Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3138392e33372e302e302f31372d3234203d3e203533303036.roa
File:                     3138392e33372e302e302f31372d3234203d3e203533303036.roa (raw, json)
Hash identifier:          UEJt8UpHsVnZZ1Q2xbqBF0/RukJkAasrsc63q8lXrkY=
Subject key identifier:   43:AD:5B:EB:DC:50:EC:75:52:57:7E:1B:B7:11:10:B9:E9:E3:91:0A
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       31D718E80F2CD2728D434F4720DC0973FE4928EC
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3138392e33372e302e302f31372d3234203d3e203533303036.roa
Signing time:             Sat 11 Dec 2021 19:20:05 +0000
ROA not before:           Sat 11 Dec 2021 19:15:05 +0000
ROA not after:            Sat 10 Dec 2022 19:20:05 +0000
asID:                     53006
IP address blocks:        189.37.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d7:18:e8:0f:2c:d2:72:8d:43:4f:47:20:dc:09:73:fe:49:28:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 19:15:05 2021 GMT
            Not After : Dec 10 19:20:05 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fc:b5:45:51:a1:6f:44:dc:be:eb:6c:a3:2d:
                    59:43:8c:ec:6c:4a:ae:ea:72:cd:db:d9:95:a4:1a:
                    01:11:d1:f9:f4:2e:e4:bd:75:02:09:78:8d:22:2e:
                    93:d3:4e:0c:f2:50:a0:54:a5:77:9e:4e:44:bf:cd:
                    cd:5b:32:1e:42:a8:4d:e1:72:63:ec:fb:41:31:a1:
                    56:ad:a9:60:1e:73:54:6a:45:37:a2:e1:4a:01:85:
                    51:a3:ce:41:e5:3a:8c:c0:a9:67:98:a9:b0:6b:65:
                    9e:45:99:10:6c:8d:ab:d1:56:7f:2e:90:fc:c0:c3:
                    99:75:3a:cc:9f:86:0e:a0:a7:d9:d3:96:14:e4:21:
                    99:70:02:29:b6:48:d4:8d:9a:1b:b9:00:c1:99:04:
                    e9:a0:53:a0:c8:8c:50:d7:92:e5:1d:e0:01:ef:97:
                    37:cc:e5:37:7c:3f:d2:12:fc:43:6c:ef:18:d6:b7:
                    cc:2c:58:ac:15:08:95:18:5a:00:84:38:35:1d:d1:
                    7e:ff:a9:08:7d:b6:e2:41:8f:1d:33:da:83:f6:03:
                    96:b9:cd:6d:2e:90:d0:0c:8e:79:be:fd:8d:11:67:
                    21:f8:f6:4d:5e:8f:62:34:19:6d:37:13:e7:97:e5:
                    b8:de:75:cb:c5:7f:45:d2:25:1a:19:6d:31:9a:ec:
                    a0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:AD:5B:EB:DC:50:EC:75:52:57:7E:1B:B7:11:10:B9:E9:E3:91:0A
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3138392e33372e302e302f31372d3234203d3e203533303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.37.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         82:96:40:7d:c6:a7:21:0b:68:23:0a:56:96:bd:45:5d:89:0b:
         ec:3d:a8:d3:64:3c:7a:cf:6f:3f:d3:fa:d7:b1:b4:3c:67:03:
         b9:5f:67:bc:7f:b7:5e:a8:d3:80:bc:fc:96:05:00:48:38:b4:
         3e:2c:8b:87:07:d1:83:13:93:21:fa:b5:7a:83:11:55:51:23:
         fc:ef:db:c6:cb:40:c8:90:da:5d:c1:9b:85:7f:90:ab:0c:5d:
         e7:f7:81:fc:9a:09:9b:ac:87:a1:97:f3:7f:1b:6e:99:43:c0:
         50:79:0a:15:3d:85:a3:32:e8:5f:f0:18:94:e6:66:8c:af:ee:
         55:3f:19:2a:6c:f5:0c:81:68:7b:95:8f:45:c3:0e:5e:5e:b2:
         70:1e:ab:13:f7:e9:e2:43:00:43:3e:63:50:da:7a:d0:e6:ac:
         32:7f:e9:3b:0b:09:07:ad:ca:0c:76:79:60:16:b7:ec:dc:9b:
         7c:d1:b6:31:4d:9b:b8:29:1a:ce:31:54:45:64:63:49:68:b0:
         56:22:a8:cf:06:c5:d4:89:be:c5:ab:52:ca:aa:77:6c:3d:be:
         f3:16:a6:b2:7c:9c:13:d7:4d:b5:ad:01:11:5c:49:a1:74:bb:
         39:e4:b9:33:c4:70:14:8a:5e:e2:2f:ac:76:06:64:8c:bd:80:
         63:e7:4a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----