Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/323830343a343837303a326630303a3a2f34302d3430203d3e20323637313231.roa
File:                     323830343a343837303a326630303a3a2f34302d3430203d3e20323637313231.roa (raw, json)
Hash identifier:          zh23KAoB3cyVE1mFg9f3P4OHSvj7f0aAue9T8o0NHMA=
Subject key identifier:   E1:56:E1:7E:63:26:C1:C7:D0:55:42:39:72:89:FD:5D:BD:20:FE:12
Certificate issuer:       /CN=EC5EEAF38312D35268F48831F09451672A6BE0DE
Certificate serial:       055B783CFA0522DE945430243DB4E7D1B0CA96DD
Authority key identifier: EC:5E:EA:F3:83:12:D3:52:68:F4:88:31:F0:94:51:67:2A:6B:E0:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC5EEAF38312D35268F48831F09451672A6BE0DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/323830343a343837303a326630303a3a2f34302d3430203d3e20323637313231.roa
Signing time:             Fri 08 Sep 2023 00:24:26 +0000
ROA not before:           Fri 08 Sep 2023 00:19:26 +0000
ROA not after:            Fri 06 Sep 2024 00:24:26 +0000
asID:                     267121
IP address blocks:        2804:4870:2f00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:5b:78:3c:fa:05:22:de:94:54:30:24:3d:b4:e7:d1:b0:ca:96:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC5EEAF38312D35268F48831F09451672A6BE0DE
        Validity
            Not Before: Sep  8 00:19:26 2023 GMT
            Not After : Sep  6 00:24:26 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:83:70:32:8c:b8:bd:04:27:37:68:95:ba:2d:
                    f5:ce:1e:22:3f:10:6e:e8:17:45:f0:62:75:d1:3c:
                    60:ec:fc:d1:04:ea:12:4c:60:0a:9d:17:20:e7:49:
                    c1:de:1c:03:06:90:55:58:32:68:86:7d:2a:ee:c7:
                    c8:02:aa:ee:d5:1b:61:87:8e:20:d5:b9:a6:87:ea:
                    8c:89:dd:3f:b5:7f:24:bb:4e:71:a9:14:6a:72:b6:
                    99:45:88:bb:3c:fa:15:0e:58:47:ea:bd:09:b9:ad:
                    02:f5:ee:d6:d8:65:7d:7c:36:38:15:2b:bd:31:87:
                    ed:a9:6d:d2:1d:7e:79:a1:fa:9a:ea:f2:f5:9a:2b:
                    3d:71:04:30:5c:1c:ae:ff:d8:32:8e:06:bd:bd:00:
                    7b:94:d4:6b:d5:ba:10:0d:81:de:4c:a3:7d:bd:97:
                    85:26:e9:ed:fb:fb:40:25:35:3c:bd:84:c8:29:74:
                    f2:ff:f4:4f:ec:50:94:08:07:79:59:36:83:4e:4d:
                    3a:ed:20:58:cf:c1:ab:e2:98:76:3c:5d:35:ad:b9:
                    95:c3:f6:64:7d:7c:a1:97:c0:50:0f:36:f0:ee:08:
                    ca:a1:04:69:80:60:3c:ca:8c:fe:1e:00:b9:e6:5f:
                    a3:49:4a:13:da:84:ec:be:ea:63:1a:3b:e5:97:6a:
                    0e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:56:E1:7E:63:26:C1:C7:D0:55:42:39:72:89:FD:5D:BD:20:FE:12
            X509v3 Authority Key Identifier:
                keyid:EC:5E:EA:F3:83:12:D3:52:68:F4:88:31:F0:94:51:67:2A:6B:E0:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/EC5EEAF38312D35268F48831F09451672A6BE0DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC5EEAF38312D35268F48831F09451672A6BE0DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/323830343a343837303a326630303a3a2f34302d3430203d3e20323637313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4870:2f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a3:51:5b:9c:2c:fb:53:88:65:b3:f0:a4:f8:04:01:ce:6c:8b:
         e2:00:cc:ef:25:3a:fa:a6:fc:f8:33:3a:f7:aa:41:9d:de:5b:
         f4:6a:0b:f9:95:69:9b:85:7a:d1:16:9b:f3:a0:63:77:20:e0:
         91:45:11:69:23:aa:12:a0:87:d3:ec:2f:e7:d4:a9:06:c2:e1:
         36:35:2c:f3:cf:54:a0:06:27:4a:45:06:51:14:23:55:70:e7:
         8c:0b:43:8b:96:ce:db:d3:8d:6a:4b:50:6b:e8:95:2c:bc:48:
         ce:db:0c:db:e0:d3:c9:b9:77:5f:ad:01:fd:93:fa:5d:b4:e8:
         a4:f6:ef:e2:9b:70:96:55:63:1f:70:4e:a0:6d:c2:d9:93:02:
         32:23:5c:4c:46:79:af:3d:29:fc:fb:3e:14:39:98:9f:08:ed:
         46:7c:d6:3e:c3:94:39:3a:07:78:41:3f:1a:45:24:35:20:cc:
         fa:27:24:d2:af:7f:d6:82:92:b8:01:54:79:55:bc:c9:fa:50:
         61:bf:5b:ce:da:7f:09:18:ce:c7:86:6c:48:fc:b1:7d:de:3f:
         3f:1e:71:08:a0:f9:30:6c:7b:93:2b:59:9d:fd:ee:29:27:14:
         ef:7d:db:90:f8:5e:0a:4d:c1:5d:a5:5f:0a:d1:d9:d9:8c:12:
         48:60:ec:35
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----