Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3465303a3a2f34362d3436203d3e20323632343539.roa
File:                     323830343a3462303a3465303a3a2f34362d3436203d3e20323632343539.roa (raw, json)
Hash identifier:          ocnJBa8maD9bS9X+P9IjIeyst0d2p1yZTg2Pbx5LiUc=
Subject key identifier:   1C:21:88:C8:60:CA:EE:B1:52:43:76:C3:00:8C:1F:D3:AC:89:96:AB
Certificate issuer:       /CN=1C5863392E99A282843AC6397A9E024E91731642
Certificate serial:       30EB97D3614DEB810DAB43BD0C59C78F260BC374
Authority key identifier: 1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3465303a3a2f34362d3436203d3e20323632343539.roa
Signing time:             Fri 23 Jun 2023 13:00:22 +0000
ROA not before:           Fri 23 Jun 2023 12:55:22 +0000
ROA not after:            Fri 21 Jun 2024 13:00:22 +0000
asID:                     262459
IP address blocks:        2804:4b0:4e0::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:eb:97:d3:61:4d:eb:81:0d:ab:43:bd:0c:59:c7:8f:26:0b:c3:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5863392E99A282843AC6397A9E024E91731642
        Validity
            Not Before: Jun 23 12:55:22 2023 GMT
            Not After : Jun 21 13:00:22 2024 GMT
        Subject: CN=1C2188C860CAEEB1524376C3008C1FD3AC8996AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1a:25:69:ca:43:62:64:cc:4c:c6:ee:11:04:
                    b6:51:6e:c9:87:6f:1b:d4:c7:13:e3:aa:c3:c8:af:
                    6b:7c:14:22:61:a1:ef:a7:99:07:f1:f6:b3:45:73:
                    21:17:2f:06:50:69:fe:1c:80:15:98:37:1b:75:4b:
                    db:a8:d3:8b:05:2a:45:41:c8:e1:3c:8b:07:c8:72:
                    03:fb:26:76:4b:81:07:70:13:73:d9:86:62:cd:40:
                    87:d5:13:f3:17:20:ad:7c:9b:7d:55:ed:0b:e7:4e:
                    39:95:ae:ed:a4:5d:22:79:38:40:9c:7b:35:30:9e:
                    dd:7c:17:31:07:61:d3:da:bc:be:b9:f2:ef:22:c5:
                    81:1f:2b:6e:a2:5a:30:36:73:3d:a6:84:7e:c8:9e:
                    b8:69:c4:b7:d3:26:90:5b:4d:4a:d0:f5:75:43:18:
                    bb:91:1e:53:4f:03:6e:fd:41:5b:c7:91:19:05:87:
                    0c:c3:ba:29:4c:dc:69:dd:5c:e1:3b:03:19:38:da:
                    b0:f9:a6:f0:51:2c:98:14:4c:9d:63:be:0f:c0:c4:
                    bf:6d:d8:9b:3a:b4:b9:db:e9:43:37:da:65:4e:31:
                    b2:aa:f8:45:0f:54:39:39:56:15:fc:f5:1d:bf:f2:
                    39:36:0c:26:56:05:b4:3f:a1:b8:17:54:e0:e3:67:
                    8b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:21:88:C8:60:CA:EE:B1:52:43:76:C3:00:8C:1F:D3:AC:89:96:AB
            X509v3 Authority Key Identifier:
                keyid:1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/1C5863392E99A282843AC6397A9E024E91731642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3465303a3a2f34362d3436203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0:4e0::/46

    Signature Algorithm: sha256WithRSAEncryption
         69:63:ce:6f:40:5a:89:f4:48:77:bf:26:7e:b7:50:eb:a1:35:
         ac:f4:c0:15:ce:1c:b5:42:ee:a0:f2:c6:98:5f:5d:51:8b:30:
         6a:b8:91:36:16:b0:4d:6f:60:07:53:fa:06:68:12:36:b4:63:
         06:d4:33:ec:f0:14:ff:d2:62:7c:49:b8:dc:55:74:2f:fb:84:
         a8:e2:d5:2f:ea:c3:40:6b:14:27:07:8d:d9:bf:56:15:b3:d4:
         9e:6e:bb:b2:07:e6:2a:52:5f:b3:2d:cf:38:96:39:92:db:df:
         41:9a:d9:45:a5:b7:58:57:99:47:76:d1:21:26:ae:9f:45:be:
         c3:07:63:0e:69:66:ce:25:9f:10:66:c3:f0:ea:db:94:fb:9b:
         5d:e9:9e:b0:06:72:73:e6:f0:dc:d9:5f:66:96:40:75:7d:a4:
         00:2d:16:34:fb:37:aa:b1:e6:dd:5a:c4:20:56:41:7e:fe:d6:
         2f:52:11:1b:b9:30:69:26:d6:ee:65:05:44:d8:15:23:11:1c:
         01:eb:44:87:41:ac:a7:e3:e8:8e:07:f9:bf:b9:c9:9c:11:c1:
         5e:4d:9b:94:19:bc:a0:8f:a9:93:c2:16:6d:da:2d:93:23:91:
         79:d2:92:0e:82:50:32:ea:71:9d:de:05:e6:03:7f:ad:d0:62:
         3c:ee:d9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----