Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/323830343a343837303a3163323a3a2f34382d3438203d3e20323637313231.roa
File:                     323830343a343837303a3163323a3a2f34382d3438203d3e20323637313231.roa (raw, json)
Hash identifier:          WeBBIQ/VvA4LEMw67OToDtkUMVdBYNxJA+H12q34Nv4=
Subject key identifier:   5E:D5:F0:D1:7D:A4:4A:9B:16:16:95:39:6D:C7:D5:3F:C4:4B:64:BE
Certificate issuer:       /CN=EC5EEAF38312D35268F48831F09451672A6BE0DE
Certificate serial:       312ECAAAA4AF8423CB75E845E816E1E2BCFE85CD
Authority key identifier: EC:5E:EA:F3:83:12:D3:52:68:F4:88:31:F0:94:51:67:2A:6B:E0:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC5EEAF38312D35268F48831F09451672A6BE0DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/323830343a343837303a3163323a3a2f34382d3438203d3e20323637313231.roa
Signing time:             Thu 29 Jun 2023 20:00:01 +0000
ROA not before:           Thu 29 Jun 2023 19:55:01 +0000
ROA not after:            Thu 27 Jun 2024 20:00:01 +0000
asID:                     267121
IP address blocks:        2804:4870:1c2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:2e:ca:aa:a4:af:84:23:cb:75:e8:45:e8:16:e1:e2:bc:fe:85:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC5EEAF38312D35268F48831F09451672A6BE0DE
        Validity
            Not Before: Jun 29 19:55:01 2023 GMT
            Not After : Jun 27 20:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:89:1b:b0:00:51:7b:5b:24:60:fc:1f:ca:cc:
                    b1:39:e0:14:e4:30:5f:64:ab:b0:c8:f9:c8:83:be:
                    7c:95:aa:5e:e9:f3:c9:19:c7:1b:86:5a:11:34:2c:
                    6f:ec:99:f3:29:7e:c4:4e:c0:ea:aa:c8:36:35:f6:
                    b2:c9:1c:8d:f3:08:24:3b:3f:a8:7d:08:ad:6c:bd:
                    de:4b:7d:2b:2e:e7:0c:ec:73:b8:98:77:72:60:a8:
                    0c:81:34:59:8b:c8:78:56:b5:55:81:0e:3b:e2:15:
                    5c:4d:c6:69:76:ef:04:c0:07:16:30:c8:d1:4c:33:
                    e7:69:ea:3e:d8:24:bf:43:12:81:7c:55:6b:a7:c7:
                    86:e6:63:15:80:dc:3d:fd:dc:4d:14:83:90:ea:5e:
                    c3:fd:fd:b3:0d:ad:2f:80:af:64:19:78:e4:38:4b:
                    58:99:41:40:22:ed:d6:64:c2:d5:9d:2f:39:62:0b:
                    2b:9d:70:4c:98:de:fc:7e:fb:4a:2c:95:44:b9:3a:
                    bd:a8:f7:e1:a1:1d:37:bb:5d:2f:4d:e2:15:b2:4b:
                    c8:84:c6:3a:cb:71:40:29:eb:f2:0a:a5:cd:f5:4a:
                    f2:d2:a9:26:7f:17:63:2d:d1:e0:67:e1:1c:36:19:
                    9f:8c:06:a5:ac:f9:2f:9e:b4:15:cd:33:6f:c7:5b:
                    7d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D5:F0:D1:7D:A4:4A:9B:16:16:95:39:6D:C7:D5:3F:C4:4B:64:BE
            X509v3 Authority Key Identifier:
                keyid:EC:5E:EA:F3:83:12:D3:52:68:F4:88:31:F0:94:51:67:2A:6B:E0:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/EC5EEAF38312D35268F48831F09451672A6BE0DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC5EEAF38312D35268F48831F09451672A6BE0DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/323830343a343837303a3163323a3a2f34382d3438203d3e20323637313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4870:1c2::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:7c:35:80:e9:96:e3:bd:44:56:55:91:de:ed:6f:95:44:99:
         e7:68:7b:f3:c6:34:e3:00:9d:a0:c1:1b:1e:c9:9d:7e:e9:f7:
         ae:90:5e:7e:0e:9c:53:c7:22:c5:d6:2a:b9:cb:c0:2b:f3:fd:
         b6:8d:2d:2c:18:62:62:73:10:71:74:3e:fc:c9:d5:5d:87:47:
         1a:96:dc:b8:6b:03:93:25:39:88:49:55:7c:e6:e4:e7:84:9d:
         1d:2a:f6:22:40:43:25:ea:18:ff:79:db:03:a1:e4:55:ed:d8:
         cd:55:9a:cc:24:f7:cb:65:02:aa:f4:ff:eb:b2:c9:23:1b:8f:
         0f:02:e9:96:83:f1:58:81:09:ae:d3:73:df:df:d9:cc:9b:fb:
         f4:ed:5e:e5:8e:3c:aa:7e:8b:e1:65:6d:4e:d7:2b:f4:78:eb:
         2e:3e:de:a3:08:4b:f5:9b:4f:46:df:a4:5c:d5:8e:ef:55:9a:
         02:23:78:12:03:c5:79:58:53:51:0d:1d:80:be:a6:85:c0:a8:
         9d:d2:d0:bd:ac:da:8b:91:76:9c:69:47:73:45:1d:37:ef:34:
         14:0c:c4:28:c0:a1:1f:f6:29:59:ca:fb:94:eb:50:30:7e:11:
         df:ea:7b:f2:76:2e:6c:bd:70:72:58:0c:77:bf:1f:2a:cc:ab:
         a8:0a:ce:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----