Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/323830343a343837303a373030303a3a2f33382d3338203d3e20323637313231.roa
File:                     323830343a343837303a373030303a3a2f33382d3338203d3e20323637313231.roa (raw, json)
Hash identifier:          qKukDS/aYP35KOWcAIBxJb0OngTdA1dcnXR/jORT4LY=
Subject key identifier:   AF:5D:56:34:21:C6:BA:97:3E:B6:11:96:7B:2A:85:10:4A:10:17:8E
Certificate issuer:       /CN=EC5EEAF38312D35268F48831F09451672A6BE0DE
Certificate serial:       69D2834BBB71E6D41AD2E4E45EFAC8940E042AD8
Authority key identifier: EC:5E:EA:F3:83:12:D3:52:68:F4:88:31:F0:94:51:67:2A:6B:E0:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC5EEAF38312D35268F48831F09451672A6BE0DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/323830343a343837303a373030303a3a2f33382d3338203d3e20323637313231.roa
Signing time:             Thu 29 Jun 2023 20:00:01 +0000
ROA not before:           Thu 29 Jun 2023 19:55:01 +0000
ROA not after:            Thu 27 Jun 2024 20:00:01 +0000
asID:                     267121
IP address blocks:        2804:4870:7000::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d2:83:4b:bb:71:e6:d4:1a:d2:e4:e4:5e:fa:c8:94:0e:04:2a:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC5EEAF38312D35268F48831F09451672A6BE0DE
        Validity
            Not Before: Jun 29 19:55:01 2023 GMT
            Not After : Jun 27 20:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5b:a2:5d:1f:47:3a:75:0d:07:47:69:51:0e:
                    12:53:32:d3:d1:94:a9:ae:bf:68:23:e2:dd:08:ef:
                    43:b8:67:b1:23:5e:bc:8e:12:c9:ba:2f:7f:3c:de:
                    ec:87:af:01:21:ea:f9:7c:5c:a0:a3:5f:db:0c:88:
                    16:79:ce:1a:34:2e:83:d6:b5:02:0c:9d:16:b4:e2:
                    68:fc:58:39:f3:4d:f2:f1:93:53:b6:eb:a9:19:85:
                    a2:81:f1:f1:3b:a2:f4:6a:10:bf:90:84:6f:b9:60:
                    cb:c0:7b:99:be:64:f8:10:00:3a:ae:2f:c7:40:1d:
                    51:32:8c:ed:67:b9:dd:34:5d:75:2e:d2:ec:f7:c9:
                    b9:fd:08:80:d8:e9:05:ff:52:d8:af:75:b2:ba:2d:
                    41:69:02:49:43:e2:5d:4b:23:aa:ec:7c:82:df:bf:
                    ff:75:10:f1:cb:ea:a7:29:de:de:fb:22:e9:bc:1b:
                    74:a0:c0:bd:3f:0c:05:4c:f1:be:32:55:64:5d:8b:
                    77:5d:d5:bd:aa:67:54:c3:23:a9:c7:9f:ce:8a:ae:
                    56:3e:33:c0:f8:d3:da:86:67:65:0a:3a:91:e0:2b:
                    ec:91:87:86:96:b1:66:3f:db:d7:12:75:69:86:23:
                    4d:54:d5:5f:11:0a:9b:54:a6:5a:1a:d1:65:58:ff:
                    06:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:5D:56:34:21:C6:BA:97:3E:B6:11:96:7B:2A:85:10:4A:10:17:8E
            X509v3 Authority Key Identifier:
                keyid:EC:5E:EA:F3:83:12:D3:52:68:F4:88:31:F0:94:51:67:2A:6B:E0:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/EC5EEAF38312D35268F48831F09451672A6BE0DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC5EEAF38312D35268F48831F09451672A6BE0DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/323830343a343837303a373030303a3a2f33382d3338203d3e20323637313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4870:7000::/38

    Signature Algorithm: sha256WithRSAEncryption
         2b:4c:6f:b5:42:7d:b1:a7:94:f8:54:2f:9e:3f:48:00:5d:00:
         3f:e4:ad:5d:82:ab:2a:14:f0:32:cb:fa:6c:99:c6:7a:33:d5:
