Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/323830343a343837303a3163313a3a2f34382d3438203d3e20323637313231.roa
File:                     323830343a343837303a3163313a3a2f34382d3438203d3e20323637313231.roa (raw, json)
Hash identifier:          VA5/D8As/xuelJMjyBh9iFW/MFyZLlv21pGfi9P+NP4=
Subject key identifier:   12:50:B8:AE:84:E4:27:6E:87:E2:8E:A1:16:93:CD:03:5C:5D:76:07
Certificate issuer:       /CN=EC5EEAF38312D35268F48831F09451672A6BE0DE
Certificate serial:       72182598431E382ED8E94A7B488B42D40E4D0AAB
Authority key identifier: EC:5E:EA:F3:83:12:D3:52:68:F4:88:31:F0:94:51:67:2A:6B:E0:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC5EEAF38312D35268F48831F09451672A6BE0DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/323830343a343837303a3163313a3a2f34382d3438203d3e20323637313231.roa
Signing time:             Thu 29 Jun 2023 20:00:01 +0000
ROA not before:           Thu 29 Jun 2023 19:55:01 +0000
ROA not after:            Thu 27 Jun 2024 20:00:01 +0000
asID:                     267121
IP address blocks:        2804:4870:1c1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:18:25:98:43:1e:38:2e:d8:e9:4a:7b:48:8b:42:d4:0e:4d:0a:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC5EEAF38312D35268F48831F09451672A6BE0DE
        Validity
            Not Before: Jun 29 19:55:01 2023 GMT
            Not After : Jun 27 20:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:32:79:83:d7:3e:d2:95:e3:67:20:82:29:26:
                    92:72:d9:56:1f:d8:53:f8:95:fd:d2:ca:5b:07:92:
                    58:27:52:35:af:33:b6:76:52:61:42:91:4d:1b:99:
                    15:a0:8a:6a:a7:b4:41:0f:3a:0c:41:25:37:95:ec:
                    a2:32:fd:25:e3:4a:f1:b9:ba:c8:1a:ad:3c:15:41:
                    bc:e5:49:be:4c:61:78:21:c7:87:f0:33:77:72:95:
                    01:60:ba:60:d8:ca:68:a3:f2:38:6d:77:5d:95:79:
                    50:f7:28:9f:3b:8c:76:0b:bf:d0:20:fe:a5:e5:c5:
                    29:e2:fe:e6:6d:ed:d3:ef:20:f9:71:55:66:48:30:
                    46:0c:af:3d:af:a2:52:58:bb:b0:d4:75:08:f6:10:
                    58:94:e3:05:a0:1c:cd:c8:f9:ed:da:8e:5f:5f:b2:
                    68:db:60:9d:28:ae:fd:10:52:0e:45:55:df:32:cb:
                    f0:fb:ac:e6:a2:6b:82:94:f2:ad:25:14:f6:f3:9b:
                    c3:e0:04:9c:a1:4c:f7:a3:f7:d4:0d:af:ed:5d:d2:
                    d7:ca:f4:53:95:fd:09:a2:22:94:9a:fb:6d:55:63:
                    3a:36:00:44:d2:1f:f5:f8:82:5f:44:fe:74:54:ef:
                    19:02:97:7d:91:00:b0:d2:2b:34:61:de:3f:0b:d9:
                    24:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:50:B8:AE:84:E4:27:6E:87:E2:8E:A1:16:93:CD:03:5C:5D:76:07
            X509v3 Authority Key Identifier:
                keyid:EC:5E:EA:F3:83:12:D3:52:68:F4:88:31:F0:94:51:67:2A:6B:E0:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/EC5EEAF38312D35268F48831F09451672A6BE0DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC5EEAF38312D35268F48831F09451672A6BE0DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/323830343a343837303a3163313a3a2f34382d3438203d3e20323637313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4870:1c1::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:89:ea:f3:f1:80:81:95:a5:4a:3e:f2:2a:9a:c4:78:79:5d:
         2e:4c:a6:3e:ae:ac:90:1f:ac:a0:04:97:06:3d:ad:15:83:0e:
         db:ba:24:83:63:35:88:77:0d:af:ff:7e:fc:08:74:c3:b7:8e:
         51:b9:97:0c:7d:70:06:e2:d6:c6:05:34:7c:7d:a4:03:40:d5:
         19:20:72:16:6e:ce:a2:18:22:80:9a:35:ed:38:05:0b:0d:17:
         6c:4b:63:aa:69:1a:21:72:fb:1f:8e:ff:a8:41:03:7f:e1:bd:
         92:73:b3:2f:43:70:d3:ec:7b:ca:77:e6:d3:7a:bd:d6:d7:70:
         9f:02:c1:fb:6c:99:2e:a4:d9:e0:9e:ca:93:7f:bc:46:79:78:
         11:7d:56:b2:18:b4:0e:f8:b9:a5:87:17:22:58:59:ec:dc:c0:
         12:a1:b8:cc:f9:84:29:7f:e5:9f:59:ba:6e:3e:51:8a:f4:d1:
         90:f6:01:64:93:a3:6c:3f:30:a5:69:8f:23:16:9e:01:27:a0:
         b7:21:95:d6:13:c9:e7:77:ce:6a:de:8a:0b:cc:c2:21:dd:7c:
         49:be:10:62:4d:4d:54:68:7b:39:1b:74:5e:7f:a2:9d:53:e9:
         08:39:4d:f4:f0:ca:1c:67:58:7c:5d:5a:00:01:96:57:b7:4f:
         32:5b:b7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----