Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3a2f33322d3332203d3e20323632343539.roa
File:                     323830343a3462303a3a2f33322d3332203d3e20323632343539.roa (raw, json)
Hash identifier:          lqSO6U/4CNKtiATSfe87Tyf6edY2XICvl6ze5DjXv4c=
Subject key identifier:   1D:9F:4F:BA:A2:E3:9B:83:46:2F:9E:AC:C9:90:D6:4F:82:AC:9D:9F
Certificate issuer:       /CN=1C5863392E99A282843AC6397A9E024E91731642
Certificate serial:       4EC397AF5BA75C4121FCE6214E910674746C40AF
Authority key identifier: 1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3a2f33322d3332203d3e20323632343539.roa
Signing time:             Fri 23 Jun 2023 13:00:21 +0000
ROA not before:           Fri 23 Jun 2023 12:55:21 +0000
ROA not after:            Fri 21 Jun 2024 13:00:21 +0000
asID:                     262459
IP address blocks:        2804:4b0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:c3:97:af:5b:a7:5c:41:21:fc:e6:21:4e:91:06:74:74:6c:40:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5863392E99A282843AC6397A9E024E91731642
        Validity
            Not Before: Jun 23 12:55:21 2023 GMT
            Not After : Jun 21 13:00:21 2024 GMT
        Subject: CN=1D9F4FBAA2E39B83462F9EACC990D64F82AC9D9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:6b:af:99:9b:8d:5a:2c:17:c4:fd:06:42:6e:
                    89:55:b1:5b:3c:7c:e3:b8:b3:16:5f:31:33:5c:44:
                    0f:a0:99:75:f5:3f:39:0d:cf:ea:47:4f:4c:68:7e:
                    8d:ef:da:4f:76:4d:17:f5:cd:21:49:ee:bd:1f:37:
                    9b:02:53:73:ed:3c:57:57:3d:1b:06:1c:ec:5e:43:
                    26:f6:83:3a:d5:d1:ac:cf:55:e6:fc:d9:1e:1a:c1:
                    44:fa:fa:5d:b1:bb:12:59:3f:a5:a5:bd:82:39:80:
                    4d:41:86:4d:bc:bc:e5:60:6c:cb:90:24:e2:63:61:
                    0b:5b:8c:27:9d:7b:2a:ce:a9:bf:38:cd:e3:d4:ff:
                    87:90:f4:a6:db:c7:87:6a:ff:bf:6a:3f:c8:ba:cd:
                    73:7c:f9:6b:8c:3f:13:9a:30:02:a3:d9:fd:c0:a9:
                    d5:14:ee:55:e2:57:ed:fe:bb:67:fc:d2:72:cb:8e:
                    ed:45:c7:d0:b5:37:42:42:1b:5c:b1:2a:c1:98:5a:
                    cf:32:8c:0d:f7:bb:bc:b7:8b:90:e5:bb:07:78:8e:
                    92:48:f6:24:df:66:5a:12:d1:a4:0b:64:dd:7f:32:
                    12:66:64:db:74:25:bb:fd:e3:77:17:20:a4:60:ba:
                    8b:69:4d:8b:4e:ab:4f:0c:ca:f4:b4:ec:46:17:89:
                    27:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:9F:4F:BA:A2:E3:9B:83:46:2F:9E:AC:C9:90:D6:4F:82:AC:9D:9F
            X509v3 Authority Key Identifier:
                keyid:1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/1C5863392E99A282843AC6397A9E024E91731642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3a2f33322d3332203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:ad:70:f3:c7:d8:eb:0c:38:98:95:31:18:d7:25:42:82:55:
         70:af:99:d7:8d:4a:de:5b:91:4d:87:b3:48:da:f9:7b:f9:7e:
         f7:55:b6:4d:0c:5e:cd:75:3c:0c:ee:9e:6e:68:7d:77:30:d4:
         5e:73:1b:e1:cd:b1:9e:b9:45:08:4f:50:54:6d:98:93:16:e8:
         ed:ec:6f:ba:91:b8:25:53:4d:14:ef:49:a1:d8:cf:41:b8:0c:
         fd:56:c4:ea:31:c7:7e:f8:df:ce:18:d1:46:0c:b7:5e:41:c8:
         1d:ef:b7:86:30:95:c8:7b:e6:fb:cc:b7:da:4e:38:44:79:09:
         4f:82:01:e8:0b:90:39:d4:97:e2:6d:d7:2e:44:bd:3c:f4:9c:
         b3:38:e6:c2:63:47:e9:46:0b:27:a5:0d:b0:71:1f:d9:bf:5c:
         47:8b:8c:ae:1f:d2:76:27:ff:e4:9c:d7:cf:67:17:51:01:5f:
         33:28:b1:2c:7e:a6:d7:cd:dc:8c:27:50:13:81:b5:c1:df:ca:
         11:61:19:82:8e:82:07:65:52:cd:01:f7:4a:8d:c4:1c:08:01:
         63:02:6a:a0:f3:5e:96:4c:d0:39:8a:81:8a:94:90:e1:40:ac:
         4b:88:36:55:01:3b:54:9b:a5:f0:c1:cf:fa:07:fb:d1:7f:3b:
         31:45:e1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----