Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a323030303a3a2f34382d3438203d3e20323632343539.roa
File:                     323830343a3462303a323030303a3a2f34382d3438203d3e20323632343539.roa (raw, json)
Hash identifier:          ipGh8TJLJWBlc/EQKvj/IzB6+RXoAq0KU3/n+XtEdlo=
Subject key identifier:   4F:59:8E:97:51:D5:69:22:E6:7D:94:97:AD:F1:B5:53:97:E6:7C:D0
Certificate issuer:       /CN=1C5863392E99A282843AC6397A9E024E91731642
Certificate serial:       1C51DD14A58666206CAC6630D3FF8105DEAF782A
Authority key identifier: 1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a323030303a3a2f34382d3438203d3e20323632343539.roa
Signing time:             Thu 25 May 2023 18:08:24 +0000
ROA not before:           Thu 25 May 2023 18:03:24 +0000
ROA not after:            Thu 23 May 2024 18:08:24 +0000
asID:                     262459
IP address blocks:        2804:4b0:2000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:51:dd:14:a5:86:66:20:6c:ac:66:30:d3:ff:81:05:de:af:78:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5863392E99A282843AC6397A9E024E91731642
        Validity
            Not Before: May 25 18:03:24 2023 GMT
            Not After : May 23 18:08:24 2024 GMT
        Subject: CN=4F598E9751D56922E67D9497ADF1B55397E67CD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e0:21:9f:37:06:f6:c7:46:d0:a8:cf:4e:32:
                    49:de:8b:2e:76:31:6b:4a:4a:44:e1:68:9e:eb:90:
                    a5:de:f9:1b:a5:b4:e9:a2:ec:3a:8b:05:19:cd:37:
                    10:bd:ee:d2:f3:bd:76:36:74:7b:d4:1e:a7:a3:7a:
                    17:1a:64:c6:d6:3f:06:c1:d6:b3:ba:49:52:4f:c2:
                    fd:8c:f4:ef:ea:77:50:96:d2:5f:67:72:d8:9e:f2:
                    27:e8:06:2b:6e:95:f2:53:7a:99:34:4b:d2:11:ff:
                    4a:68:08:ff:ab:62:fd:b8:65:a9:8a:94:8a:e8:92:
                    d9:f6:0b:6a:28:39:a2:28:28:03:4d:95:62:73:bb:
                    da:92:b7:88:83:6a:fd:37:4e:43:2a:c2:68:d1:73:
                    d8:da:a7:03:75:b8:03:a4:b3:73:cb:1c:7a:3c:dc:
                    f4:3c:2c:21:50:97:7a:f6:db:d1:ff:15:dc:d8:fc:
                    e3:eb:fb:f3:ed:dd:cc:f0:9b:01:f7:39:b2:5e:c8:
                    78:24:fb:16:ac:6c:3f:67:ae:b9:03:cd:c6:c0:d4:
                    96:92:49:11:de:3e:15:da:0a:85:66:21:7e:b1:7a:
                    d2:5e:45:c4:df:77:c2:2c:9f:59:71:b6:49:d3:26:
                    1a:2c:78:46:88:98:05:98:8e:4d:18:b7:b5:33:5e:
                    64:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:59:8E:97:51:D5:69:22:E6:7D:94:97:AD:F1:B5:53:97:E6:7C:D0
            X509v3 Authority Key Identifier:
                keyid:1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/1C5863392E99A282843AC6397A9E024E91731642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a323030303a3a2f34382d3438203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         c4:95:48:13:62:c5:4f:d2:77:e5:b1:dc:49:7a:2c:13:37:2b:
         b7:b5:2d:47:c6:ee:2c:7e:08:e5:cc:8b:1d:28:33:0e:b5:15:
         87:cb:c9:22:24:51:c1:09:18:a2:a8:9d:ae:8b:6d:b5:4e:55:
         43:72:14:fe:38:ea:9e:99:e1:91:20:a3:4d:e0:66:23:98:b7:
         a3:94:35:93:30:0f:f3:1a:ff:fc:30:2e:2e:5c:b4:56:ff:d7:
         11:c0:66:33:18:46:21:9e:56:8d:4b:1b:38:30:14:51:1d:9c:
         83:55:f5:9b:7b:6a:0d:e8:e0:97:7c:33:a0:82:02:13:36:59:
         a3:61:dd:bb:98:8f:cd:6b:72:b9:59:fd:80:6f:44:e7:f6:12:
         1c:da:e6:98:93:16:83:7d:5b:53:85:51:1e:5b:39:3f:8c:54:
         fb:98:60:00:ee:b0:72:78:05:dd:59:de:05:65:b1:6e:5f:d7:
         83:77:d2:da:96:3c:17:f5:05:d7:53:77:e5:50:e5:a0:1a:cb:
         6e:06:b3:c2:a4:51:fb:57:ca:d1:79:f6:6e:f9:ba:d8:15:97:
         11:2e:54:41:7e:56:8b:c5:6e:aa:6a:4d:88:f0:a2:69:45:ec:
         5e:ef:bb:a6:d5:23:54:99:b4:55:89:64:d6:3a:26:26:bc:d9:
         2b:52:e8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----