Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3139312e35342e302e302f31352d3234203d3e203533303036.roa
File:                     3139312e35342e302e302f31352d3234203d3e203533303036.roa (raw, json)
Hash identifier:          zmiFJJ8N56C5pdqbTMbfessa8Yq0/5YT/CrNpK7FpHc=
Subject key identifier:   81:CE:EE:65:A3:07:E8:C2:FD:C6:CE:EB:9B:74:2A:A3:5E:93:66:F6
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       2CF48D0AE8FC5C143487DFF7D2389D5839052C71
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3139312e35342e302e302f31352d3234203d3e203533303036.roa
Signing time:             Sat 11 Dec 2021 18:25:35 +0000
ROA not before:           Sat 11 Dec 2021 18:20:35 +0000
ROA not after:            Sat 10 Dec 2022 18:25:35 +0000
asID:                     53006
IP address blocks:        191.54.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:f4:8d:0a:e8:fc:5c:14:34:87:df:f7:d2:38:9d:58:39:05:2c:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 18:20:35 2021 GMT
            Not After : Dec 10 18:25:35 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:02:3e:06:a3:34:cd:5b:88:31:13:51:ad:27:
                    d7:1e:b6:c1:c7:22:2f:28:c5:b4:ef:dc:83:7a:5d:
                    31:9d:86:ca:c5:fd:ac:be:db:df:70:35:ba:b1:b6:
                    34:1f:db:04:a9:d3:96:0c:10:97:e0:da:a2:0f:38:
                    b4:fa:c5:15:86:cd:86:4c:76:f8:5b:bf:b1:ce:76:
                    2d:a8:82:0f:20:d2:4f:60:b5:da:40:10:b0:ba:b5:
                    dc:73:60:13:f1:7d:30:59:27:d1:20:18:79:e7:f3:
                    6d:d5:e4:4e:a3:8e:ee:a4:60:91:67:01:02:80:6f:
                    19:3b:27:66:a0:35:dd:1a:72:fe:83:94:78:62:3f:
                    b5:38:d6:db:6c:b4:ac:4b:fa:9f:7d:ec:df:a1:a7:
                    5b:ab:06:ea:20:54:ed:d4:0d:0c:8c:39:c4:af:b8:
                    c0:c1:bb:53:25:6c:77:a1:c4:74:40:f2:a9:57:71:
                    4a:f4:46:c7:48:09:4b:61:63:73:8e:f9:c8:a2:e6:
                    c0:21:08:4a:05:ea:25:4a:ba:84:08:e8:a6:e8:5e:
                    4d:be:b1:10:1f:4f:0f:13:d9:c3:9d:7c:de:eb:ce:
                    a9:11:02:4d:59:16:f8:ab:4b:22:12:8a:9c:30:b4:
                    a3:be:1a:bf:14:bc:74:d3:77:38:70:12:01:68:91:
                    2b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:CE:EE:65:A3:07:E8:C2:FD:C6:CE:EB:9B:74:2A:A3:5E:93:66:F6
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3139312e35342e302e302f31352d3234203d3e203533303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.54.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         37:e6:d1:23:d9:ae:5b:ea:bc:41:e1:0a:14:24:66:82:6a:51:
         69:c8:10:37:96:b7:95:b8:5a:56:18:2d:2b:17:f6:af:34:83:
         6b:c2:5f:a7:a6:11:be:b4:f1:3a:58:4d:64:4e:97:c4:60:f0:
         06:14:ae:e4:c0:28:5f:fd:53:4c:9c:f5:40:78:8f:d6:2a:89:
         76:19:07:32:90:8a:d3:35:9d:6d:7f:a8:46:d5:de:0f:e3:3a:
         4c:75:ac:16:89:f4:32:0a:94:b6:21:ab:1d:8f:c8:fe:55:1b:
         f8:f1:5d:08:76:24:4e:d8:62:01:85:60:91:17:76:e5:06:b6:
         24:f6:16:33:da:63:d8:64:2a:a8:69:3e:6e:65:6c:b8:1d:7d:
         29:3e:ff:4a:81:9c:04:cb:24:ea:7f:9b:06:21:cb:ef:4a:6e:
         ef:b6:e0:94:9c:d9:8f:a0:e7:c5:32:5d:52:9d:9a:64:ed:9c:
         bf:f8:86:1a:fe:e8:a8:06:8e:d9:84:6c:b6:4f:7f:05:a6:2e:
         1b:18:b9:b0:d5:b4:81:0f:16:de:bc:7b:c8:8f:89:c4:ae:d1:
         fd:00:74:5e:17:00:94:ec:88:d6:8a:19:b1:c6:68:2c:fc:35:
         2d:d6:99:28:3d:e5:24:ef:e2:45:47:21:32:13:5c:cb:ea:0f:
         b2:16:e3:1b
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIULPSNCuj8XBQ0h9/30jidWDkFLHEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ3RDEwN0VGRDA1MzJCQzRFMjNFNjY3QUJBMTE4ODE3
QTY2MzY1NDAeFw0yMTEyMTExODIwMzVaFw0yMjEyMTAxODI1MzVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDYwMjNFMDZBMzM0Q0Q1Qjg4
MzExMzUxQUQyN0Q3MUVCNkMxQzcyMjJGMjhDNUI0RUZEQzgzN0E1RDMxOUQ4NkNB
QzVGREFDQkVEQkRGNzAzNUJBQjFCNjM0MUZEQjA0QTlEMzk2MEMxMDk3RTBEQUEy
MEYzOEI0RkFDNTE1ODZDRDg2NEM3NkY4NUJCRkIxQ0U3NjJEQTg4MjBGMjBEMjRG
NjBCNURBNDAxMEIwQkFCNURDNzM2MDEzRjE3RDMwNTkyN0QxMjAxODc5RTdGMzZE
RDVFNDRFQTM4RUVFQTQ2MDkxNjcwMTAyODA2RjE5M0IyNzY2QTAzNUREMUE3MkZF
ODM5NDc4NjIzRkI1MzhENkRCNkNCNEFDNEJGQTlGN0RFQ0RGQTFBNzVCQUIwNkVB
MjA1NEVERDQwRDBDOEMzOUM0QUZCOEMwQzFCQjUzMjU2Qzc3QTFDNDc0NDBGMkE5
NTc3MTRBRjQ0NkM3NDgwOTRCNjE2MzczOEVGOUM4QTJFNkMwMjEwODRBMDVFQTI1
NEFCQTg0MDhFOEE2RTg1RTREQkVCMTEwMUY0RjBGMTNEOUMzOUQ3Q0RFRUJDRUE5
MTEwMjRENTkxNkY4QUI0QjIyMTI4QTlDMzBCNEEzQkUxQUJGMTRCQzc0RDM3NzM4
NzAxMjAxNjg5MTJCOTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1gI+BqM0zVuIMRNRrSfXHrbBxyIvKMW079yDel0xnYbKxf2svtvf
cDW6sbY0H9sEqdOWDBCX4NqiDzi0+sUVhs2GTHb4W7+xznYtqIIPINJPYLXaQBCw
urXcc2AT8X0wWSfRIBh55/Nt1eROo47upGCRZwECgG8ZOydmoDXdGnL+g5R4Yj+1
ONbbbLSsS/qffezfoadbqwbqIFTt1A0MjDnEr7jAwbtTJWx3ocR0QPKpV3FK9EbH
SAlLYWNzjvnIoubAIQhKBeolSrqECOim6F5NvrEQH08PE9nDnXze686pEQJNWRb4
q0siEoqcMLSjvhq/FLx003c4cBIBaJErlwIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FIHO7mWjB+jC/cbO65t0KqNek2b2MB8GA1UdIwQYMBaAFLR9EH79BTK8TiPmZ6uh
GIF6ZjZUMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZkRFFiNmVwaDlUV3Rn
S3dXRGdrTVcxeFhZRkNHc01Xd3hpYnp0R3pxbUY4LzAvQjQ3RDEwN0VGRDA1MzJC
QzRFMjNFNjY3QUJBMTE4ODE3QTY2MzY1NC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9CNDdEMTA3RUZEMDUzMkJDNEUyM0U2NjdBQkExMTg4MTdBNjYz
NjU0LmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GZERRYjZlcGg5VFd0Z0t3V0Rn
a01XMXhYWUZDR3NNV3d4aWJ6dEd6cW1GOC8wLzMxMzkzMTJlMzUzNDJlMzAyZTMw
MmYzMTM1MmQzMjM0MjAzZDNlMjAzNTMzMzAzMDM2LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBvzYwDQYJ
KoZIhvcNAQELBQADggEBADfm0SPZrlvqvEHhChQkZoJqUWnIEDeWt5W4WlYYLSsX
9q80g2vCX6emEb608TpYTWROl8Rg8AYUruTAKF/9U0yc9UB4j9YqiXYZBzKQitM1
nW1/qEbV3g/jOkx1rBaJ9DIKlLYhqx2PyP5VG/jxXQh2JE7YYgGFYJEXduUGtiT2
FjPaY9hkKqhpPm5lbLgdfSk+/0qBnATLJOp/mwYhy+9Kbu+24JSc2Y+g58UyXVKd
mmTtnL/4hhr+6KgGjtmEbLZPfwWmLhsYubDVtIEPFt68e8iPicSu0f0AdF4XAJTs
iNaKGbHGaCz8NS3WmSg95STv4kVHITITXMvqD7IW4xs=
-----END CERTIFICATE-----