Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/323830343a326634383a343030303a3a2f33352d3335203d3e203533303532.roa
File:                     323830343a326634383a343030303a3a2f33352d3335203d3e203533303532.roa (raw, json)
Hash identifier:          jxJ8rNP/BYqm9fcxFbxUZfANgO+cn8vRlJADzmhxA7A=
Subject key identifier:   1E:F9:83:2D:6E:2A:0F:78:01:61:C7:AA:FF:D8:81:A2:11:37:9A:8F
Certificate issuer:       /CN=EBC99FF89ED089CB32980A722A112E63E5B2D567
Certificate serial:       08BA543A7CE1674A9F8D9FE6EBA98F10FBF64AAB
Authority key identifier: EB:C9:9F:F8:9E:D0:89:CB:32:98:0A:72:2A:11:2E:63:E5:B2:D5:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EBC99FF89ED089CB32980A722A112E63E5B2D567.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/323830343a326634383a343030303a3a2f33352d3335203d3e203533303532.roa
Signing time:             Tue 13 Jun 2023 01:00:00 +0000
ROA not before:           Tue 13 Jun 2023 00:55:00 +0000
ROA not after:            Tue 11 Jun 2024 01:00:00 +0000
asID:                     53052
IP address blocks:        2804:2f48:4000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ba:54:3a:7c:e1:67:4a:9f:8d:9f:e6:eb:a9:8f:10:fb:f6:4a:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBC99FF89ED089CB32980A722A112E63E5B2D567
        Validity
            Not Before: Jun 13 00:55:00 2023 GMT
            Not After : Jun 11 01:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:30:bb:38:8d:d5:33:3f:11:94:58:ad:ac:e1:
                    b1:62:91:25:48:89:f6:d0:f6:24:49:d8:73:9a:61:
                    f6:54:7c:b3:bb:9f:ba:a2:b5:f9:90:0b:7e:e0:53:
                    4e:4f:fb:23:c0:af:f5:a1:df:a0:29:ab:3c:a5:c4:
                    5c:4e:d5:21:cd:b2:21:3c:31:8e:3a:16:24:45:21:
                    7e:c6:8a:66:95:21:2f:dd:62:11:1a:4c:bc:9e:20:
                    28:be:cf:34:38:d9:bd:43:b4:81:45:5f:b5:f6:54:
                    67:c6:4d:fc:ff:bd:5f:8c:4c:63:06:fb:01:35:77:
                    89:c6:68:2a:25:b9:19:59:33:df:c7:06:e0:6a:d6:
                    69:69:63:58:be:ac:8f:c5:42:1e:75:29:b7:ca:df:
                    8c:5c:1b:50:28:35:22:c3:14:08:45:9e:3e:02:61:
                    fa:5f:e4:12:66:0c:fc:04:e1:90:fd:da:c8:2a:67:
                    8b:9d:18:b5:53:2a:d3:1b:27:40:c2:b0:44:84:42:
                    7d:ac:3d:e1:62:5d:f9:d3:f3:eb:c0:01:90:fb:4e:
                    80:2b:18:dc:22:9c:9d:96:e6:13:34:12:3b:15:00:
                    37:90:4e:3b:46:49:5b:59:41:88:fa:97:fc:4f:37:
                    1d:4c:1e:28:05:d7:57:89:55:8d:b0:ce:ca:3b:24:
                    15:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F9:83:2D:6E:2A:0F:78:01:61:C7:AA:FF:D8:81:A2:11:37:9A:8F
            X509v3 Authority Key Identifier:
                keyid:EB:C9:9F:F8:9E:D0:89:CB:32:98:0A:72:2A:11:2E:63:E5:B2:D5:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/EBC99FF89ED089CB32980A722A112E63E5B2D567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EBC99FF89ED089CB32980A722A112E63E5B2D567.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/323830343a326634383a343030303a3a2f33352d3335203d3e203533303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f48:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         95:e4:b9:88:36:c8:e6:21:eb:c4:47:a7:e6:48:49:86:75:7b:
         03:f1:38:6e:bd:a2:e7:81:6f:e0:f6:1f:33:aa:7c:6b:45:df:
         97:c4:65:29:f4:c3:0c:87:ed:f2:3d:03:da:cf:ff:57:28:ba:
         2a:03:16:b0:29:5e:c9:5a:83:6b:99:92:f6:32:0a:06:06:43:
         e5:3b:e4:e0:e2:3c:76:ca:8c:04:67:d5:e3:5c:85:3c:b3:5f:
         4d:e4:68:9d:c1:0c:ee:b8:0c:c5:be:f1:60:ff:5f:4e:bd:e2:
         33:37:02:f4:94:1b:48:72:2a:f4:85:89:1f:aa:8e:bd:b4:ef:
         7a:8e:95:95:dc:7f:92:e4:49:26:f4:80:7e:64:86:b9:34:a6:
         17:81:08:0b:af:a9:7f:21:8d:fc:8c:f9:20:c8:0e:66:ce:f5:
         cc:c9:2f:34:4f:18:02:e3:03:92:36:70:78:6a:6f:9b:37:0d:
         06:28:08:94:c5:cf:e8:f0:b3:6f:77:aa:79:68:5c:74:d1:6e:
         05:e7:05:99:5f:d4:05:85:33:30:e5:42:cb:31:0b:34:2a:fd:
         de:35:93:b4:30:58:99:33:56:f9:56:ec:91:37:cf:57:57:ee:
         68:df:96:5a:37:04:8b:44:2c:70:d1:e0:79:cc:05:9b:2a:9a:
         2e:25:2e:61
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----