         bb:8d:6b:9b:7e:ba:94:a0:16:41:5a:d9:55:c2:02:e0:42:a9:
         10:b0:5a:5b:81:a1:db:b0:71:b1:b0:ef:af:31:be:63:fa:82:
         8b:14:ec:d6:c1:01:2d:79:3d:3a:96:ec:f5:09:8b:f0:f9:8e:
         fa:10:44:dc:c5:64:10:58:77:10:74:42:bb:9c:ab:43:2a:cb:
         15:08:b6:b9:d7:73:ec:18:a7:1b:bf:51:97:0d:5f:10:58:63:
         ba:13:23:04:85:c8:79:de:35:f6:64:0e:eb:43:ab:3e:db:f4:
         e4:df:53:cd:92:77:b5:1f:d0:7b:d0:57:11:39:f2:a7:e1:55:
         57:f1:23:00:07:1f:7f:df:db:1d:16:26:7f:08:be:fb:67:14:
         e6:e5:2f:38:be:18:67:c5:f7:bd:7b:9c:d4:ab:24:9d:41:6b:
         b7:83:65:89:8e:53:65:8e:db:e0:72:08:10:38:a5:20:a2:e9:
         ed:1f:c4:4e:00:73:db:8b:de:e2:72:40:c5:33:d3:ae:a9:05:
         0b:f6:64:15:a4:23:d5:d4:3b:41:d6:af:39:72:ac:ae:34:5c:
         b8:a6:31:81
-----BEGIN CERTIFICATE-----
MIIHSjCCBjKgAwIBAgIUadKDS7tx5tQa0uTkXvrIlA4EKtgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM1RUVBRjM4MzEyRDM1MjY4RjQ4ODMxRjA5NDUxNjcy
QTZCRTBERTAeFw0yMzA2MjkxOTU1MDFaFw0yNDA2MjcyMDAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUE1QkEyNUQxRjQ3M0E3NTBE
MDc0NzY5NTEwRTEyNTMzMkQzRDE5NEE5QUVCRjY4MjNFMkREMDhFRjQzQjg2N0Ix
MjM1RUJDOEUxMkM5QkEyRjdGM0NERUVDODdBRjAxMjFFQUY5N0M1Q0EwQTM1RkRC
MEM4ODE2NzlDRTFBMzQyRTgzRDZCNTAyMEM5RDE2QjRFMjY4RkM1ODM5RjM0REYy
RjE5MzUzQjZFQkE5MTk4NUEyODFGMUYxM0JBMkY0NkExMEJGOTA4NDZGQjk2MENC
QzA3Qjk5QkU2NEY4MTAwMDNBQUUyRkM3NDAxRDUxMzI4Q0VENjdCOUREMzQ1RDc1
MkVEMkVDRjdDOUI5RkQwODgwRDhFOTA1RkY1MkQ4QUY3NUIyQkEyRDQxNjkwMjQ5
NDNFMjVENEIyM0FBRUM3QzgyREZCRkZGNzUxMEYxQ0JFQUE3MjlERURFRkIyMkU5
QkMxQjc0QTBDMEJEM0YwQzA1NENGMUJFMzI1NTY0NUQ4Qjc3NURENUJEQUE2NzU0
QzMyM0E5Qzc5RkNFOEFBRTU2M0UzM0MwRjhEM0RBODY2NzY1MEEzQTkxRTAyQkVD
OTE4Nzg2OTZCMTY2M0ZEQkQ3MTI3NTY5ODYyMzRENTRENTVGMTEwQTlCNTRBNjVB
MUFEMTY1NThGRjA2MTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqluiXR9HOnUNB0dpUQ4SUzLT0ZSprr9oI+LdCO9DuGexI168jhLJ
ui9/PN7sh68BIer5fFygo1/bDIgWec4aNC6D1rUCDJ0WtOJo/Fg5803y8ZNTtuup
GYWigfHxO6L0ahC/kIRvuWDLwHuZvmT4EAA6ri/HQB1RMoztZ7ndNF11LtLs98m5
/QiA2OkF/1LYr3Wyui1BaQJJQ+JdSyOq7HyC37//dRDxy+qnKd7e+yLpvBt0oMC9
PwwFTPG+MlVkXYt3XdW9qmdUwyOpx5/Oiq5WPjPA+NPahmdlCjqR4CvskYeGlrFm
P9vXEnVphiNNVNVfEQqbVKZaGtFlWP8GFQIDAQABo4ICWDCCAlQwHQYDVR0OBBYE
FK9dVjQhxrqXPrYRlnsqhRBKEBeOMB8GA1UdIwQYMBaAFOxe6vODEtNSaPSIMfCU
UWcqa+DeMA4GA1UdDwEB/wQEAwIHgDCBkgYDVR0fBIGKMIGHMIGEoIGBoH+GfXJz
eW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8velRhbXhtaUhtVmQzR2FX
MkFLMmtrb1dheUNINmVRU1c0dERNUFJKNWE4Ny8wL0VDNUVFQUYzODMxMkQzNTI2
OEY0ODgzMUYwOTQ1MTY3MkE2QkUwREUuY3JsMHgGCCsGAQUFBwEBBGwwajBoBggr
BgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9uaWNi
cl9yZXBvLzAvRUM1RUVBRjM4MzEyRDM1MjY4RjQ4ODMxRjA5NDUxNjcyQTZCRTBE
RS5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5jOi8v
cnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8velRhbXhtaUhtVmQzR2FXMkFLMmtr
b1dheUNINmVRU1c0dERNUFJKNWE4Ny8wLzMyMzgzMDM0M2EzNDM4MzczMDNhMzcz
MDMwMzAzYTNhMmYzMzM4MmQzMzM4MjAzZDNlMjAzMjM2MzczMTMyMzEucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgIoBEhwcDANBgkqhkiG9w0BAQsFAAOCAQEAK0xvtUJ9saeU+FQvnj9IAF0A
P+StXYKrKhTwMsv6bJnGejPVu41rm366lKAWQVrZVcIC4EKpELBaW4Gh27BxsbDv
rzG+Y/qCixTs1sEBLXk9Opbs9QmL8PmO+hBE3MVkEFh3EHRCu5yrQyrLFQi2uddz
7BinG79Rlw1fEFhjuhMjBIXIed419mQO60OrPtv05N9TzZJ3tR/Qe9BXETnyp+FV
V/EjAAcff9/bHRYmfwi++2cU5uUvOL4YZ8X3vXuc1KsknUFrt4NliY5TZY7b4HII
EDilIKLp7R/ETgBz24ve4nJAxTPTrqkFC/ZkFaQj1dQ7QdavOXKsrjRcuKYxgQ==
-----END CERTIFICATE-----