FkeXlqS3R3OEh6RFBoQVpyS3dzMzdEQS8wLzMxMzgzNzJlMzczMzJlMzEzOTMy
MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzUzMzMwMzUzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBLtJ
wDANBgkqhkiG9w0BAQsFAAOCAQEAOuFqYq2qmLeEsUhDjR6/31vr//PfBrQOokzf
T2adCjM3Xb2vsc7uTacgN8S01RGi7LBOwgLYl+V/g5KI1/ZILjH+KFc96k8UrjCk
NLUJBbq74F2gBxRjz632wuOqD4bxcVKHfiafAz4Wh9n6ij6yfOPByGAXEMH5lVie
DbfOHkRrZDUHcm8RwigsKzDe2AqVlJ4HIB7tcIiPEvftukyN0bdix+dxnkUKGTeE
6xD02a1/DsyMyt6Bl0CjFfO+ykzF1xgGf+w34B//6wuatu+72dhna/cCf9DgjFVM
DUkfU7cVl916SBM2Gb9+Wwh0D3K8iZUYqkWJBoMJULc00rZYEQ==
-----END CERTIFICATE-----