Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3230302e3137302e3132382e302f31382d3234203d3e203136373335.roa
File:                     3230302e3137302e3132382e302f31382d3234203d3e203136373335.roa (raw, json)
Hash identifier:          85y2ffB1izH/6khOCBSlvWk1/h4A/5MClfNqcIqabbQ=
Subject key identifier:   78:B5:F7:63:7A:4E:5E:9A:E5:DD:FE:CA:DF:4F:67:00:26:83:5C:1F
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       1583A92312D45CE82F154E76FDDECB8CE5E50377
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3230302e3137302e3132382e302f31382d3234203d3e203136373335.roa
Signing time:             Sat 11 Dec 2021 18:11:43 +0000
ROA not before:           Sat 11 Dec 2021 18:06:43 +0000
ROA not after:            Sat 10 Dec 2022 18:11:43 +0000
asID:                     16735
IP address blocks:        200.170.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:83:a9:23:12:d4:5c:e8:2f:15:4e:76:fd:de:cb:8c:e5:e5:03:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 18:06:43 2021 GMT
            Not After : Dec 10 18:11:43 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3b:14:94:00:66:19:af:39:1f:5f:e2:c6:56:
                    92:94:a0:05:32:c2:df:b6:9a:8a:bc:37:7d:f5:25:
                    06:99:a6:ee:3f:ad:ec:f2:8a:c9:c2:4b:ac:46:70:
                    39:06:c6:9c:b1:96:11:55:db:95:08:a5:cc:40:25:
                    65:09:20:5a:84:ed:9f:7b:26:cc:6a:28:e6:1f:b8:
                    8b:12:7c:76:22:0a:d8:18:ea:37:71:e3:61:7c:45:
                    a2:60:29:c6:c8:c7:7b:00:0b:d2:28:c5:0c:c7:19:
                    1d:25:cb:92:85:b9:b1:d5:03:32:be:64:1e:f0:da:
                    02:50:6e:1e:97:e3:d4:47:c1:be:1c:77:56:1e:c2:
                    b5:e4:ef:46:ed:52:04:20:63:38:71:eb:e5:e2:2e:
                    4b:b4:9b:47:8d:51:42:cd:39:2d:d6:8d:1d:9f:9d:
                    2f:72:d1:81:c6:64:8e:43:89:bb:e4:1c:c9:ae:58:
                    89:1d:de:39:bf:ee:14:df:1d:7b:6f:fa:ee:a6:54:
                    5c:33:7a:fe:9b:40:c6:5d:1d:8f:68:f7:5a:81:ef:
                    24:98:64:df:0b:a8:db:96:41:64:3d:8b:5e:e4:d5:
                    69:08:b5:06:d4:22:21:f1:98:61:f5:21:58:53:3a:
                    d2:af:7e:68:b5:06:70:5c:83:0c:bb:e6:fc:d7:50:
                    46:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B5:F7:63:7A:4E:5E:9A:E5:DD:FE:CA:DF:4F:67:00:26:83:5C:1F
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3230302e3137302e3132382e302f31382d3234203d3e203136373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.170.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         02:15:f9:e3:b3:a7:aa:c2:ff:d8:a5:ac:ba:5a:39:16:7f:41:
         7a:29:bf:90:e6:04:5c:31:92:75:1b:39:50:42:89:a6:ac:ae:
         90:40:a2:eb:a4:fa:46:5c:56:bd:99:17:ed:ca:a8:48:22:fc:
         25:b1:eb:89:7d:12:63:02:7e:6a:2e:a6:7f:11:1e:5b:cf:46:
         44:f0:36:56:44:6d:70:c5:2e:7e:2d:ad:52:40:1d:49:74:32:
         45:61:66:0e:84:6c:ba:55:80:60:12:33:7d:85:30:20:f2:cd:
         14:0b:06:b4:94:31:7e:1c:7c:3b:8f:02:02:0e:8b:5a:d3:69:
         fd:4a:77:12:bc:8b:44:d6:68:e4:1d:08:31:4c:7a:7c:3e:64:
         8c:03:d1:dd:6b:e9:f3:cf:f5:51:e9:0d:b5:73:f6:43:b5:97:
         4f:5d:10:4a:75:97:4b:aa:5b:37:20:4f:a1:97:f2:1b:7c:89:
         fa:01:c2:c2:ef:42:77:48:81:34:af:b1:7c:5a:ff:c5:be:17:
         eb:22:79:b6:5f:25:49:71:d6:30:fb:3e:a1:27:76:28:89:5f:
         3a:c1:e6:ec:d7:fc:67:64:d1:2c:84:4b:84:18:6d:fc:5f:de:
         14:91:8b:95:de:1c:74:d3:1a:d5:8d:45:06:41:96:3a:f1:09:
         36:ad:cd:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----