Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/323830343a343837303a3162323a3a2f34382d3438203d3e20323637313231.roa
File:                     323830343a343837303a3162323a3a2f34382d3438203d3e20323637313231.roa (raw, json)
Hash identifier:          Zw0/6pAwVMZk61BijJi5nJmaNY77fIDEx4WqpKfCcRk=
Subject key identifier:   31:F5:29:63:A6:62:52:C6:82:3B:F6:3B:BC:BC:6C:94:CC:19:A0:CE
Certificate issuer:       /CN=EC5EEAF38312D35268F48831F09451672A6BE0DE
Certificate serial:       08EA4F88BF226056602C41A6B74C56CC0FF9C005
Authority key identifier: EC:5E:EA:F3:83:12:D3:52:68:F4:88:31:F0:94:51:67:2A:6B:E0:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC5EEAF38312D35268F48831F09451672A6BE0DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/323830343a343837303a3162323a3a2f34382d3438203d3e20323637313231.roa
Signing time:             Thu 29 Jun 2023 20:00:00 +0000
ROA not before:           Thu 29 Jun 2023 19:55:00 +0000
ROA not after:            Thu 27 Jun 2024 20:00:00 +0000
asID:                     267121
IP address blocks:        2804:4870:1b2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ea:4f:88:bf:22:60:56:60:2c:41:a6:b7:4c:56:cc:0f:f9:c0:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC5EEAF38312D35268F48831F09451672A6BE0DE
        Validity
            Not Before: Jun 29 19:55:00 2023 GMT
            Not After : Jun 27 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ab:19:a8:50:ab:df:de:e7:fc:90:01:c3:4d:
                    91:74:36:7c:93:66:59:25:41:1d:ed:e0:98:a5:21:
                    44:08:0f:75:99:a6:10:00:87:50:5b:37:2f:2c:0f:
                    fc:05:46:e1:07:e9:dd:d2:03:bb:79:ea:b6:31:5c:
                    1e:82:10:f3:0d:35:da:1e:c6:86:45:60:a7:37:e4:
                    59:7c:3e:0f:b5:a6:39:84:27:e6:46:f7:38:db:af:
                    b3:bb:75:b5:16:64:ff:30:88:67:e5:19:9b:59:5a:
                    ba:b9:48:c6:0e:dd:ea:9a:39:94:1c:e9:34:ae:da:
                    12:7c:45:3c:ea:74:12:55:ed:f6:5c:4e:76:89:29:
                    3e:29:6c:72:c9:b9:40:93:c6:a4:1d:d3:7d:45:15:
                    47:c5:b7:37:9d:4f:fc:0a:9c:70:79:de:d8:72:49:
                    ca:af:e3:92:c4:6d:f7:90:81:c0:20:68:9d:36:22:
                    c0:e5:3f:5b:60:a9:c0:a7:9e:92:a5:0a:53:39:86:
                    0d:32:6f:97:91:f9:f5:11:2c:42:a5:1b:0a:1d:90:
                    7f:ee:95:b6:f4:bd:dd:32:2d:ae:46:0a:98:f5:2e:
                    35:87:a4:19:68:01:ec:3f:06:42:4f:d2:21:bb:62:
                    8b:49:e1:9c:fd:98:05:a0:d3:c0:4f:7d:78:6d:b7:
                    c4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F5:29:63:A6:62:52:C6:82:3B:F6:3B:BC:BC:6C:94:CC:19:A0:CE
            X509v3 Authority Key Identifier:
                keyid:EC:5E:EA:F3:83:12:D3:52:68:F4:88:31:F0:94:51:67:2A:6B:E0:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/EC5EEAF38312D35268F48831F09451672A6BE0DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC5EEAF38312D35268F48831F09451672A6BE0DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/323830343a343837303a3162323a3a2f34382d3438203d3e20323637313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4870:1b2::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:b5:34:1e:26:f3:30:3c:c8:43:e3:e8:74:42:34:08:43:4a:
         47:96:f5:e7:ec:b2:dd:a7:b4:84:8b:df:98:7b:9f:6a:69:a7:
         ce:cd:e6:df:5e:b3:d6:f7:5d:e8:3d:51:bc:e2:17:aa:29:37:
