Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3230312e34382e3132382e302f31372d3234203d3e203136373335.roa
File:                     3230312e34382e3132382e302f31372d3234203d3e203136373335.roa (raw, json)
Hash identifier:          G2i+IBWS8w1IRptuw5cUGaYTYvyMSIptGYENP9uyoNU=
Subject key identifier:   2D:8E:77:2B:59:4B:67:72:B6:EC:56:11:AC:39:EE:7C:77:A7:32:10
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       2B34659E995FF7F1EE9388258F2C211BCB48E6CA
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3230312e34382e3132382e302f31372d3234203d3e203136373335.roa
Signing time:             Sat 11 Dec 2021 18:15:52 +0000
ROA not before:           Sat 11 Dec 2021 18:10:52 +0000
ROA not after:            Sat 10 Dec 2022 18:15:52 +0000
asID:                     16735
IP address blocks:        201.48.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:34:65:9e:99:5f:f7:f1:ee:93:88:25:8f:2c:21:1b:cb:48:e6:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 18:10:52 2021 GMT
            Not After : Dec 10 18:15:52 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:32:b7:79:ec:04:f6:20:9c:af:1f:db:c2:c4:
                    d5:ca:c6:bb:40:e3:a5:6a:62:d3:9b:1f:71:70:4e:
                    c2:3a:e6:f6:ac:d6:da:30:64:a5:81:15:44:c0:25:
                    31:a8:1b:6d:3b:c6:d1:0e:cc:e9:a1:62:24:fa:7c:
                    a0:6e:3d:bf:a2:7f:53:8d:46:2b:9c:87:c3:99:65:
                    a1:f7:75:fa:24:4b:77:fd:49:f3:d1:b4:09:37:90:
                    bc:0f:d3:f4:b2:d0:c4:34:d2:a5:e6:79:9a:aa:9d:
                    45:24:c1:b0:38:c0:e3:91:94:57:69:2c:49:7a:27:
                    16:d4:50:a5:c8:5c:bb:b3:ae:0d:ab:d2:5e:58:8d:
                    35:15:e6:05:dd:cc:5b:34:5a:a0:f3:b5:6b:6b:f2:
                    c0:49:dc:7b:7b:9d:f9:5b:8e:4c:c1:63:c4:34:ae:
                    3b:8e:47:a4:f9:76:89:6d:22:f2:fd:dd:af:f0:89:
                    84:41:04:4b:3d:1b:16:7b:64:86:e7:6a:21:72:36:
                    e8:19:b5:9d:de:57:54:1b:e0:f2:8e:d2:ed:08:e4:
                    53:c2:48:cd:fa:d0:52:23:91:42:60:3a:7c:5d:4a:
                    a2:34:88:45:9a:6e:0f:01:aa:4d:37:f4:27:d4:a2:
                    a7:32:ab:69:04:66:dd:1c:81:9c:f3:ea:5d:e9:b8:
                    22:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:8E:77:2B:59:4B:67:72:B6:EC:56:11:AC:39:EE:7C:77:A7:32:10
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3230312e34382e3132382e302f31372d3234203d3e203136373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.48.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         0a:1e:c5:46:12:e0:6c:bf:31:a0:20:36:04:02:36:10:77:f9:
         15:b3:91:40:a3:4f:17:45:56:4c:dc:61:56:d7:fc:02:b1:6b:
         c8:87:83:b9:0e:71:28:cb:b1:6a:6c:49:f5:d7:08:cc:62:16:
         01:c3:50:34:fd:52:d6:90:0e:9c:d8:6c:f8:cd:9b:39:8e:cd:
         bf:29:7f:9f:e6:a7:f8:77:74:7a:ef:6b:d0:7f:9e:b6:40:d6:
         36:af:d7:9a:97:7e:4c:37:48:97:b0:d0:bb:62:13:e0:71:0f:
         03:aa:a2:e6:2f:46:9c:11:bb:7d:d6:bd:bd:72:13:a2:b2:37:
         fe:9a:97:07:61:f7:8a:e4:f2:91:53:d5:78:d6:9c:72:b7:21:
         f4:64:ec:f5:8a:d2:1b:79:68:de:3b:d1:0d:b9:dd:27:aa:e2:
         5b:82:58:4f:77:ba:0e:e6:59:2c:38:e4:a2:20:6e:82:b4:e6:
         2c:02:df:40:e6:03:c2:8e:c9:27:e7:56:3a:ae:94:00:87:6b:
         b4:33:44:f8:55:08:e6:a4:f4:6e:a7:3b:14:df:4a:02:c6:79:
         19:26:b3:23:04:23:74:05:43:fb:76:a6:08:38:0b:da:72:eb:
         57:77:27:87:de:4f:2b:41:b3:01:3e:54:27:fe:24:ec:2f:be:
         cf:b7:37:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----