Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3130313a3a2f34382d3438203d3e20323632343539.roa
File:                     323830343a3462303a3130313a3a2f34382d3438203d3e20323632343539.roa (raw, json)
Hash identifier:          wwqNb33v7zuAE5pOBVGhRwxmvsFhSid5BcNJRPgkN0o=
Subject key identifier:   9C:D3:F6:40:7A:59:C2:4C:E0:12:25:9A:11:87:96:88:ED:03:D1:1A
Certificate issuer:       /CN=1C5863392E99A282843AC6397A9E024E91731642
Certificate serial:       7E643E28DC1D489CD3390128C396C6EC74CEA90E
Authority key identifier: 1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3130313a3a2f34382d3438203d3e20323632343539.roa
Signing time:             Fri 23 Jun 2023 13:00:20 +0000
ROA not before:           Fri 23 Jun 2023 12:55:20 +0000
ROA not after:            Fri 21 Jun 2024 13:00:20 +0000
asID:                     262459
IP address blocks:        2804:4b0:101::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:64:3e:28:dc:1d:48:9c:d3:39:01:28:c3:96:c6:ec:74:ce:a9:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5863392E99A282843AC6397A9E024E91731642
        Validity
            Not Before: Jun 23 12:55:20 2023 GMT
            Not After : Jun 21 13:00:20 2024 GMT
        Subject: CN=9CD3F6407A59C24CE012259A11879688ED03D11A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:9f:c2:31:2b:58:55:b2:c5:c0:f3:28:41:2a:
                    e0:93:58:97:a7:80:8c:e1:79:7d:37:e8:ac:7e:8b:
                    b2:76:7b:6f:54:20:5d:77:28:03:a2:b3:c1:09:24:
                    34:cf:29:41:3a:09:7e:2c:66:04:05:b0:5e:f9:d9:
                    92:b5:2b:24:9b:64:3a:88:fc:ac:73:b7:18:01:c6:
                    18:d8:05:e5:ed:01:ce:42:f1:b9:8f:db:08:f6:c8:
                    95:43:41:00:42:5d:31:56:03:d3:5e:b2:5e:24:60:
                    ab:a5:55:6c:b3:c3:f9:55:20:c2:28:26:e4:b6:83:
                    5e:72:9e:d1:4a:b7:8d:67:72:3b:aa:81:5b:f8:18:
                    b5:66:c4:37:8a:c3:56:a3:38:79:4f:95:10:69:83:
                    b5:60:d4:a0:d7:9a:da:39:f1:21:66:11:c6:e1:99:
                    c4:49:c2:26:2b:ec:cc:9c:99:14:ca:be:43:e4:7d:
                    1f:0c:28:59:68:84:e0:1f:79:69:44:49:1c:56:0a:
                    8f:92:ca:d0:12:29:d4:bb:08:4b:1c:42:d6:5f:52:
                    62:7c:8b:89:cb:f9:7c:58:3b:f4:40:e3:d7:cc:78:
                    27:b8:9a:23:17:fa:34:47:e4:cf:35:ee:ce:0a:60:
                    56:fa:d8:78:ec:30:44:e2:3e:c8:76:65:5f:eb:27:
                    16:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D3:F6:40:7A:59:C2:4C:E0:12:25:9A:11:87:96:88:ED:03:D1:1A
            X509v3 Authority Key Identifier:
                keyid:1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/1C5863392E99A282843AC6397A9E024E91731642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3130313a3a2f34382d3438203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0:101::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:2c:b1:81:2d:df:87:0e:8f:ab:b1:b6:73:20:00:8f:fc:6f:
         c3:0d:e3:6b:b7:73:fc:de:9f:9c:38:ed:bc:c1:a2:be:22:6b:
         88:30:41:22:3f:30:cd:d9:a0:fa:40:a7:d4:6c:2a:e1:5e:87:
         97:78:2e:db:85:c0:0e:22:d3:1d:45:79:df:ce:4a:b0:d0:63:
         8a:63:49:22:83:cf:21:ad:8d:53:e2:42:9a:ba:96:72:6c:ba:
         6e:5f:19:80:fb:0d:92:c5:f7:94:b6:e0:3c:8d:18:b9:f7:6f:
         ad:ef:e8:ab:2e:bf:9d:ac:28:be:1b:06:cb:67:92:e2:41:e7:
         14:10:9f:5e:b4:88:c0:90:3a:da:4a:f1:a9:8f:71:52:1f:be:
         a2:e9:e6:12:a7:cc:c2:40:99:d1:0f:b2:5e:8e:be:ff:54:67:
         c2:db:24:63:43:40:96:a9:6a:3d:83:c7:07:68:ea:4b:bd:af:
         49:d0:9f:6e:f4:dc:93:51:7a:61:bb:e6:03:7a:26:dd:1b:3e:
         06:76:6f:37:0a:50:cb:9f:6d:09:d7:15:d3:0c:62:7f:7e:2a:
         87:f1:30:ad:59:10:84:a5:d4:e8:c1:66:6b:80:7f:af:1b:b5:
         bc:26:81:81:ec:82:f0:68:d7:5d:fe:14:31:cb:d0:c8:58:7b:
         f0:a9:3a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----