Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3331383a3a2f34362d3436203d3e20323632343539.roa
File:                     323830343a3462303a3331383a3a2f34362d3436203d3e20323632343539.roa (raw, json)
Hash identifier:          z7BVhc/6WpYfGVkiqitr4KjJs8OoAfxj9IHI1FEVwmY=
Subject key identifier:   1C:49:58:80:27:BA:FC:BC:51:26:D6:EA:1A:42:F9:0E:CE:B4:9C:68
Certificate issuer:       /CN=1C5863392E99A282843AC6397A9E024E91731642
Certificate serial:       2D5B05C96608BFF2A363CEE7D3FFE32EE99CF231
Authority key identifier: 1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3331383a3a2f34362d3436203d3e20323632343539.roa
Signing time:             Fri 23 Jun 2023 13:00:22 +0000
ROA not before:           Fri 23 Jun 2023 12:55:22 +0000
ROA not after:            Fri 21 Jun 2024 13:00:22 +0000
asID:                     262459
IP address blocks:        2804:4b0:318::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:5b:05:c9:66:08:bf:f2:a3:63:ce:e7:d3:ff:e3:2e:e9:9c:f2:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5863392E99A282843AC6397A9E024E91731642
        Validity
            Not Before: Jun 23 12:55:22 2023 GMT
            Not After : Jun 21 13:00:22 2024 GMT
        Subject: CN=1C49588027BAFCBC5126D6EA1A42F90ECEB49C68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b8:bd:01:a8:d7:e7:11:05:75:24:b5:d2:63:
                    e4:71:0a:05:64:d0:7b:84:26:25:20:bb:23:63:db:
                    b5:d5:43:ae:30:a9:4e:8a:a6:b6:40:84:f5:29:04:
                    83:a2:69:20:f4:a7:a7:f9:44:64:0b:86:bb:89:68:
                    32:fc:ca:cb:ef:85:5e:15:fa:d6:6e:6b:3d:07:8b:
                    a7:b5:81:3d:26:18:3e:1f:b8:36:6f:7c:95:cc:c4:
                    12:5c:ef:20:d7:e9:75:47:31:72:9d:6f:3a:f5:61:
                    be:a5:22:88:4e:b8:b5:12:b5:7d:6c:64:8a:2d:d7:
                    a8:11:4b:c2:db:9f:59:9e:c9:ba:a3:c5:76:0e:38:
                    35:09:ac:a3:6e:37:09:7d:29:c9:ce:5d:60:fa:99:
                    72:0f:16:c9:e5:fc:79:79:99:11:b8:6a:3b:6d:94:
                    dc:48:1d:4e:38:7b:48:6c:0f:cc:d8:77:21:00:71:
                    20:20:17:6e:2d:37:62:46:61:67:a4:50:b4:1e:f8:
                    16:eb:a8:4a:1f:0a:50:4b:43:6f:d2:04:61:f1:b3:
                    14:2a:f2:e9:07:a8:a2:0e:66:8d:d1:26:d8:de:23:
                    05:a8:4a:8c:41:21:bd:02:02:5a:59:0a:50:38:b5:
                    f3:e5:d0:f8:7e:6a:83:bc:0c:d6:ba:47:a6:58:89:
                    3b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:49:58:80:27:BA:FC:BC:51:26:D6:EA:1A:42:F9:0E:CE:B4:9C:68
            X509v3 Authority Key Identifier:
                keyid:1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/1C5863392E99A282843AC6397A9E024E91731642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3331383a3a2f34362d3436203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0:318::/46

    Signature Algorithm: sha256WithRSAEncryption
         b9:94:77:3b:59:43:7e:d6:bb:48:53:5a:51:d5:5c:11:b7:f8:
         d1:15:cc:92:28:cf:4e:99:87:98:9b:0a:eb:b7:63:74:62:44:
         1b:fa:2c:e0:3d:60:ce:58:17:23:b9:87:68:56:bf:81:4a:95:
         b9:ba:c5:6d:36:6b:44:e0:d5:bf:e6:fe:1a:4f:d7:c1:5d:9d:
         63:ac:82:e4:63:33:9f:bd:97:4d:71:93:7c:de:da:21:09:fa:
         24:52:c6:fa:bd:16:c6:14:30:f2:f1:c9:ec:41:1d:74:05:38:
         3e:f6:29:3b:6c:ab:0a:93:65:c0:0f:ca:c2:91:66:b1:82:55:
         b5:4b:eb:da:7c:4a:e0:dc:22:a8:52:0d:b3:fc:00:15:12:1c:
         ea:e4:ed:8a:15:12:84:17:ae:b3:93:d8:04:99:eb:c4:01:72:
         e5:86:a9:1a:f5:3b:8c:78:50:e5:e7:41:5d:6b:64:08:b7:87:
         db:25:85:44:e8:21:ba:81:27:43:27:f4:fb:5c:df:42:d1:5c:
         dc:07:25:78:b2:9b:5b:d0:6e:6d:f9:1b:f9:8b:af:76:37:f8:
         a0:84:3f:43:81:58:63:52:9e:60:9a:dc:1b:c2:54:77:1f:c8:
         9a:dd:55:cf:d1:3d:ae:24:ba:1c:f5:f7:20:33:4d:3e:0b:cc:
         c9:4a:6b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----