Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/323830343a343837303a3163303a3a2f34382d3438203d3e20323637313231.roa
File:                     323830343a343837303a3163303a3a2f34382d3438203d3e20323637313231.roa (raw, json)
Hash identifier:          PBrtKntNqe+quXVrs6pRCP35v/8T1OkmYMz/nip77gY=
Subject key identifier:   B5:FD:44:AA:C6:41:EC:AF:4E:D3:F3:08:3B:6F:DB:DA:F8:6F:28:87
Certificate issuer:       /CN=EC5EEAF38312D35268F48831F09451672A6BE0DE
Certificate serial:       55C3D622536B7EBF4708421B2BD1EC125A6D4489
Authority key identifier: EC:5E:EA:F3:83:12:D3:52:68:F4:88:31:F0:94:51:67:2A:6B:E0:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC5EEAF38312D35268F48831F09451672A6BE0DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/323830343a343837303a3163303a3a2f34382d3438203d3e20323637313231.roa
Signing time:             Thu 29 Jun 2023 20:00:00 +0000
ROA not before:           Thu 29 Jun 2023 19:55:00 +0000
ROA not after:            Thu 27 Jun 2024 20:00:00 +0000
asID:                     267121
IP address blocks:        2804:4870:1c0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:c3:d6:22:53:6b:7e:bf:47:08:42:1b:2b:d1:ec:12:5a:6d:44:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC5EEAF38312D35268F48831F09451672A6BE0DE
        Validity
            Not Before: Jun 29 19:55:00 2023 GMT
            Not After : Jun 27 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:12:15:11:b7:d5:ab:4f:39:b6:49:75:0d:4c:
                    6e:98:80:85:88:9c:3b:a2:1b:64:ff:e3:00:29:db:
                    4f:d0:78:10:56:66:87:6b:7c:cf:dc:92:a3:65:d2:
                    c7:25:68:e8:cc:67:4e:e7:8b:70:1c:87:c1:2a:2c:
                    e3:92:02:67:a7:33:25:8d:1b:3e:8e:55:01:bc:0b:
                    9e:e4:71:5d:75:84:8f:8f:e8:6e:19:91:97:14:b2:
                    02:11:d8:50:dd:dc:35:bf:f7:94:46:8c:59:ca:de:
                    19:62:d9:d5:ac:4c:af:4f:a6:e9:51:54:cc:be:f3:
                    b8:07:49:d9:30:50:d2:4c:31:00:5b:19:4b:e1:5a:
                    b6:2e:34:e1:65:5e:f1:c7:d9:56:14:27:c6:45:1a:
                    00:67:5a:7a:8b:06:4c:b2:ff:99:0a:81:f9:5c:51:
                    5e:e2:45:0c:7d:10:12:ae:d9:79:9c:29:09:8c:1e:
                    8d:50:23:c1:f8:20:17:d5:f4:55:02:32:b0:c0:40:
                    af:2b:b4:6a:9b:51:3e:8b:a8:ed:00:ae:81:a9:d3:
                    fc:69:22:ff:c8:c4:cc:a0:a7:fd:6e:46:e5:42:95:
                    53:bc:6c:65:c8:df:55:49:fc:17:db:c6:f9:e4:13:
                    b2:b7:6e:f5:e6:2f:a9:1b:fc:d4:dd:1c:82:10:6c:
                    0f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:FD:44:AA:C6:41:EC:AF:4E:D3:F3:08:3B:6F:DB:DA:F8:6F:28:87
            X509v3 Authority Key Identifier:
                keyid:EC:5E:EA:F3:83:12:D3:52:68:F4:88:31:F0:94:51:67:2A:6B:E0:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/EC5EEAF38312D35268F48831F09451672A6BE0DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC5EEAF38312D35268F48831F09451672A6BE0DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/323830343a343837303a3163303a3a2f34382d3438203d3e20323637313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4870:1c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:8e:a2:f3:39:b1:e5:3a:e0:61:9a:c9:4b:cf:8e:fe:59:03:
         31:b9:a1:de:4c:6a:48:3e:a5:b6:8f:2b:86:b8:55:56:0a:86:
         9f:da:e6:6c:99:36:49:24:e9:80:3d:14:59:a5:c6:df:f0:2c:
         9d:1d:7b:fb:e8:15:8f:16:f7:76:f8:ac:5b:94:53:7b:65:17:
         9e:17:92:a3:82:ee:6e:c0:2b:4b:6d:11:9a:4f:42:c3:d6:6d:
         e0:cc:1c:c1:e7:b6:77:d7:2f:53:49:9e:a0:c9:0b:6e:75:88:
         18:d6:1f:40:96:27:4c:64:94:e0:2a:c0:5d:68:1b:fc:8b:34:
         f0:e2:da:69:27:e0:e2:e9:cd:7f:0b:a4:d8:3c:ab:31:4d:4b:
         c4:54:9a:6c:22:b4:39:d9:de:3d:09:3b:c9:69:b9:67:9a:06:
         ca:99:10:4b:63:c1:c9:22:54:b2:27:b8:f0:76:aa:76:fd:02:
         23:61:e1:23:aa:dc:a4:8b:8b:84:da:20:ab:f6:af:20:7a:ee:
         c8:09:0a:59:4d:cf:c2:28:bb:a2:17:d3:53:46:2d:22:f2:0e:
         ee:17:b9:62:f7:76:e8:57:3e:43:af:80:1b:92:51:79:9c:20:
         0c:bf:07:36:57:89:5e:7e:24:11:ca:94:53:25:cb:e3:52:f6:
         80:21:df:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----