Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3230302e3233332e3132382e302f31382d3234203d3e203533303036.roa
File:                     3230302e3233332e3132382e302f31382d3234203d3e203533303036.roa (raw, json)
Hash identifier:          OCCw1F7HVqT0WcTL7wDGl2a8E/QVbRkx3B874TkCtlY=
Subject key identifier:   87:73:2F:AE:E5:02:06:C5:D8:A4:BF:2F:8A:F3:A5:20:2A:F4:CB:FC
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       1E843E2D24D3BC41B5CAE704DF8CFBE4C570D186
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3230302e3233332e3132382e302f31382d3234203d3e203533303036.roa
Signing time:             Sat 11 Dec 2021 18:13:45 +0000
ROA not before:           Sat 11 Dec 2021 18:08:45 +0000
ROA not after:            Sat 10 Dec 2022 18:13:45 +0000
asID:                     53006
IP address blocks:        200.233.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:84:3e:2d:24:d3:bc:41:b5:ca:e7:04:df:8c:fb:e4:c5:70:d1:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 18:08:45 2021 GMT
            Not After : Dec 10 18:13:45 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d4:d1:5b:3e:b0:1d:73:8e:b6:f2:3e:d1:87:
                    4f:f6:9d:f7:3b:3d:05:35:e2:58:74:10:09:7a:ea:
                    6e:e9:8a:07:10:46:ac:d4:29:e6:e6:49:a7:68:19:
                    69:8a:9f:00:e9:96:5c:2a:72:ee:88:63:45:87:64:
                    ff:4e:c4:81:da:d4:20:76:27:61:5e:4c:cd:bb:0e:
                    8f:63:2a:4b:cb:f4:ae:3d:38:13:cd:27:97:69:cb:
                    2f:3b:ac:c1:ec:2b:29:03:19:3e:9f:fb:28:69:c4:
                    3d:ef:45:98:fa:8c:22:9d:81:b5:ff:41:30:89:59:
                    18:5e:ed:a4:f3:e9:75:cf:72:2d:b8:0f:81:5a:85:
                    c7:55:35:ce:a8:28:e7:fc:a5:12:b3:af:13:07:c5:
                    da:a6:04:b0:42:97:3d:aa:02:96:c8:6b:1e:6f:73:
                    9d:6d:0c:15:a1:9b:f5:f2:91:e5:7a:e1:7d:63:f6:
                    29:e1:54:c0:3a:c7:ef:70:07:a4:4f:76:3d:ad:dd:
                    4e:c2:e7:6b:62:69:81:20:af:36:a8:0a:16:4b:3d:
                    d3:f8:55:17:2f:e7:4d:b4:ed:93:23:dd:c3:19:ec:
                    be:ed:55:47:85:45:9c:f5:16:46:16:c2:e7:8a:24:
                    5d:de:3c:db:8a:ec:c5:7c:b0:10:96:08:e0:6c:d3:
                    cc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:73:2F:AE:E5:02:06:C5:D8:A4:BF:2F:8A:F3:A5:20:2A:F4:CB:FC
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3230302e3233332e3132382e302f31382d3234203d3e203533303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         bc:35:b3:45:32:4e:6b:01:a9:43:0f:79:25:7f:0d:78:dc:95:
         bc:ea:1d:32:3b:bd:c7:b8:1a:af:47:f0:12:9e:66:9c:3f:a0:
         fe:5c:b6:59:b9:b7:01:09:7c:b7:bb:c6:22:c0:9c:39:ea:ee:
         95:82:83:2a:d9:c5:38:0a:5f:5f:63:93:98:31:1d:23:4a:74:
         71:ee:f0:88:ca:cb:c2:9d:d1:79:c4:3a:80:e1:5a:96:03:e3:
         6e:d0:1f:60:9c:19:03:ba:c5:19:af:32:82:15:4c:e6:b8:97:
         e3:a8:60:de:54:7c:7d:d6:a5:78:cf:87:f1:81:e8:72:f4:23:
         29:c7:9f:e5:7b:99:12:09:46:1e:d6:a4:2f:14:61:1e:48:f1:
         20:de:a4:a3:1c:38:da:6f:c1:5f:b0:91:d8:70:00:8f:6e:ec:
         dd:da:90:b0:90:55:14:6e:06:2e:52:d5:37:d7:42:03:ab:10:
         24:73:d7:2e:8c:3c:78:38:5a:df:a2:15:2c:e6:39:e2:36:08:
         49:2c:87:62:e0:d9:c0:9a:4a:07:12:65:7d:3e:5a:fc:c6:47:
         ed:f5:23:96:87:c6:e0:b3:cd:57:3a:87:90:33:1f:42:d2:d5:
         72:c8:df:81:91:3a:4c:bc:eb:d8:13:87:fb:38:18:60:88:f9:
         03:56:55:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----