Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3230312e34392e39362e302f31392d3234203d3e203533303036.roa
File:                     3230312e34392e39362e302f31392d3234203d3e203533303036.roa (raw, json)
Hash identifier:          i8TSuMe7T64JWST0m2wiIt+U7EL273uqhBODAS7qQeU=
Subject key identifier:   B5:E6:46:72:BE:FA:C0:47:1E:AB:45:9C:CF:4D:2E:20:6B:97:80:08
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       34A474B1FDA3B89295A12D36922473EBEA402D60
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3230312e34392e39362e302f31392d3234203d3e203533303036.roa
Signing time:             Sat 11 Dec 2021 18:19:56 +0000
ROA not before:           Sat 11 Dec 2021 18:14:56 +0000
ROA not after:            Sat 10 Dec 2022 18:19:56 +0000
asID:                     53006
IP address blocks:        201.49.96.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a4:74:b1:fd:a3:b8:92:95:a1:2d:36:92:24:73:eb:ea:40:2d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 18:14:56 2021 GMT
            Not After : Dec 10 18:19:56 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8f:b0:a1:3b:e6:12:8c:5f:59:ab:7c:18:1f:
                    e1:17:31:63:82:07:07:d0:c5:68:91:8e:b9:6c:2a:
                    40:07:46:58:3f:1b:3b:98:fe:34:52:f5:ce:a5:80:
                    d7:d5:93:c9:68:3b:01:57:30:ca:41:96:71:79:51:
                    87:4d:ea:58:62:b1:89:da:20:2a:ec:10:3d:f9:4a:
                    40:fd:6f:dd:d2:cb:f6:af:53:6c:e8:a3:4b:8d:f2:
                    9a:5a:5f:0d:3a:be:62:38:66:b1:14:86:6d:a6:96:
                    e1:89:6d:07:4b:ca:7e:8f:04:0d:de:73:82:1e:fb:
                    45:b2:7c:35:a4:81:32:3b:8b:8f:20:90:ec:53:84:
                    3c:3e:2e:b6:df:77:8c:0a:6f:fa:45:0e:ee:e6:65:
                    66:7d:1f:9f:20:94:b1:c2:9b:a7:45:92:19:6c:bd:
                    00:89:18:99:dd:36:d4:17:6f:e9:0a:2f:eb:0c:a2:
                    3f:82:6a:45:5d:ce:f5:d9:e6:a7:30:23:f8:b4:19:
                    28:0c:9a:a3:e1:3d:b9:8e:d5:af:f0:e2:6e:83:4c:
                    ea:7f:14:59:68:66:9c:26:91:88:25:5c:8d:9d:02:
                    e2:64:f3:58:90:ce:5a:9f:35:c1:1b:5c:25:cf:36:
                    d6:aa:44:1d:84:f7:36:67:c8:b8:77:ef:93:3f:2e:
                    91:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E6:46:72:BE:FA:C0:47:1E:AB:45:9C:CF:4D:2E:20:6B:97:80:08
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3230312e34392e39362e302f31392d3234203d3e203533303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         06:c1:f7:de:7f:16:fa:35:7b:57:0a:1b:eb:a2:1d:88:29:6e:
         af:7c:1a:c6:03:53:28:c0:9e:b7:21:54:49:fc:f3:93:ad:0a:
         0b:fb:96:9b:94:34:a8:88:e1:ca:ab:bf:d8:49:b6:d8:df:ae:
         bd:1a:0f:7c:e0:aa:93:e8:3b:84:2d:2d:03:b0:bb:cd:1e:b7:
         4b:43:eb:b3:c7:78:f9:27:50:a1:5e:1f:04:1c:81:ac:36:3f:
         da:88:bc:83:6c:db:28:e1:2e:c6:0a:b8:69:e6:9e:e4:28:4e:
         43:a5:c2:40:bd:20:6e:60:d7:c1:78:e6:06:d9:52:43:c8:b2:
         ee:fc:6b:55:83:b3:2d:9d:8d:34:30:22:55:67:c6:2e:92:58:
         05:84:b3:e4:80:28:f9:f2:27:36:a0:86:69:cb:6f:51:f9:c7:
         36:c9:81:b7:40:10:fa:71:cf:fa:3e:5e:25:db:db:df:af:fc:
         a6:d7:c3:a7:77:54:e9:aa:87:1b:40:ec:7f:c4:ad:82:fd:96:
         57:9d:f8:cc:37:c0:b8:ed:23:a0:06:88:b0:e0:34:52:74:be:
         75:9f:14:8e:ef:0d:4d:b9:d5:67:ad:a2:c0:22:7d:be:50:d5:
         70:32:6d:02:b0:d5:ea:e2:fe:80:12:25:2a:0e:4a:66:d2:89:
         11:df:a5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----