Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a313330303a3a2f34302d3430203d3e20323632343539.roa
File:                     323830343a3462303a313330303a3a2f34302d3430203d3e20323632343539.roa (raw, json)
Hash identifier:          V7zSss8c+sLzD969LwVi/lUkVv+/r3hPezn0x7OYTtg=
Subject key identifier:   07:28:F3:1C:9D:CD:1A:00:5A:AF:99:35:5A:A0:9F:E3:EE:E0:68:7F
Certificate issuer:       /CN=1C5863392E99A282843AC6397A9E024E91731642
Certificate serial:       3BD30D0A87DDF274D64B2FCDDF7E4307C9E2BBF8
Authority key identifier: 1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a313330303a3a2f34302d3430203d3e20323632343539.roa
Signing time:             Tue 30 Jan 2024 12:00:17 +0000
ROA not before:           Tue 30 Jan 2024 11:55:17 +0000
ROA not after:            Tue 28 Jan 2025 12:00:17 +0000
asID:                     262459
IP address blocks:        2804:4b0:1300::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:d3:0d:0a:87:dd:f2:74:d6:4b:2f:cd:df:7e:43:07:c9:e2:bb:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5863392E99A282843AC6397A9E024E91731642
        Validity
            Not Before: Jan 30 11:55:17 2024 GMT
            Not After : Jan 28 12:00:17 2025 GMT
        Subject: CN=0728F31C9DCD1A005AAF99355AA09FE3EEE0687F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:44:79:32:7a:8a:9b:0d:df:3f:67:02:c3:45:
                    9b:be:3e:41:b3:4c:ce:cd:6a:47:e2:f1:60:f6:8a:
                    2e:14:c2:d8:ad:e0:af:62:58:ec:10:8c:e0:98:91:
                    e8:04:7d:04:5e:24:4b:26:cf:e6:ec:40:dc:dd:78:
                    ab:69:4f:f7:1e:c9:33:52:ef:37:e9:a6:da:f7:07:
                    3a:02:8f:af:c7:67:24:3a:ca:2d:85:0d:ce:ac:fa:
                    02:d0:b8:97:b6:ee:6b:88:c7:fc:f7:25:18:a2:24:
                    d1:a3:05:bd:c5:6a:e4:e5:58:14:1b:e4:2d:7b:84:
                    fc:2b:e5:fc:bd:a2:2c:ae:08:6b:c4:30:11:0c:5b:
                    4a:f9:1f:f2:a7:bc:dd:47:df:dd:41:e9:34:98:93:
                    79:07:c8:28:bf:0b:96:52:f0:81:27:26:67:35:05:
                    53:95:fa:d6:6a:31:0a:61:1b:49:1e:92:09:75:81:
                    a7:5e:47:73:45:3b:44:63:be:b8:b6:ec:4e:8c:96:
                    65:a3:a0:ef:a3:e7:b5:31:6f:ca:95:c1:4d:4d:6a:
                    11:0a:85:f5:61:ee:68:cb:0a:fd:3d:8d:d6:fe:dd:
                    91:0f:f5:14:4d:55:84:e1:59:dd:f0:ab:de:e8:06:
                    f3:58:50:4c:d9:47:b5:d6:36:50:16:43:32:22:7e:
                    4b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:28:F3:1C:9D:CD:1A:00:5A:AF:99:35:5A:A0:9F:E3:EE:E0:68:7F
            X509v3 Authority Key Identifier:
                keyid:1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/1C5863392E99A282843AC6397A9E024E91731642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a313330303a3a2f34302d3430203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0:1300::/40

    Signature Algorithm: sha256WithRSAEncryption
         d7:4d:f3:ed:97:87:3c:30:4e:01:b3:52:b6:30:33:89:11:7f:
         68:a9:12:3a:42:32:74:9e:b9:5e:8c:87:29:b4:30:82:af:35:
         c3:1a:0c:db:57:6c:0e:4d:b5:e8:49:89:c1:31:3f:f6:f3:c2:
         cf:9c:1e:5f:bd:2c:f5:4b:7d:84:18:44:4c:b2:31:1a:2e:8c:
         45:4a:7c:0b:4b:b3:cf:f3:57:e6:42:bd:73:10:83:35:82:02:
         03:1e:63:0c:55:04:87:e8:b3:13:73:d6:06:15:11:d2:b6:47:
         00:cb:6d:17:91:3a:82:53:00:5d:cf:d1:51:4b:60:0a:97:07:
         36:6e:4b:ab:9e:12:6c:90:a8:f3:17:54:a3:1c:f3:02:6f:ef:
         7b:79:f1:fb:61:95:97:4f:d9:2e:d6:03:78:11:04:a0:6b:de:
         84:f4:81:b5:c6:6c:22:d3:c4:38:d7:82:74:f2:ff:40:86:e7:
         f9:91:78:0c:05:6e:53:77:92:79:01:36:09:d7:56:e2:b0:5f:
         18:82:dc:0d:c3:26:0c:00:a7:d3:26:13:a5:bb:89:42:7d:b8:
         54:40:9e:5c:be:bf:a2:dd:6a:08:5d:84:d5:63:bb:cb:c9:02:
         8c:51:9f:44:37:b1:d1:c6:ed:ca:ee:93:be:29:a6:d3:8f:a7:
         c5:88:f2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----