Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/323830343a343837303a343430303a3a2f33382d3338203d3e20323637313231.roa
File:                     323830343a343837303a343430303a3a2f33382d3338203d3e20323637313231.roa (raw, json)
Hash identifier:          h98Kua0u2W90c/ymzPge0A3d7tFgLH2FcnkhH4By3/g=
Subject key identifier:   0E:15:2C:27:C3:2E:C8:26:93:31:46:84:A9:9F:14:F7:FA:8E:91:34
Certificate issuer:       /CN=EC5EEAF38312D35268F48831F09451672A6BE0DE
Certificate serial:       483ADA1EE58AC21CFFFD1AFCBDC429FBA6BF8082
Authority key identifier: EC:5E:EA:F3:83:12:D3:52:68:F4:88:31:F0:94:51:67:2A:6B:E0:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC5EEAF38312D35268F48831F09451672A6BE0DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/323830343a343837303a343430303a3a2f33382d3338203d3e20323637313231.roa
Signing time:             Thu 29 Jun 2023 20:00:01 +0000
ROA not before:           Thu 29 Jun 2023 19:55:01 +0000
ROA not after:            Thu 27 Jun 2024 20:00:01 +0000
asID:                     267121
IP address blocks:        2804:4870:4400::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:3a:da:1e:e5:8a:c2:1c:ff:fd:1a:fc:bd:c4:29:fb:a6:bf:80:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC5EEAF38312D35268F48831F09451672A6BE0DE
        Validity
            Not Before: Jun 29 19:55:01 2023 GMT
            Not After : Jun 27 20:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fd:56:6d:4e:d2:c1:7c:ce:ea:53:a8:a1:54:
                    4b:2d:13:9d:0d:74:5e:26:35:07:5a:b6:b5:79:3d:
                    e9:b7:b1:41:2c:ce:18:10:f1:81:91:a9:6f:3d:fa:
                    a0:97:cd:96:88:11:51:4e:15:63:26:a6:40:93:de:
                    9a:63:bb:74:ad:1d:b8:ce:3c:28:c7:67:7e:c1:3a:
                    d0:d7:f2:c8:dc:e5:4f:b0:1b:2a:a8:15:3e:3f:2b:
                    f7:9c:f9:d5:b2:d6:15:3c:ba:a9:66:9f:85:52:eb:
                    18:87:9c:31:74:3e:8a:8a:74:5a:fd:4b:e2:1b:31:
                    e8:93:56:d7:c6:e9:3d:7b:14:67:37:1e:a3:fd:9a:
                    b3:63:d2:0f:c5:83:40:92:64:9b:52:d0:93:93:ec:
                    a0:9e:af:b0:e7:f6:9f:94:40:e6:d7:29:ee:58:51:
                    71:e8:9c:52:8f:04:db:c5:58:54:8e:62:22:c4:b4:
                    fe:7e:3c:33:ca:a4:b5:ec:dd:f0:b0:ee:6a:66:91:
                    92:9e:e2:01:21:11:0f:44:7d:b9:4c:85:76:31:c8:
                    2c:12:ef:2b:7e:c6:b0:15:38:33:9f:4b:38:ad:69:
                    e7:dd:da:51:15:a3:0d:d4:04:b1:cd:4c:4a:16:6e:
                    74:61:00:7b:1a:e7:0b:23:08:b5:80:3b:67:6b:61:
                    08:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:15:2C:27:C3:2E:C8:26:93:31:46:84:A9:9F:14:F7:FA:8E:91:34
            X509v3 Authority Key Identifier:
                keyid:EC:5E:EA:F3:83:12:D3:52:68:F4:88:31:F0:94:51:67:2A:6B:E0:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/EC5EEAF38312D35268F48831F09451672A6BE0DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC5EEAF38312D35268F48831F09451672A6BE0DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/323830343a343837303a343430303a3a2f33382d3338203d3e20323637313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4870:4400::/38

    Signature Algorithm: sha256WithRSAEncryption
         77:3b:31:7d:cc:46:6b:e4:5c:c8:6c:4e:5e:f4:79:2a:05:cd:
         1b:a4:87:80:ec:a8:18:7d:9f:b1:bf:0d:bb:66:84:f6:3f:9a:
         b8:63:aa:7f:8c:44:89:9a:1e:dd:39:de:a1:77:6a:9c:8b:d0:
         9f:23:c9:be:91:37:0b:cc:19:51:66:2a:da:b0:83:0a:78:43:
         f6:5e:ae:d1:0d:2a:4e:7d:a6:01:94:69:a5:cc:5c:77:01:20:
         75:63:cf:ff:f1:85:98:2c:0d:72:95:23:4c:6d:42:9d:59:65:
         93:0f:30:5b:bf:8e:24:2d:92:4d:53:2b:24:99:12:5e:ab:23:
         47:23:df:29:a1:0a:f3:b1:4c:a4:55:d0:e0:fc:5c:ad:f0:59:
         3c:40:d4:85:d4:50:6f:9a:21:01:46:f5:8f:08:31:a5:15:62:
         01:52:bb:e3:8f:ed:90:b4:c5:18:cb:f9:73:6f:03:07:e2:b6:
         84:b4:f6:71:a0:bb:92:ac:51:73:79:55:eb:f7:59:44:3d:f2:
         5a:d7:4d:3f:73:bb:06:95:85:9c:f6:74:b4:b0:a4:f7:5a:f6:
         ef:76:d5:fe:56:c0:3e:93:69:f0:e0:bd:1c:e7:93:cd:2e:e2:
         d4:06:b9:0b:71:1f:c1:ee:7a:7f:43:e7:6c:7e:92:82:92:51:
         31:85:aa:db
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----