Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/323830343a343837303a3162313a3a2f34382d3438203d3e20323637313231.roa
File:                     323830343a343837303a3162313a3a2f34382d3438203d3e20323637313231.roa (raw, json)
Hash identifier:          +8JdPtZwy/6XFQtQrf1ryqIl+9UbFymeixoF6lnR6Io=
Subject key identifier:   94:1F:14:60:95:D9:60:7B:00:B4:3C:32:3F:1B:2D:6C:4E:D8:4C:8F
Certificate issuer:       /CN=EC5EEAF38312D35268F48831F09451672A6BE0DE
Certificate serial:       5A54B6307B0762CD22D4DB162196018390D327B8
Authority key identifier: EC:5E:EA:F3:83:12:D3:52:68:F4:88:31:F0:94:51:67:2A:6B:E0:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC5EEAF38312D35268F48831F09451672A6BE0DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/323830343a343837303a3162313a3a2f34382d3438203d3e20323637313231.roa
Signing time:             Thu 29 Jun 2023 20:00:01 +0000
ROA not before:           Thu 29 Jun 2023 19:55:01 +0000
ROA not after:            Thu 27 Jun 2024 20:00:01 +0000
asID:                     267121
IP address blocks:        2804:4870:1b1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:54:b6:30:7b:07:62:cd:22:d4:db:16:21:96:01:83:90:d3:27:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC5EEAF38312D35268F48831F09451672A6BE0DE
        Validity
            Not Before: Jun 29 19:55:01 2023 GMT
            Not After : Jun 27 20:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:72:d5:b0:26:9e:e7:88:93:86:3e:0c:fb:db:
                    8f:1a:d8:00:17:5c:9c:a2:2c:7e:12:15:49:ec:65:
                    a5:1c:cb:7a:a8:5a:4d:66:83:0f:fd:a2:e4:65:90:
                    f9:06:c1:ae:e3:e0:08:75:12:09:60:95:eb:1c:8d:
                    5c:41:e2:35:05:89:e2:aa:67:c5:8c:65:92:2e:76:
                    32:b1:ca:d2:4d:23:cf:aa:00:8f:30:6c:6e:80:90:
                    06:2e:4c:1e:02:d6:22:4d:ff:7b:5d:5a:1a:19:6e:
                    49:b6:bd:ae:47:a3:6d:14:b5:99:dc:75:93:65:91:
                    c4:b7:92:25:77:2c:fb:80:63:1d:bb:34:89:1b:a5:
                    c5:0d:a4:79:6d:f2:85:50:fe:7e:88:a6:ba:5b:20:
                    bd:3b:b7:93:dc:c9:c7:6a:d2:71:09:7a:f4:75:14:
                    e1:ff:82:09:ca:d7:c5:d0:c5:82:fd:b7:d4:3e:e7:
                    a9:de:d4:89:4b:ed:61:7c:6b:63:ba:a9:2e:1b:9b:
                    d8:cd:1c:d1:94:3a:47:83:51:f5:ee:7c:e0:85:df:
                    2a:51:1f:59:08:3f:94:7f:48:39:91:66:93:19:40:
                    9e:b9:f3:36:f1:5b:c2:2c:48:5f:d9:96:e1:56:ff:
                    05:af:e4:58:c5:5b:92:aa:9a:4e:b4:cd:43:7d:fd:
                    21:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:1F:14:60:95:D9:60:7B:00:B4:3C:32:3F:1B:2D:6C:4E:D8:4C:8F
            X509v3 Authority Key Identifier:
                keyid:EC:5E:EA:F3:83:12:D3:52:68:F4:88:31:F0:94:51:67:2A:6B:E0:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/EC5EEAF38312D35268F48831F09451672A6BE0DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC5EEAF38312D35268F48831F09451672A6BE0DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/323830343a343837303a3162313a3a2f34382d3438203d3e20323637313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4870:1b1::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:7e:c9:c2:c0:41:c2:8c:38:20:4e:20:a3:e8:81:49:ab:70:
         e2:dd:ca:39:8c:e8:55:1b:55:6b:04:eb:06:ad:6b:d8:24:3e:
         1f:41:4b:d0:9e:47:9d:b9:bd:6c:58:cb:e3:e5:ae:19:f5:bb:
         94:cf:5d:53:48:a9:56:50:31:7a:2a:2e:c6:53:97:e4:e6:af:
         b9:31:95:1c:d3:c8:3d:3f:c5:f2:94:08:35:99:c2:ad:51:cd:
         cf:d8:14:23:f9:6b:34:70:61:de:8e:ec:be:d8:c4:3c:94:ec:
         a4:36:c2:64:54:32:d1:11:d1:5b:87:c5:3c:ca:88:c2:52:ab:
         b4:e7:d0:c4:8d:e8:73:0d:14:bb:2e:03:8d:f7:bb:01:12:2c:
         5c:bf:e9:10:5c:6d:d7:d2:8c:23:86:60:d1:b5:44:1d:cc:38:
         f2:5d:69:ae:26:71:6e:2e:65:b6:3e:63:32:8f:eb:f3:46:3c:
         92:ae:b9:c1:96:a7:d3:ec:9a:72:5f:8e:7b:62:e3:7e:10:cc:
         04:67:f4:1e:9d:20:f4:53:bd:2b:51:eb:d8:c1:49:82:02:b3:
         f2:cd:33:5d:9f:00:f4:50:fc:22:2a:da:86:38:e2:fb:3c:f9:
         56:34:a8:4c:f7:7b:30:c0:7e:61:1d:f0:91:cf:11:85:4b:d4:
         34:68:69:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----