Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/3138392e312e3132382e302f32302d3233203d3e203238363635.roa
File:                     3138392e312e3132382e302f32302d3233203d3e203238363635.roa (raw, json)
Hash identifier:          koeS6num0nJ40D6mEDEggkP2rvCXUEKmIO7GGpr+1Gw=
Subject key identifier:   7C:47:E3:D9:D0:39:11:E2:AB:C3:4F:87:0F:75:58:0D:A1:41:CA:BA
Certificate issuer:       /CN=2B04BBF97246BDE2FB53B000FBFDE50502C74549
Certificate serial:       40AFA4BEA089AB4E913E80A2FDBD87BD3479739D
Authority key identifier: 2B:04:BB:F9:72:46:BD:E2:FB:53:B0:00:FB:FD:E5:05:02:C7:45:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B04BBF97246BDE2FB53B000FBFDE50502C74549.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/3138392e312e3132382e302f32302d3233203d3e203238363635.roa
Signing time:             Fri 10 Dec 2021 20:02:29 +0000
ROA not before:           Fri 10 Dec 2021 19:57:29 +0000
ROA not after:            Fri 09 Dec 2022 20:02:29 +0000
asID:                     28665
IP address blocks:        189.1.128.0/20 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:af:a4:be:a0:89:ab:4e:91:3e:80:a2:fd:bd:87:bd:34:79:73:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B04BBF97246BDE2FB53B000FBFDE50502C74549
        Validity
            Not Before: Dec 10 19:57:29 2021 GMT
            Not After : Dec  9 20:02:29 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f9:44:bd:5a:62:f7:72:dc:52:a5:3e:4f:4f:
                    2b:59:ab:5c:a4:df:ff:7a:f3:e4:b3:97:34:ad:5c:
                    68:75:20:59:4c:60:4f:11:2e:1f:85:a8:32:9e:bd:
                    66:68:97:bf:4b:07:12:c0:53:9e:af:73:2f:66:54:
                    33:48:7a:fd:dd:f3:10:be:80:cb:4c:6e:b0:19:b6:
                    77:0f:dc:36:ee:2d:67:0e:4a:5f:90:8c:97:a9:24:
                    05:37:65:88:ab:d3:aa:d2:62:43:69:da:c5:86:29:
                    49:d4:7b:2c:4c:f4:47:d0:1c:b8:9d:53:e7:0b:30:
                    f0:54:b3:4c:39:a3:b2:2a:ba:31:0a:88:7b:53:f7:
                    af:d0:ad:6a:6a:3d:a1:d2:37:27:3e:a4:ec:41:72:
                    76:c7:6a:60:d8:1a:0b:0d:25:fa:3f:73:11:b2:65:
                    89:22:fe:b1:30:1b:a5:ca:5b:f3:6b:76:30:85:8c:
                    65:1f:0d:96:62:ca:b5:86:1d:ae:c1:75:2d:23:7d:
                    96:18:a8:db:5b:1b:48:61:fe:c0:e6:c4:1b:35:62:
                    a5:f4:1e:29:03:d4:e0:9e:ba:27:2c:93:cf:89:01:
                    7e:af:37:c7:47:37:34:36:f6:d6:c9:16:b4:3d:0a:
                    da:70:0d:43:17:07:15:79:98:36:a4:83:b2:7d:cd:
                    99:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:47:E3:D9:D0:39:11:E2:AB:C3:4F:87:0F:75:58:0D:A1:41:CA:BA
            X509v3 Authority Key Identifier:
                keyid:2B:04:BB:F9:72:46:BD:E2:FB:53:B0:00:FB:FD:E5:05:02:C7:45:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/2B04BBF97246BDE2FB53B000FBFDE50502C74549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B04BBF97246BDE2FB53B000FBFDE50502C74549.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/3138392e312e3132382e302f32302d3233203d3e203238363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.1.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ac:1c:fd:53:b2:8e:e8:88:cc:72:70:1d:a2:45:80:4a:3a:a6:
         a7:35:db:a2:a4:10:bc:e6:a1:5b:7a:5a:50:e7:1b:27:3d:15:
         3a:a9:03:22:0e:f8:09:31:60:46:91:db:45:31:ef:83:e5:22:
         bf:2e:91:9a:ec:bb:c9:5d:60:0b:4d:77:88:9b:2b:57:f4:07:
         7a:3f:e6:19:e3:77:f9:95:dc:88:cb:d3:ad:aa:6a:00:76:14:
         51:73:6d:c1:e0:25:60:ca:d8:a8:05:e3:54:b9:d8:f6:d6:71:
         e0:20:04:f1:a0:c8:f4:ee:29:13:41:3d:62:b5:db:37:5b:4f:
         a6:70:4a:16:a4:84:d4:2d:17:33:b5:e0:ae:c7:e7:e2:64:3e:
         e0:3e:5a:27:60:c5:21:84:a3:27:f8:b9:34:80:9f:07:5c:6a:
         30:9d:8d:10:3e:b1:2a:99:a6:79:69:86:fb:ae:aa:a8:07:9d:
         50:01:17:06:f3:2f:48:8f:3f:62:04:4d:c8:7d:70:5e:33:a4:
         28:53:c6:ef:4a:7d:7b:64:34:26:8b:e6:7b:2a:db:82:21:7c:
         54:d6:94:3d:49:03:aa:bf:a1:40:34:1c:57:c8:2a:e3:7a:14:
         83:47:77:b0:6b:9d:37:7d:d8:41:af:61:86:99:59:a1:f9:7f:
         da:87:1c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----