Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/323830343a343837303a3162303a3a2f34382d3438203d3e20323637313231.roa
File:                     323830343a343837303a3162303a3a2f34382d3438203d3e20323637313231.roa (raw, json)
Hash identifier:          0SYFVQNZASvfYeV1MCepXhxmO3jPrC2JdGhklgVz7n0=
Subject key identifier:   55:1A:3A:04:DF:D6:29:31:3B:46:4D:86:1B:04:D8:67:2B:71:47:E2
Certificate issuer:       /CN=EC5EEAF38312D35268F48831F09451672A6BE0DE
Certificate serial:       2BAC1BB3BCE309A9B5489E48BB43FEE40A782C76
Authority key identifier: EC:5E:EA:F3:83:12:D3:52:68:F4:88:31:F0:94:51:67:2A:6B:E0:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC5EEAF38312D35268F48831F09451672A6BE0DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/323830343a343837303a3162303a3a2f34382d3438203d3e20323637313231.roa
Signing time:             Thu 29 Jun 2023 19:00:00 +0000
ROA not before:           Thu 29 Jun 2023 18:55:00 +0000
ROA not after:            Thu 27 Jun 2024 19:00:00 +0000
asID:                     267121
IP address blocks:        2804:4870:1b0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ac:1b:b3:bc:e3:09:a9:b5:48:9e:48:bb:43:fe:e4:0a:78:2c:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC5EEAF38312D35268F48831F09451672A6BE0DE
        Validity
            Not Before: Jun 29 18:55:00 2023 GMT
            Not After : Jun 27 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7e:d1:8f:23:6a:d9:e5:dd:26:28:79:8e:8c:
                    6c:f1:6f:b3:f1:50:60:71:31:4e:29:aa:84:cd:c8:
                    18:ce:47:ea:58:77:e1:75:f9:ab:99:da:3c:a7:cf:
                    d2:d4:e0:48:3c:4f:2b:dd:a6:de:53:df:4b:93:cf:
                    0c:82:18:61:40:37:c8:95:6d:29:70:3c:e2:91:f7:
                    0c:4e:cf:ca:50:33:f9:08:1a:aa:dc:3e:2f:3e:1b:
                    46:33:81:4a:c2:78:4b:c5:a8:f0:30:49:39:78:48:
                    17:4c:f3:01:c0:cf:a3:2e:23:c2:f8:8b:88:7b:08:
                    3a:83:da:eb:b0:7f:84:ca:6e:37:80:80:04:5c:55:
                    4f:d7:36:e5:fb:e7:a2:54:78:30:96:70:b6:c0:2e:
                    6d:9a:85:2b:62:14:f3:09:d8:87:66:1e:ab:21:0a:
                    34:ef:4e:81:e7:c5:c7:16:4f:c0:39:0f:f7:ee:34:
                    a0:fd:8c:c8:69:40:a1:80:ce:1e:10:3e:44:16:ff:
                    3c:cd:a5:ad:c8:4c:e5:9a:a6:32:73:75:18:64:42:
                    15:5d:78:aa:8e:f3:fe:1a:1c:d1:f9:fc:c2:24:20:
                    5b:02:03:76:5e:11:43:4f:ae:7b:6c:e7:21:14:e4:
                    60:4f:ec:bd:94:66:e0:f2:04:0f:66:f7:e1:63:3c:
                    e9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1A:3A:04:DF:D6:29:31:3B:46:4D:86:1B:04:D8:67:2B:71:47:E2
            X509v3 Authority Key Identifier:
                keyid:EC:5E:EA:F3:83:12:D3:52:68:F4:88:31:F0:94:51:67:2A:6B:E0:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/EC5EEAF38312D35268F48831F09451672A6BE0DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC5EEAF38312D35268F48831F09451672A6BE0DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/323830343a343837303a3162303a3a2f34382d3438203d3e20323637313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4870:1b0::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:06:6b:2f:1c:bc:72:88:bc:7e:89:85:bb:3d:76:be:3b:3e:
         ce:61:c8:5d:07:63:88:b8:a3:f4:ce:af:81:05:6a:25:86:61:
         ff:a3:24:66:5d:d8:9b:fa:de:1b:98:3b:c7:7e:29:dc:d5:60:
         ee:a5:1f:0e:41:d5:bf:10:f0:66:9c:57:a8:e7:83:7a:12:6e:
         bd:98:43:81:8d:b0:5d:ef:95:36:40:90:59:d1:ad:6b:b4:8a:
         99:05:9d:55:7a:33:03:4e:63:4d:10:3c:e1:b2:0f:d4:29:a0:
         ac:07:e3:52:0d:e6:80:8a:11:b6:20:cc:87:13:a6:1f:7f:92:
         89:53:11:03:6d:f4:6f:2b:b1:12:43:9f:cc:54:9f:14:32:d9:
         dc:3a:1e:1b:0f:bf:e4:d5:0c:28:d2:b4:c1:c7:94:9f:f2:25:
         81:d3:5f:bb:5f:ec:0e:2d:3a:68:05:c7:25:3e:90:45:e7:eb:
         82:97:30:d2:a2:b6:4b:13:2f:15:19:41:d9:d2:fa:be:04:00:
         59:bf:55:6f:81:0a:bc:da:7b:b1:c4:24:9b:75:d4:cb:c8:b6:
         46:2e:be:b9:d7:b6:e1:64:6d:10:e1:ad:da:29:91:8f:ea:09:
         a3:31:9d:e9:73:98:df:84:08:8e:02:32:44:aa:c9:fd:a0:a3:
         60:70:54:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----