Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a6330343a3a2f34362d3436203d3e20323632343539.roa
File:                     323830343a3462303a6330343a3a2f34362d3436203d3e20323632343539.roa (raw, json)
Hash identifier:          zqBcSJ+xYF2KuSL4iCEvQOKZWjP92/pdoIijSftd1aY=
Subject key identifier:   67:10:26:72:AD:05:75:9F:A6:5A:77:D6:65:6A:80:DE:C0:32:A6:92
Certificate issuer:       /CN=1C5863392E99A282843AC6397A9E024E91731642
Certificate serial:       7ECE4395E3E6575AD108F474D15B83E2228048EE
Authority key identifier: 1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a6330343a3a2f34362d3436203d3e20323632343539.roa
Signing time:             Fri 23 Jun 2023 13:00:22 +0000
ROA not before:           Fri 23 Jun 2023 12:55:22 +0000
ROA not after:            Fri 21 Jun 2024 13:00:22 +0000
asID:                     262459
IP address blocks:        2804:4b0:c04::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ce:43:95:e3:e6:57:5a:d1:08:f4:74:d1:5b:83:e2:22:80:48:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5863392E99A282843AC6397A9E024E91731642
        Validity
            Not Before: Jun 23 12:55:22 2023 GMT
            Not After : Jun 21 13:00:22 2024 GMT
        Subject: CN=67102672AD05759FA65A77D6656A80DEC032A692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5e:15:ce:a6:fd:ff:9d:0f:51:d6:62:19:8c:
                    33:a5:2c:11:30:4f:55:bd:2c:1a:86:7a:ff:9d:3c:
                    23:1b:1f:97:98:a6:53:63:61:55:5e:62:c6:03:57:
                    5e:89:d8:fe:66:50:62:dc:af:05:c9:43:08:f5:ba:
                    1b:1a:8f:6f:3e:73:6f:03:8a:2a:3a:2d:84:0f:9a:
                    be:67:81:12:c1:d2:4e:86:b1:48:4d:22:c6:d0:cd:
                    2c:de:a0:ed:21:bf:51:34:45:39:4f:95:9a:c2:40:
                    7e:a5:5e:40:ee:0b:58:40:28:93:b5:ac:6c:5e:46:
                    e9:bd:4d:d3:e9:9a:ba:b4:1c:e6:8b:28:00:ca:95:
                    c7:6b:30:46:ac:0d:db:fa:96:61:9d:16:fd:5f:75:
                    84:06:8a:b4:56:d6:c4:8d:f6:02:32:fb:1c:0d:8e:
                    95:bd:71:b7:36:04:15:55:d5:37:f7:e8:0c:09:31:
                    eb:69:29:bc:b5:b6:5e:64:d2:37:9a:d2:c0:c8:9a:
                    58:87:a7:58:74:5e:16:bb:63:ea:1e:ee:e6:7c:b3:
                    5f:d3:c6:08:60:9b:64:3b:3b:ca:e3:bf:c9:6b:26:
                    89:06:60:90:05:c8:93:b7:b0:3f:e9:42:7c:0a:28:
                    11:8e:f8:85:14:33:3d:8b:30:d7:cc:aa:54:4f:d2:
                    fc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:10:26:72:AD:05:75:9F:A6:5A:77:D6:65:6A:80:DE:C0:32:A6:92
            X509v3 Authority Key Identifier:
                keyid:1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/1C5863392E99A282843AC6397A9E024E91731642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a6330343a3a2f34362d3436203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0:c04::/46

    Signature Algorithm: sha256WithRSAEncryption
         63:cf:7c:db:14:12:d2:ea:f0:7c:78:26:67:40:a2:bb:7c:62:
         ac:42:c2:05:12:6a:a4:1d:73:c0:de:da:1e:1f:bb:1a:a7:12:
         3b:92:a2:cd:72:25:1d:78:8c:cf:42:d1:c2:f8:f9:a2:05:e1:
         03:84:7f:cd:ad:de:e1:2c:7b:35:f9:84:fd:f8:37:fd:54:f8:
         e0:0f:b0:11:44:b2:68:41:f6:9c:d1:82:25:e8:f0:5c:24:73:
         16:84:03:1d:31:24:1c:b7:78:15:5d:52:c3:48:f0:71:99:0b:
         59:5e:6c:f8:ae:79:b6:91:93:1b:64:78:73:92:fe:c2:57:9c:
         85:ec:5d:7a:cd:dd:7e:d2:a5:88:a0:b0:d4:af:a8:99:b8:00:
         75:65:3e:d2:0d:15:35:74:c8:76:8e:8d:62:c0:c5:d6:64:06:
         55:6d:45:62:28:c9:68:f5:12:33:49:b1:b6:cd:7c:0c:54:1d:
         71:fb:da:0d:9c:61:bd:a4:64:63:45:9f:0a:a6:86:90:d4:66:
         e0:2a:ba:a0:9a:73:14:97:91:63:7e:31:83:92:ce:73:ec:35:
         20:f6:9d:68:d3:f4:b6:7c:5a:12:d8:91:26:b4:68:48:fb:82:
         3f:8a:ff:a0:d6:76:27:af:c6:10:72:b1:29:ef:52:ca:0f:a7:
         f8:3d:ef:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----