Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/323030313a313239313a3a2f33322d3332203d3e203533303036.roa
File:                     323030313a313239313a3a2f33322d3332203d3e203533303036.roa (raw, json)
Hash identifier:          xPAkaWJ3kaP3pYXeF/PlV7dRPNOG6DAeREkTsWxtlfs=
Subject key identifier:   95:ED:84:9F:72:DE:20:2F:32:3E:3F:3C:39:39:A3:4A:40:63:B5:CD
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       23078179BB898EDC89B441857B72E2F1AE18894E
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/323030313a313239313a3a2f33322d3332203d3e203533303036.roa
Signing time:             Sat 11 Dec 2021 18:08:41 +0000
ROA not before:           Sat 11 Dec 2021 18:03:41 +0000
ROA not after:            Sat 10 Dec 2022 18:08:41 +0000
asID:                     53006
IP address blocks:        2001:1291::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:07:81:79:bb:89:8e:dc:89:b4:41:85:7b:72:e2:f1:ae:18:89:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 18:03:41 2021 GMT
            Not After : Dec 10 18:08:41 2022 GMT
        Subject: CN=3082010A0282010100B7DE11345026821B730C8BAB942A1E77A4939256B03A279B8147B680364411F4E497A6CEB7C9E2506A3F6548D523073445B8E468468D6C63DD5B7B3D2D0E252BB540A13A249F70930B159A55F2550BE034ADA3E1C99DD54FC75E6513244A456C43115510247F44CE5AE915ECFD04A82A93FBE4E9B4B01F8D532B7F5C8FE800C1D9459D14A0C3FEBE372B6200F4BF140A7D8F1B0C1C03D3193CE66916FC5240660E70A8FC4F25574C776E727A5C2466268A4764D7D511D721A379EECAE01827CB08E8B4B9BA28CAC290E66CE3C529BF0CAD76B04FAD001C0E3217004DD2A4B98BFC7096E5F46524EFD0D57262CB624288164DF5155AD41C766CBD0A91932D34590203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:de:11:34:50:26:82:1b:73:0c:8b:ab:94:2a:
                    1e:77:a4:93:92:56:b0:3a:27:9b:81:47:b6:80:36:
                    44:11:f4:e4:97:a6:ce:b7:c9:e2:50:6a:3f:65:48:
                    d5:23:07:34:45:b8:e4:68:46:8d:6c:63:dd:5b:7b:
                    3d:2d:0e:25:2b:b5:40:a1:3a:24:9f:70:93:0b:15:
                    9a:55:f2:55:0b:e0:34:ad:a3:e1:c9:9d:d5:4f:c7:
                    5e:65:13:24:4a:45:6c:43:11:55:10:24:7f:44:ce:
                    5a:e9:15:ec:fd:04:a8:2a:93:fb:e4:e9:b4:b0:1f:
                    8d:53:2b:7f:5c:8f:e8:00:c1:d9:45:9d:14:a0:c3:
                    fe:be:37:2b:62:00:f4:bf:14:0a:7d:8f:1b:0c:1c:
                    03:d3:19:3c:e6:69:16:fc:52:40:66:0e:70:a8:fc:
                    4f:25:57:4c:77:6e:72:7a:5c:24:66:26:8a:47:64:
                    d7:d5:11:d7:21:a3:79:ee:ca:e0:18:27:cb:08:e8:
                    b4:b9:ba:28:ca:c2:90:e6:6c:e3:c5:29:bf:0c:ad:
                    76:b0:4f:ad:00:1c:0e:32:17:00:4d:d2:a4:b9:8b:
                    fc:70:96:e5:f4:65:24:ef:d0:d5:72:62:cb:62:42:
                    88:16:4d:f5:15:5a:d4:1c:76:6c:bd:0a:91:93:2d:
                    34:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:ED:84:9F:72:DE:20:2F:32:3E:3F:3C:39:39:A3:4A:40:63:B5:CD
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/323030313a313239313a3a2f33322d3332203d3e203533303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1291::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:3f:cd:e1:21:da:30:5b:2b:68:92:e0:bb:73:ca:e4:55:09:
         0a:c6:7a:c3:32:fd:5d:5e:c4:89:26:f4:55:48:e0:7e:da:ae:
         8a:45:ac:c7:2d:fb:c1:93:3c:1c:2f:65:42:c9:66:1c:24:21:
         73:18:ce:d3:fd:9c:9b:14:4d:8f:69:d8:5f:7c:ed:0c:a7:ff:
         51:2a:08:ba:ff:25:e5:1d:a7:a3:f3:81:7e:24:41:d7:be:e4:
         04:49:b9:70:4d:22:a3:da:1a:b4:9a:d1:20:ff:a0:02:3a:63:
         e6:57:b0:5e:ee:4a:66:fb:74:50:58:f4:76:f8:91:0c:64:02:
         df:e3:30:c8:ba:39:6a:fa:72:3b:d6:25:c6:46:e7:78:d7:8c:
         8d:d7:85:5c:dd:d8:54:f2:70:30:94:9d:e3:d0:42:85:26:cd:
         43:df:03:6f:da:af:5a:17:34:a9:a9:24:25:63:b4:2d:48:aa:
         6e:20:8b:6d:be:71:31:0b:23:76:e1:5f:ec:2b:fb:88:d8:ef:
         f7:a1:bc:61:1a:2c:5d:a3:17:e3:cb:e8:37:93:2c:d9:ac:c5:
         79:2e:05:4e:91:7d:6c:68:86:31:fc:dd:6f:28:ff:6d:8b:5b:
         99:70:ba:48:5a:6e:64:b5:28:33:34:72:cc:2e:76:9d:78:9d:
         3c:27:ab:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----