Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/323830343a343530383a313330303a3a2f34302d3430203d3e20323637363638.roa
File:                     323830343a343530383a313330303a3a2f34302d3430203d3e20323637363638.roa (raw, json)
Hash identifier:          IxHmxkTufiH7IK9LrzuCduhbfYLAJSSeP2UgOCYUCfI=
Subject key identifier:   08:11:FC:03:2A:B4:FE:F6:86:D9:C7:55:C2:D7:8A:73:4C:86:31:A5
Certificate issuer:       /CN=EC25BD62AE2E72DDFA24A0804AB5C7F72A1FF0DD
Certificate serial:       617217D8EAE832166F4974985F2934198D20801A
Authority key identifier: EC:25:BD:62:AE:2E:72:DD:FA:24:A0:80:4A:B5:C7:F7:2A:1F:F0:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC25BD62AE2E72DDFA24A0804AB5C7F72A1FF0DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/323830343a343530383a313330303a3a2f34302d3430203d3e20323637363638.roa
Signing time:             Thu 06 Apr 2023 18:52:51 +0000
ROA not before:           Thu 06 Apr 2023 18:47:51 +0000
ROA not after:            Thu 04 Apr 2024 18:52:51 +0000
asID:                     267668
IP address blocks:        2804:4508:1300::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:72:17:d8:ea:e8:32:16:6f:49:74:98:5f:29:34:19:8d:20:80:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC25BD62AE2E72DDFA24A0804AB5C7F72A1FF0DD
        Validity
            Not Before: Apr  6 18:47:51 2023 GMT
            Not After : Apr  4 18:52:51 2024 GMT
        Subject: CN=0811FC032AB4FEF686D9C755C2D78A734C8631A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:50:b9:c1:32:16:d9:f6:58:17:61:46:92:e9:
                    f5:f4:3a:25:ec:1c:d1:81:8d:04:7c:66:da:b3:54:
                    90:fb:b3:57:b1:a3:20:05:b6:3c:02:1e:3a:0d:3a:
                    2c:03:fa:6e:d9:72:9e:d4:e1:9b:57:51:96:90:80:
                    bd:30:f0:4a:d4:8b:8f:80:48:bc:1c:f8:17:73:6d:
                    78:10:ca:a8:05:93:24:f2:51:11:8e:2b:64:45:5d:
                    74:bd:66:8c:7d:15:c4:e1:3d:05:74:2b:85:ff:18:
                    4e:19:8f:3a:a7:1b:b8:57:85:51:7a:8b:9d:e5:f5:
                    62:a1:f2:a7:01:05:9b:0c:d6:31:f8:39:ca:ab:fe:
                    8e:85:2d:6a:df:7d:3b:2a:b9:60:e4:91:f9:1a:d7:
                    a6:75:69:47:c9:b4:55:62:9f:98:1f:de:75:8f:24:
                    70:9e:51:6e:7c:8b:ff:d5:59:31:d4:3b:79:f3:f7:
                    54:af:79:7c:da:a8:04:4a:90:5e:68:89:90:32:28:
                    b8:ed:7b:0c:46:29:81:11:28:6a:63:f6:6a:cb:4a:
                    3f:ec:8d:41:2e:b9:62:12:bd:5c:14:53:40:2b:2f:
                    3c:26:4a:6a:45:e2:37:0a:82:27:0b:bd:84:ed:36:
                    66:b3:19:e3:17:2a:cf:e6:e3:df:4b:e4:95:e9:ad:
                    03:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:11:FC:03:2A:B4:FE:F6:86:D9:C7:55:C2:D7:8A:73:4C:86:31:A5
            X509v3 Authority Key Identifier:
                keyid:EC:25:BD:62:AE:2E:72:DD:FA:24:A0:80:4A:B5:C7:F7:2A:1F:F0:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/EC25BD62AE2E72DDFA24A0804AB5C7F72A1FF0DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC25BD62AE2E72DDFA24A0804AB5C7F72A1FF0DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/323830343a343530383a313330303a3a2f34302d3430203d3e20323637363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4508:1300::/40

    Signature Algorithm: sha256WithRSAEncryption
         14:0e:79:3a:5c:94:9b:62:9d:83:b5:ac:db:90:31:b6:38:c4:
         eb:52:68:e0:97:6f:e4:5e:36:8f:a8:01:87:5a:6d:f5:80:ac:
         48:d3:b0:dc:c0:c3:c8:83:7a:22:85:6b:74:45:97:87:e9:49:
         c5:56:c8:b9:94:7d:0f:d8:89:0a:89:a2:04:b9:ca:fa:26:9d:
         f0:eb:50:54:12:05:ec:e6:d5:f2:2f:e7:51:a0:4d:9b:95:a4:
         44:e0:6a:29:f1:4e:57:83:dd:8c:ec:21:4e:c4:05:38:9c:79:
         5b:7f:22:68:1a:ff:fa:ea:70:5d:f6:14:a3:07:1f:d7:13:dc:
         9b:70:de:76:7e:98:d9:01:7f:dd:c9:5e:e6:25:3b:c2:5d:68:
         bc:72:4a:44:90:29:63:17:db:a9:8f:e2:a9:d7:fb:86:35:c2:
         35:5a:90:ea:e7:72:87:dc:14:1b:b1:c3:85:30:d6:aa:15:cb:
         b4:b7:0c:2d:80:e2:1f:ef:6b:29:b7:d3:5f:9e:f0:a3:5a:0f:
         78:58:15:ba:86:ec:16:08:5d:04:d9:b7:8c:91:02:3c:72:13:
         6e:e4:5e:01:18:ea:a9:16:05:d1:19:54:70:4f:84:46:8b:3a:
         5e:21:65:8d:44:39:ac:d3:01:87:5d:05:ed:6c:65:3f:fb:dd:
         3e:9b:43:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----