Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3137372e3139312e302e302f31362d3234203d3e203136373335.roa
File:                     3137372e3139312e302e302f31362d3234203d3e203136373335.roa (raw, json)
Hash identifier:          QME4HAbsXbDMqjsateIv8ZOcnt8b3EMefU8MnohKhHU=
Subject key identifier:   5D:A6:5C:8F:21:F7:FE:62:4D:19:C7:D0:13:31:8B:D3:8C:EA:F9:DF
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       6696B66ED1CC4895754B86BB9D4AFCA23782386F
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3137372e3139312e302e302f31362d3234203d3e203136373335.roa
Signing time:             Sat 11 Dec 2021 18:24:19 +0000
ROA not before:           Sat 11 Dec 2021 18:19:19 +0000
ROA not after:            Sat 10 Dec 2022 18:24:19 +0000
asID:                     16735
IP address blocks:        177.191.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:96:b6:6e:d1:cc:48:95:75:4b:86:bb:9d:4a:fc:a2:37:82:38:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 18:19:19 2021 GMT
            Not After : Dec 10 18:24:19 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:66:8b:4a:23:3b:23:91:b4:a0:3d:4a:2e:cc:
                    cc:ef:1c:09:7f:cb:e3:81:b7:ae:2e:a4:0a:b4:ef:
                    86:43:cf:ca:93:bc:b5:61:6a:da:bd:a2:f8:5a:34:
                    9b:b5:0c:fb:08:7f:e5:13:42:2a:8b:ec:08:4a:37:
                    4d:c9:f8:ae:c8:2b:e9:4e:71:94:f9:06:46:43:81:
                    e5:18:22:88:02:06:62:e4:03:27:30:f1:e8:02:fa:
                    e7:12:b2:03:fb:42:93:9b:ca:64:e0:62:09:10:03:
                    76:f5:b5:88:e5:ef:1a:a7:7c:d8:a5:ee:c0:d8:26:
                    c5:60:2d:da:c7:08:ba:03:6d:56:7a:59:8a:f2:0d:
                    99:1f:da:d8:82:96:d5:ac:d9:ab:b4:59:18:f0:ba:
                    ec:87:70:97:15:66:dd:26:5e:f9:4f:c0:8b:5b:2e:
                    c7:b5:54:1c:bc:a1:c4:1a:c5:dd:06:58:2c:00:db:
                    a5:b1:15:61:5b:ca:58:8f:63:96:b1:d9:8e:e7:d5:
                    26:bd:29:b0:d3:c5:88:b4:8f:4e:9e:2a:a5:1b:b9:
                    1c:6f:0b:25:d1:48:1b:c9:24:35:03:90:3f:92:13:
                    85:2e:da:32:88:a3:b1:eb:1a:24:a8:b0:60:e7:92:
                    6e:17:fe:a5:4c:86:b9:60:1f:60:de:94:c3:e6:7f:
                    7c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A6:5C:8F:21:F7:FE:62:4D:19:C7:D0:13:31:8B:D3:8C:EA:F9:DF
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3137372e3139312e302e302f31362d3234203d3e203136373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.191.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         68:1a:5e:48:a9:ef:a3:68:3e:45:5c:6e:80:ed:28:7a:45:f0:
         8a:7b:8a:e8:80:56:9b:90:74:fa:28:6b:48:2a:6f:4d:94:6d:
         23:1d:9b:6b:19:b3:e3:9e:c6:15:48:c8:5f:64:34:cb:56:7a:
         20:c4:1b:b0:15:f1:83:c6:43:66:4e:df:81:d9:1a:68:4c:8b:
         62:97:a5:7e:ee:ff:84:d3:3e:8e:4c:d3:2c:79:79:a3:4c:94:
         c7:bc:6b:38:ef:eb:c1:2b:0d:bc:01:a1:3b:77:55:69:25:d9:
         8a:e8:05:8d:db:9f:e2:44:86:d1:2a:b2:91:80:1d:23:42:df:
         38:ac:61:8a:a8:a0:3a:23:f8:c3:98:e8:47:16:96:84:c8:0c:
         e1:78:80:f3:22:23:8c:15:20:a6:59:35:62:29:12:75:c0:09:
         19:8c:11:11:29:83:79:79:34:30:f1:82:49:17:e4:5e:d8:23:
         fd:fc:a5:da:ce:3a:80:30:5d:a6:22:23:4b:06:8f:80:f2:23:
         4e:fd:9d:f5:9f:04:94:cd:81:dc:6a:d6:22:fa:a0:ba:70:96:
         ca:33:07:07:df:cc:01:7e:20:04:33:62:1e:76:51:d4:76:75:
         08:19:f7:ef:fe:f3:41:b2:b1:19:b8:2e:c1:5a:bb:68:3a:2e:
         60:83:65:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----