Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a323030313a3a2f34382d3438203d3e20323632343539.roa
File:                     323830343a3462303a323030313a3a2f34382d3438203d3e20323632343539.roa (raw, json)
Hash identifier:          fZ9L4/G+h3x7pFtCM03k5EkRbS0UhDKhS6LBXB/ZPwU=
Subject key identifier:   0A:30:62:3F:2B:9E:72:4E:39:A9:E6:99:2B:67:10:05:E1:69:BF:F2
Certificate issuer:       /CN=1C5863392E99A282843AC6397A9E024E91731642
Certificate serial:       5D29A137ACDB629C425B17DCCA2CF6A055CC2A8D
Authority key identifier: 1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a323030313a3a2f34382d3438203d3e20323632343539.roa
Signing time:             Fri 12 Jan 2024 20:41:37 +0000
ROA not before:           Fri 12 Jan 2024 20:36:37 +0000
ROA not after:            Fri 10 Jan 2025 20:41:37 +0000
asID:                     262459
IP address blocks:        2804:4b0:2001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:29:a1:37:ac:db:62:9c:42:5b:17:dc:ca:2c:f6:a0:55:cc:2a:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5863392E99A282843AC6397A9E024E91731642
        Validity
            Not Before: Jan 12 20:36:37 2024 GMT
            Not After : Jan 10 20:41:37 2025 GMT
        Subject: CN=0A30623F2B9E724E39A9E6992B671005E169BFF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:06:d5:35:2e:81:ac:5a:aa:9f:2d:0d:3e:6e:
                    48:bc:cc:26:f1:58:91:3d:34:68:fb:ca:a7:ae:2a:
                    ea:b4:ac:74:86:cf:f5:eb:22:ee:24:29:a0:17:f7:
                    f2:1e:ba:e2:47:7f:e0:9b:f5:ca:20:2d:e4:07:5c:
                    8b:a1:30:b8:4e:45:dc:28:fb:00:ad:9d:4f:0b:73:
                    b6:27:68:2a:48:05:d2:07:c0:39:79:db:4a:fb:e2:
                    d4:b7:57:2b:7d:93:a0:5e:ce:e0:fc:be:59:3b:eb:
                    6a:44:fc:ea:57:51:75:7a:46:d7:01:9c:e5:31:c0:
                    e7:b8:ae:b1:d7:6e:a5:b4:da:86:a3:10:aa:7a:97:
                    2b:ae:7b:b0:3d:04:0d:67:39:e2:3d:19:a8:6f:43:
                    90:64:2c:08:35:fa:c7:f9:07:0b:11:98:2e:f7:72:
                    d5:16:57:5f:f2:ea:4c:a0:e5:ae:7d:ce:4f:eb:58:
                    87:c6:41:0c:98:7c:1c:47:4d:b9:20:dc:63:7b:9d:
                    e8:c4:68:1c:7b:3f:96:01:3c:48:05:09:7e:11:8a:
                    3a:1e:34:52:80:d8:80:05:88:14:5d:cf:db:a1:25:
                    bc:83:6c:e8:f1:09:2d:7f:ea:2f:b5:e3:e7:f1:10:
                    d2:1f:a8:d3:fb:96:7c:46:52:d9:0a:93:fe:f8:21:
                    03:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:30:62:3F:2B:9E:72:4E:39:A9:E6:99:2B:67:10:05:E1:69:BF:F2
            X509v3 Authority Key Identifier:
                keyid:1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/1C5863392E99A282843AC6397A9E024E91731642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a323030313a3a2f34382d3438203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0:2001::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:10:92:66:30:8f:92:f2:ff:f3:54:09:2f:ac:50:7e:b2:d7:
         cd:32:2c:07:6b:ba:13:53:7c:5b:3e:e2:3e:2a:5e:01:1f:2c:
         16:5b:04:a5:22:60:68:a8:d7:7e:36:ac:96:a1:b9:77:5a:a8:
         fd:84:f8:09:59:20:01:e3:8f:fd:9b:ca:59:6f:f9:d9:d5:aa:
         10:95:f0:ab:19:cc:62:89:4a:8b:43:f3:c4:13:47:0a:14:13:
         8d:c8:de:04:cb:d2:53:3c:9d:c2:f8:bc:cd:f2:85:ab:ed:cf:
         c3:bd:9a:1a:7f:d4:d1:b1:c6:b4:99:83:e2:95:e4:09:c4:05:
         85:73:3c:a0:19:6e:f6:77:da:10:2d:af:3f:69:4f:2a:9c:0f:
         fe:3b:96:b2:e6:e9:74:35:61:c9:d6:5c:13:f1:7e:78:2f:8b:
         dc:eb:47:4b:36:a9:f4:ca:4c:eb:fc:28:f3:a2:b5:a0:0c:d8:
         19:a2:1c:ac:ef:f0:df:61:4e:2a:02:36:e2:f2:9c:21:ca:99:
         3a:58:ab:d7:e9:cf:86:66:2b:ae:be:c2:61:60:1e:ea:d9:22:
         56:e4:53:02:c2:cc:99:60:cb:f0:24:27:1a:62:57:d3:ba:8c:
         ba:9c:34:22:d9:c7:e7:66:92:f7:60:69:d0:fa:2b:c6:41:a8:
         28:06:8c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----