Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/323830343a343530383a313130303a3a2f34302d3430203d3e20323637363638.roa
File:                     323830343a343530383a313130303a3a2f34302d3430203d3e20323637363638.roa (raw, json)
Hash identifier:          DmZ+KCX5EcUkizYQW3/MbRAnHDT1vjaGZUNZMRV2UFg=
Subject key identifier:   6C:AC:3B:C7:70:5E:4B:C6:5A:F5:25:7B:D2:23:C2:43:15:51:EA:E5
Certificate issuer:       /CN=EC25BD62AE2E72DDFA24A0804AB5C7F72A1FF0DD
Certificate serial:       25D5435B811749AC534C10C5C22CDE0EBD13511D
Authority key identifier: EC:25:BD:62:AE:2E:72:DD:FA:24:A0:80:4A:B5:C7:F7:2A:1F:F0:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC25BD62AE2E72DDFA24A0804AB5C7F72A1FF0DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/323830343a343530383a313130303a3a2f34302d3430203d3e20323637363638.roa
Signing time:             Thu 06 Apr 2023 18:51:24 +0000
ROA not before:           Thu 06 Apr 2023 18:46:24 +0000
ROA not after:            Thu 04 Apr 2024 18:51:24 +0000
asID:                     267668
IP address blocks:        2804:4508:1100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:d5:43:5b:81:17:49:ac:53:4c:10:c5:c2:2c:de:0e:bd:13:51:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC25BD62AE2E72DDFA24A0804AB5C7F72A1FF0DD
        Validity
            Not Before: Apr  6 18:46:24 2023 GMT
            Not After : Apr  4 18:51:24 2024 GMT
        Subject: CN=6CAC3BC7705E4BC65AF5257BD223C2431551EAE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d7:27:d6:0f:79:91:be:a2:df:1c:91:92:c1:
                    bf:56:2a:55:74:51:33:ae:70:45:68:dd:e8:53:c3:
                    7e:95:ec:2b:3a:3b:e1:ac:6c:26:46:32:c6:44:07:
                    20:7d:d4:1a:f4:d0:5c:80:06:a9:8b:51:4f:8b:99:
                    db:b3:01:1f:8f:cc:bb:d5:db:b0:59:ae:3e:2d:cc:
                    c2:fe:2a:3b:58:57:17:62:3a:3a:37:a5:3d:64:3b:
                    6c:a4:83:c0:4d:11:6f:b4:f3:41:f9:6e:c9:4c:33:
                    e2:ce:5e:e0:7b:0d:58:3b:d0:7a:94:3d:cb:01:07:
                    89:f2:31:c4:3e:89:0a:5e:30:4a:c6:31:a8:42:52:
                    55:41:51:9b:55:93:a7:98:c8:a5:2c:3f:77:88:58:
                    e7:40:13:f3:bd:ea:4d:53:f9:b4:82:00:e5:05:45:
                    64:c5:fe:a6:99:8f:db:9f:51:e2:21:11:08:c2:c4:
                    28:c0:f3:7b:8d:b9:83:8d:5a:38:2a:a9:58:70:2b:
                    a9:ef:53:2a:b6:1f:63:a6:e9:90:1e:cd:22:c1:ec:
                    a9:17:03:d3:ba:ef:e4:03:ae:36:ca:57:52:b9:24:
                    14:e2:2f:bc:9a:3e:e7:d6:87:5f:e7:f9:bd:83:8c:
                    4a:f9:a9:91:a8:d7:f0:12:2c:c4:58:63:8a:7d:22:
                    7f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:AC:3B:C7:70:5E:4B:C6:5A:F5:25:7B:D2:23:C2:43:15:51:EA:E5
            X509v3 Authority Key Identifier:
                keyid:EC:25:BD:62:AE:2E:72:DD:FA:24:A0:80:4A:B5:C7:F7:2A:1F:F0:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/EC25BD62AE2E72DDFA24A0804AB5C7F72A1FF0DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC25BD62AE2E72DDFA24A0804AB5C7F72A1FF0DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/323830343a343530383a313130303a3a2f34302d3430203d3e20323637363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4508:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         69:bd:52:e5:27:00:44:9a:3d:85:8a:8c:5a:6e:5b:db:9e:26:
         d4:c2:65:3c:7c:a3:a2:ae:67:a4:2e:4a:c2:39:49:19:dc:53:
         15:87:b8:23:1d:34:cc:5c:a7:48:89:03:e0:33:72:56:98:cc:
         62:41:c7:26:2e:f9:b4:7e:b8:33:9e:27:0a:5b:ca:91:12:d7:
         2e:10:37:ce:3f:15:54:cd:50:c1:1b:02:31:ee:7f:21:fe:a8:
         f3:b8:13:4a:70:39:5d:8b:c4:a5:25:2f:fa:0c:00:83:50:2f:
         27:4f:9a:35:b2:c0:30:5f:72:31:38:0b:a0:f3:ec:24:e4:78:
         b9:06:d5:c5:dc:57:c1:03:20:07:d8:63:b4:b3:ce:d5:00:f8:
         5b:f5:5f:cd:c1:d6:90:9e:a9:f5:3f:69:cb:b3:6a:e5:43:43:
         1c:26:a6:28:55:48:bd:bc:b0:30:f0:33:1d:37:86:f7:db:b5:
         8c:63:b3:3d:c0:4f:96:5e:18:e4:61:93:36:08:94:cb:2f:2e:
         e9:ba:74:ee:d9:42:70:7d:e1:ac:17:aa:b9:0e:37:11:e5:6c:
         7b:c7:cb:01:bc:58:6b:ff:e4:be:22:51:47:05:a2:b2:34:20:
         f8:f9:01:57:6a:9c:64:31:95:95:77:48:0d:63:cd:94:60:37:
         46:9d:b5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----