Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3332303a3a2f34362d3436203d3e20323632343539.roa
File:                     323830343a3462303a3332303a3a2f34362d3436203d3e20323632343539.roa (raw, json)
Hash identifier:          z5e3Z02qMbRxPc0XiVSKUM8mi7Wag/17e+DUN2I7I94=
Subject key identifier:   76:D6:B1:D6:AD:74:12:87:A0:B3:13:59:31:86:2F:B9:00:43:C4:34
Certificate issuer:       /CN=1C5863392E99A282843AC6397A9E024E91731642
Certificate serial:       5B94C05CB8899615EC41B80D1D8779169C5723C7
Authority key identifier: 1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3332303a3a2f34362d3436203d3e20323632343539.roa
Signing time:             Fri 23 Jun 2023 13:00:22 +0000
ROA not before:           Fri 23 Jun 2023 12:55:22 +0000
ROA not after:            Fri 21 Jun 2024 13:00:22 +0000
asID:                     262459
IP address blocks:        2804:4b0:320::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:94:c0:5c:b8:89:96:15:ec:41:b8:0d:1d:87:79:16:9c:57:23:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5863392E99A282843AC6397A9E024E91731642
        Validity
            Not Before: Jun 23 12:55:22 2023 GMT
            Not After : Jun 21 13:00:22 2024 GMT
        Subject: CN=76D6B1D6AD741287A0B3135931862FB90043C434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f1:74:73:55:67:b8:3a:90:68:75:dd:58:cf:
                    74:b9:a4:90:b8:98:9a:53:a6:35:46:8e:29:3a:74:
                    1e:5f:cd:1c:ff:73:67:9c:7d:ff:2e:8c:81:b6:a2:
                    96:37:6e:e8:69:3e:90:43:fb:1c:13:7f:55:44:56:
                    f3:04:b6:4e:08:5e:9d:8e:c5:1f:be:cf:90:00:46:
                    33:51:c2:e7:58:9a:f6:ff:d8:76:ea:19:11:17:29:
                    5f:94:6d:13:57:8a:fb:df:d5:30:08:ce:8a:bb:f9:
                    b9:3e:ee:9a:18:0a:39:75:ec:bc:ea:1e:33:3c:93:
                    76:99:2c:8b:b5:61:53:d9:7d:76:2d:2f:d5:b1:77:
                    be:f4:27:ea:d2:c9:bb:9c:45:75:68:a4:9f:a0:50:
                    29:ad:94:27:4b:bc:a4:29:85:96:43:04:32:d4:57:
                    02:0e:26:f0:3c:52:63:82:50:66:a8:9a:b0:a9:22:
                    73:3b:9b:5e:bc:8a:4e:4e:45:72:cb:74:55:ed:e2:
                    a2:08:3f:0c:50:5d:95:74:ab:fd:3f:e9:c9:64:8f:
                    06:ce:66:97:4f:e2:16:b9:a5:86:d0:e0:89:df:9e:
                    98:e0:30:ac:96:15:16:6a:76:9e:d0:0d:57:df:56:
                    cb:15:1c:23:05:6b:e3:de:1f:19:c9:69:a2:6d:be:
                    10:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D6:B1:D6:AD:74:12:87:A0:B3:13:59:31:86:2F:B9:00:43:C4:34
            X509v3 Authority Key Identifier:
                keyid:1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/1C5863392E99A282843AC6397A9E024E91731642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3332303a3a2f34362d3436203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0:320::/46

    Signature Algorithm: sha256WithRSAEncryption
         66:07:ad:de:a8:79:e5:26:62:ce:e9:1e:d1:b5:85:dd:f0:45:
         4c:da:da:a6:98:8c:63:74:cf:b2:05:30:79:cc:b0:de:15:45:
         e6:9c:79:21:94:b9:94:54:71:40:91:05:f4:d2:c2:14:00:78:
         71:56:e3:95:ce:8a:ba:e4:0a:cd:d6:de:b7:91:31:bc:a3:0d:
         49:a6:c3:cd:1c:eb:ef:e3:72:6c:3d:9c:77:47:69:fe:75:8f:
         6e:53:c6:0d:cf:ed:61:d8:49:f5:1c:eb:96:58:31:93:a1:22:
         f4:e8:c7:48:9c:65:58:9c:bd:0c:8e:83:48:3d:3b:6d:9b:51:
         c6:72:a0:25:b1:21:95:6d:9f:75:a1:da:7d:81:b5:1a:23:46:
         57:42:79:cb:65:97:02:00:14:f3:4c:d7:1b:7e:8d:be:33:76:
         87:a7:cd:4d:0e:69:a4:1b:38:d2:3a:8c:6c:4d:b3:2a:bb:c9:
         3d:03:34:3b:ca:14:d6:72:ad:7a:48:74:16:f5:da:72:5a:ff:
         9a:5d:fc:47:83:7c:5d:0f:dd:19:d5:dc:b4:fb:ae:72:93:62:
         d2:58:60:18:34:d5:cc:54:06:e0:1d:fa:cb:35:31:6f:15:99:
         fe:07:ff:1b:15:12:f3:48:92:86:fb:d0:6c:68:38:74:5f:00:
         40:3e:53:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----