Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a313438303a3a2f34312d3431203d3e20323632343539.roa
File:                     323830343a3462303a313438303a3a2f34312d3431203d3e20323632343539.roa (raw, json)
Hash identifier:          dU7pZp3+Ffor5ogRKqvpJJV655Ht41S/it9YdCvtwWA=
Subject key identifier:   05:F8:E4:31:24:E5:0D:87:E4:94:3A:DA:F3:C8:F1:EB:0E:21:68:EA
Certificate issuer:       /CN=1C5863392E99A282843AC6397A9E024E91731642
Certificate serial:       706791EBFB2BD6DBE61DDDC7264B5FE2ABCB4D40
Authority key identifier: 1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a313438303a3a2f34312d3431203d3e20323632343539.roa
Signing time:             Mon 25 Mar 2024 13:00:18 +0000
ROA not before:           Mon 25 Mar 2024 12:55:18 +0000
ROA not after:            Mon 24 Mar 2025 13:00:18 +0000
asID:                     262459
IP address blocks:        2804:4b0:1480::/41 maxlen: 41

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:67:91:eb:fb:2b:d6:db:e6:1d:dd:c7:26:4b:5f:e2:ab:cb:4d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5863392E99A282843AC6397A9E024E91731642
        Validity
            Not Before: Mar 25 12:55:18 2024 GMT
            Not After : Mar 24 13:00:18 2025 GMT
        Subject: CN=05F8E43124E50D87E4943ADAF3C8F1EB0E2168EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4e:60:11:68:5f:24:e0:42:61:3d:2a:ce:b2:
                    00:95:12:f6:5c:c3:d7:2f:47:22:1c:5e:fc:8d:3f:
                    bd:ac:25:af:66:52:bc:cc:e7:63:4a:32:7e:1f:18:
                    05:37:5a:90:05:1c:bc:35:75:09:7c:b7:cf:a6:39:
                    90:66:9e:bc:0f:7c:cd:54:ed:1d:7a:87:d8:83:ec:
                    b1:c1:e4:aa:90:dc:99:54:1e:9f:3d:bd:80:ee:c7:
                    4a:63:95:40:0f:c1:23:aa:93:47:36:d8:84:3a:96:
                    3c:18:df:6a:1d:de:7d:89:f5:4b:6a:d8:fe:f5:32:
                    ef:a8:30:2c:8e:5f:54:d8:9d:13:87:e2:a2:86:e1:
                    53:70:74:71:c9:be:05:af:33:20:6d:c8:03:16:05:
                    2e:25:f9:0a:4e:44:f0:2e:91:79:08:9c:b5:97:4e:
                    be:95:ff:e8:aa:cd:fc:92:4e:5b:19:99:ee:dd:a6:
                    2e:60:13:01:ea:6b:91:c5:b2:b3:88:d5:c0:9e:07:
                    c7:5e:8e:d3:ba:e5:6e:8d:83:62:1e:33:cd:75:2d:
                    8a:57:f1:b5:a1:2a:97:d5:78:6f:0e:23:aa:f1:9e:
                    ea:81:68:73:c6:12:e3:2f:87:b4:f0:d6:83:52:40:
                    53:1b:3b:0b:15:30:3c:59:24:a6:4e:a3:7c:2f:22:
                    01:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F8:E4:31:24:E5:0D:87:E4:94:3A:DA:F3:C8:F1:EB:0E:21:68:EA
            X509v3 Authority Key Identifier:
                keyid:1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/1C5863392E99A282843AC6397A9E024E91731642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a313438303a3a2f34312d3431203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0:1480::/41

    Signature Algorithm: sha256WithRSAEncryption
         73:d7:e9:3d:82:e8:4d:e8:67:17:92:8e:4a:5b:4e:9c:fb:eb:
         3c:62:f9:ab:6a:4f:2d:bb:ce:90:30:71:95:07:14:6e:b1:a9:
         5f:32:2e:3d:ab:da:f3:c5:e7:41:f0:73:ee:a7:b0:30:5a:12:
         51:ce:63:72:b1:00:8b:23:17:22:76:3a:e8:15:3c:04:d7:c1:
         b0:a7:e6:76:ee:72:65:fd:74:72:ed:ad:dd:ef:44:b4:92:3f:
         02:c2:9b:e3:21:bf:72:c2:59:cb:0b:e8:68:f6:f1:68:10:70:
         d2:b3:ed:2c:fb:67:83:f8:ed:cb:96:4c:00:b2:a0:01:7f:0a:
         f7:1a:3b:3b:2a:dc:e9:bc:ff:09:8c:7e:b5:8e:7e:87:5d:99:
         b5:33:ae:71:24:58:64:68:ba:c8:8b:93:11:1c:94:07:1a:fc:
         db:6d:63:0e:a0:24:e8:9f:ec:de:c0:b7:20:b2:9b:67:9c:d4:
         66:22:fb:9b:e8:43:73:9f:3a:97:79:a8:ce:d3:c4:d7:e9:42:
         a1:5d:f0:b8:ef:7d:53:49:fc:a7:e8:2c:d8:3b:73:6a:b2:6c:
         03:05:48:0b:19:a1:1e:0e:01:5d:e8:bf:92:20:d8:16:3b:c9:
         33:03:0d:20:59:8d:a0:94:03:b8:c1:e9:31:63:34:ff:70:94:
         50:92:ff:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----