Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/323830343a343837303a333030303a3a2f34302d3430203d3e20323637313231.roa
File:                     323830343a343837303a333030303a3a2f34302d3430203d3e20323637313231.roa (raw, json)
Hash identifier:          EFZ99cqChT9g1+CEeterEcP5uxjJderGbP/JH/VbNHk=
Subject key identifier:   E1:49:3D:9D:B1:DE:07:E4:D3:F1:09:3C:6B:CD:BF:C8:A1:A6:B4:31
Certificate issuer:       /CN=EC5EEAF38312D35268F48831F09451672A6BE0DE
Certificate serial:       78FDAE92D963DA78E0B57F211F7087FBA8BDC42F
Authority key identifier: EC:5E:EA:F3:83:12:D3:52:68:F4:88:31:F0:94:51:67:2A:6B:E0:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC5EEAF38312D35268F48831F09451672A6BE0DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/323830343a343837303a333030303a3a2f34302d3430203d3e20323637313231.roa
Signing time:             Fri 08 Sep 2023 00:24:29 +0000
ROA not before:           Fri 08 Sep 2023 00:19:29 +0000
ROA not after:            Fri 06 Sep 2024 00:24:29 +0000
asID:                     267121
IP address blocks:        2804:4870:3000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:fd:ae:92:d9:63:da:78:e0:b5:7f:21:1f:70:87:fb:a8:bd:c4:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC5EEAF38312D35268F48831F09451672A6BE0DE
        Validity
            Not Before: Sep  8 00:19:29 2023 GMT
            Not After : Sep  6 00:24:29 2024 GMT
        Subject: CN=3082010A0282010100C211D313B3574B24ADA8B24E0E335A35984D571152CA7DABA894A450E6BA31B61DA06E616F136562B100EDE641EE99AACE3224AED4BC31B9EFD7B4AD731696BCB46540C39D9DDE50C47EC794E10F8113535EC4ADDBE1F19A4D9E618E0101A751D9C47816FC56C3863370664055271C5EBD1296A40D3E91E92B94C2955231D11507A4BAE34201803B7017EF51983D37BDF67942415CE4CC42CCA8EBCA109D07EA8F6A34E332CBCDEF38A6B3B9114524EA01B78BB6C1A610A726C396CAE5EE14737B9FFC97FC512BE02B361F492C81E15AB272D46368FD7A02A29A84E369B027A1CE3B2B2FD55241971A4D6CB87FEC46DF0A57AD1C279B94455639A34A774C9B9D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:11:d3:13:b3:57:4b:24:ad:a8:b2:4e:0e:33:
                    5a:35:98:4d:57:11:52:ca:7d:ab:a8:94:a4:50:e6:
                    ba:31:b6:1d:a0:6e:61:6f:13:65:62:b1:00:ed:e6:
                    41:ee:99:aa:ce:32:24:ae:d4:bc:31:b9:ef:d7:b4:
                    ad:73:16:96:bc:b4:65:40:c3:9d:9d:de:50:c4:7e:
                    c7:94:e1:0f:81:13:53:5e:c4:ad:db:e1:f1:9a:4d:
                    9e:61:8e:01:01:a7:51:d9:c4:78:16:fc:56:c3:86:
                    33:70:66:40:55:27:1c:5e:bd:12:96:a4:0d:3e:91:
                    e9:2b:94:c2:95:52:31:d1:15:07:a4:ba:e3:42:01:
                    80:3b:70:17:ef:51:98:3d:37:bd:f6:79:42:41:5c:
                    e4:cc:42:cc:a8:eb:ca:10:9d:07:ea:8f:6a:34:e3:
                    32:cb:cd:ef:38:a6:b3:b9:11:45:24:ea:01:b7:8b:
                    b6:c1:a6:10:a7:26:c3:96:ca:e5:ee:14:73:7b:9f:
                    fc:97:fc:51:2b:e0:2b:36:1f:49:2c:81:e1:5a:b2:
                    72:d4:63:68:fd:7a:02:a2:9a:84:e3:69:b0:27:a1:
                    ce:3b:2b:2f:d5:52:41:97:1a:4d:6c:b8:7f:ec:46:
                    df:0a:57:ad:1c:27:9b:94:45:56:39:a3:4a:77:4c:
                    9b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:49:3D:9D:B1:DE:07:E4:D3:F1:09:3C:6B:CD:BF:C8:A1:A6:B4:31
            X509v3 Authority Key Identifier:
                keyid:EC:5E:EA:F3:83:12:D3:52:68:F4:88:31:F0:94:51:67:2A:6B:E0:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/EC5EEAF38312D35268F48831F09451672A6BE0DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC5EEAF38312D35268F48831F09451672A6BE0DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/323830343a343837303a333030303a3a2f34302d3430203d3e20323637313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4870:3000::/40

    Signature Algorithm: sha256WithRSAEncryption
         1f:32:9a:c7:01:3c:08:d2:41:9d:89:fe:6d:0f:bf:2c:26:ac:
         6e:52:da:d6:04:e0:76:f9:a7:22:bd:09:ac:ea:c6:1a:83:92:
         19:5a:78:fe:b4:90:fc:38:cc:53:81:ed:12:d0:83:ba:d6:8e:
         54:e4:0b:26:5b:aa:df:89:76:1c:b1:32:34:65:9e:8e:73:07:
         33:27:c4:7f:b6:d6:61:6f:48:27:98:86:ca:bc:4d:49:c7:06:
         fb:e7:53:c3:99:db:10:cf:fa:61:7f:f9:6e:2a:27:5b:94:72:
         29:ff:87:e2:bd:93:6a:6f:c8:5b:83:c0:3d:ff:9b:bd:a5:fa:
         98:18:45:3a:12:df:b0:e8:0b:4a:e8:db:83:f2:25:41:f1:f1:
         53:a2:95:d4:2b:77:46:d2:6d:3e:16:66:d5:43:dc:6f:d3:e2:
         cc:13:bc:1b:1a:f7:93:11:e2:7a:35:6b:63:b6:1b:8e:dd:ff:
         1d:fc:85:0a:15:f0:cd:70:ad:32:84:7a:19:1a:b5:a5:a0:67:
         9f:c9:d0:d7:dd:f5:e8:07:23:8e:64:f9:20:ee:dd:77:00:26:
         95:c7:45:5b:da:3a:64:12:6a:87:93:5e:f7:fc:eb:16:6a:81:
         58:04:69:88:f1:7d:3f:d6:20:1a:0d:2f:7d:f1:4a:30:96:d3:
         87:b6:06:4e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----