         b6:a6:0d:f8:bb:61:db:19:a7:11:d1:bd:2e:f0:a4:26:e9:89:
         ef:30:e5:97:56:35:72:40:76:76:7b:6b:ee:75:68:49:dd:93:
         1e:17:95:67:93:e8:af:90:e6:d8:3d:c5:15:31:fc:bd:fb:68:
         55:c5:4e:d5:82:2e:d5:5b:4b:96:79:59:40:18:b0:90:aa:5d:
         74:d7:f3:26:47:bc:8b:9d:cc:a2:46:39:25:82:bb:9d:d9:89:
         4f:dc:d0:e3:35:96:a6:42:16:2c:21:a4:79:69:f0:08:ed:4b:
         ef:19:05:df:ce:ad:50:94:7f:3d:ca:ce:11:ca:fe:17:37:4a:
         92:cb:4d:63:93:0f:bd:ec:40:f3:71:e8:97:43:32:ce:f2:d0:
         3c:f3:60:92:98:58:6c:d5:85:00:2a:0a:53:47:d7:92:84:14:
         73:e5:22:fe:95:87:2c:71:b5:da:5a:47:1b:5d:44:bb:2e:5a:
         a1:6d:61:6b:fb:be:86:c9:23:63:79:ba:92:07:3d:00:45:fa:
         70:9b:b8:e6
-----BEGIN CERTIFICATE-----
MIIHSTCCBjGgAwIBAgIUCOpPiL8iYFZgLEGmt0xWzA/5wAUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM1RUVBRjM4MzEyRDM1MjY4RjQ4ODMxRjA5NDUxNjcy
QTZCRTBERTAeFw0yMzA2MjkxOTU1MDBaFw0yNDA2MjcyMDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDNBQjE5QTg1MEFCREZERUU3
RkM5MDAxQzM0RDkxNzQzNjdDOTM2NjU5MjU0MTFERURFMDk4QTUyMTQ0MDgwRjc1
OTlBNjEwMDA4NzUwNUIzNzJGMkMwRkZDMDU0NkUxMDdFOURERDIwM0JCNzlFQUI2
MzE1QzFFODIxMEYzMEQzNURBMUVDNjg2NDU2MEE3MzdFNDU5N0MzRTBGQjVBNjM5
ODQyN0U2NDZGNzM4REJBRkIzQkI3NUI1MTY2NEZGMzA4ODY3RTUxOTlCNTk1QUJB
Qjk0OEM2MEVEREVBOUEzOTk0MUNFOTM0QUVEQTEyN0M0NTNDRUE3NDEyNTVFREY2
NUM0RTc2ODkyOTNFMjk2QzcyQzlCOTQwOTNDNkE0MUREMzdENDUxNTQ3QzVCNzM3
OUQ0RkZDMEE5QzcwNzlERUQ4NzI0OUNBQUZFMzkyQzQ2REY3OTA4MUMwMjA2ODlE
MzYyMkMwRTUzRjVCNjBBOUMwQTc5RTkyQTUwQTUzMzk4NjBEMzI2Rjk3OTFGOUY1
MTEyQzQyQTUxQjBBMUQ5MDdGRUU5NUI2RjRCREREMzIyREFFNDYwQTk4RjUyRTM1
ODdBNDE5NjgwMUVDM0YwNjQyNEZEMjIxQkI2MjhCNDlFMTlDRkQ5ODA1QTBEM0Mw
NEY3RDc4NkRCN0M0MTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA06sZqFCr397n/JABw02RdDZ8k2ZZJUEd7eCYpSFECA91maYQAIdQ
WzcvLA/8BUbhB+nd0gO7eeq2MVweghDzDTXaHsaGRWCnN+RZfD4PtaY5hCfmRvc4
26+zu3W1FmT/MIhn5RmbWVq6uUjGDt3qmjmUHOk0rtoSfEU86nQSVe32XE52iSk+
KWxyyblAk8akHdN9RRVHxbc3nU/8Cpxwed7YcknKr+OSxG33kIHAIGidNiLA5T9b
YKnAp56SpQpTOYYNMm+Xkfn1ESxCpRsKHZB/7pW29L3dMi2uRgqY9S41h6QZaAHs
PwZCT9Ihu2KLSeGc/ZgFoNPAT314bbfEFwIDAQABo4ICVzCCAlMwHQYDVR0OBBYE
FDH1KWOmYlLGgjv2O7y8bJTMGaDOMB8GA1UdIwQYMBaAFOxe6vODEtNSaPSIMfCU
UWcqa+DeMA4GA1UdDwEB/wQEAwIHgDCBkgYDVR0fBIGKMIGHMIGEoIGBoH+GfXJz
eW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8velRhbXhtaUhtVmQzR2FX
MkFLMmtrb1dheUNINmVRU1c0dERNUFJKNWE4Ny8wL0VDNUVFQUYzODMxMkQzNTI2
OEY0ODgzMUYwOTQ1MTY3MkE2QkUwREUuY3JsMHgGCCsGAQUFBwEBBGwwajBoBggr
BgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9uaWNi
cl9yZXBvLzAvRUM1RUVBRjM4MzEyRDM1MjY4RjQ4ODMxRjA5NDUxNjcyQTZCRTBE
RS5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5jOi8v
cnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8velRhbXhtaUhtVmQzR2FXMkFLMmtr
b1dheUNINmVRU1c0dERNUFJKNWE4Ny8wLzMyMzgzMDM0M2EzNDM4MzczMDNhMzE2
MjMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNjM3MzEzMjMxLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAKARIcAGyMA0GCSqGSIb3DQEBCwUAA4IBAQCVtTQeJvMwPMhD4+h0QjQIQ0pH
lvXn7LLdp7SEi9+Ye59qaafOzebfXrPW913oPVG84heqKTe2pg34u2HbGacR0b0u
8KQm6YnvMOWXVjVyQHZ2e2vudWhJ3ZMeF5Vnk+ivkObYPcUVMfy9+2hVxU7Vgi7V
W0uWeVlAGLCQql101/MmR7yLncyiRjklgrud2YlP3NDjNZamQhYsIaR5afAI7Uvv
GQXfzq1QlH89ys4Ryv4XN0qSy01jkw+97EDzceiXQzLO8tA882CSmFhs1YUAKgpT
R9eShBRz5SL+lYcscbXaWkcbXUS7LlqhbWFr+76GySNjebqSBz0ARfpwm7jm
-----END CERTIFICATE-----