Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3332633a3a2f34362d3436203d3e20323632343539.roa
File:                     323830343a3462303a3332633a3a2f34362d3436203d3e20323632343539.roa (raw, json)
Hash identifier:          K05ye6t9i9mnTrbpSY3YK9TFfPYjW+DrL98mB1vRySI=
Subject key identifier:   5E:21:63:51:AC:EF:6E:AA:96:77:1C:22:45:5B:3C:34:AA:F0:54:FE
Certificate issuer:       /CN=1C5863392E99A282843AC6397A9E024E91731642
Certificate serial:       660299A67E6A8B97B4986701F90AED4661D5D8F0
Authority key identifier: 1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3332633a3a2f34362d3436203d3e20323632343539.roa
Signing time:             Tue 30 Jan 2024 13:00:19 +0000
ROA not before:           Tue 30 Jan 2024 12:55:19 +0000
ROA not after:            Tue 28 Jan 2025 13:00:19 +0000
asID:                     262459
IP address blocks:        2804:4b0:32c::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:02:99:a6:7e:6a:8b:97:b4:98:67:01:f9:0a:ed:46:61:d5:d8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5863392E99A282843AC6397A9E024E91731642
        Validity
            Not Before: Jan 30 12:55:19 2024 GMT
            Not After : Jan 28 13:00:19 2025 GMT
        Subject: CN=5E216351ACEF6EAA96771C22455B3C34AAF054FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0a:71:41:68:d8:b6:c6:b3:9f:72:c1:7a:35:
                    6e:03:22:ff:14:cb:56:42:8d:de:09:0d:8b:3d:3b:
                    a0:d2:3f:1c:e6:f1:bc:b3:0c:cb:a3:95:14:4f:73:
                    a9:e1:89:8f:a1:ce:ec:99:38:f6:e8:93:cc:0a:fd:
                    c0:ba:55:c4:2c:63:12:67:18:06:2d:9d:41:e3:44:
                    0c:26:09:28:b1:b5:1e:52:c3:a5:0f:6c:e0:d2:61:
                    e1:0a:89:4d:18:03:51:a7:bc:96:97:4a:e0:fd:22:
                    f5:a3:f2:d2:bc:6a:f7:3e:70:b8:f2:02:15:5d:c2:
                    22:a2:fa:26:b0:78:7b:fe:05:71:48:4d:c9:78:8d:
                    30:e3:32:65:df:6e:46:0a:70:dc:3b:a7:9b:4b:4c:
                    8b:0a:1c:fe:0b:d4:91:40:22:d2:f6:fe:32:1e:ee:
                    1f:14:a3:c4:2c:28:07:d3:02:e2:f6:11:0c:64:42:
                    81:90:8a:39:45:83:3d:c5:d3:86:e9:a6:e7:20:8b:
                    28:30:d0:7d:03:6e:59:56:51:21:bb:f3:a7:52:6e:
                    32:2e:81:df:56:85:21:d8:ad:55:ad:ff:93:b2:03:
                    10:d3:3c:83:6a:52:01:f8:53:71:a6:e7:07:64:83:
                    34:ba:50:92:cb:f3:ee:e5:4f:39:26:38:b8:44:ef:
                    1f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:21:63:51:AC:EF:6E:AA:96:77:1C:22:45:5B:3C:34:AA:F0:54:FE
            X509v3 Authority Key Identifier:
                keyid:1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/1C5863392E99A282843AC6397A9E024E91731642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3332633a3a2f34362d3436203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0:32c::/46

    Signature Algorithm: sha256WithRSAEncryption
         7a:dd:b3:71:b5:b3:87:af:04:b6:e0:a3:03:9f:1f:6c:85:5d:
         ac:3c:39:dc:9e:13:08:bc:51:40:97:a8:79:4b:e5:16:c3:e6:
         e0:4d:98:c8:87:d4:97:86:45:1b:60:de:8a:d6:8d:01:24:8f:
         17:26:34:2c:10:f9:9e:f3:b0:a7:4d:17:d3:f4:34:1f:9a:c6:
         96:b7:00:ec:8c:bd:40:af:37:34:a5:48:e2:ec:72:1d:0a:d4:
         20:08:ce:b9:05:c0:c2:00:43:e8:0f:f1:f3:74:12:e9:91:a2:
         d1:b2:17:15:23:4b:0b:30:b3:84:24:85:53:e4:76:73:aa:5c:
         29:20:20:15:01:90:ff:cd:94:9a:68:2e:7a:58:2d:2b:5a:09:
         c0:59:b0:d4:fd:a3:a8:6e:a0:b0:95:68:82:d0:28:37:c8:d9:
         03:56:29:cc:fd:0f:07:64:08:12:ab:d6:32:4d:e9:e9:e6:aa:
         8d:36:ef:c1:ad:c5:cc:49:83:9e:64:ab:64:1e:71:b6:c6:0e:
         2c:61:63:78:b0:7c:00:87:20:94:7f:d1:76:20:65:ea:85:9a:
         e2:45:75:35:eb:b5:a5:ef:2b:60:9d:b5:1c:ac:a2:1e:f7:f8:
         9d:41:ba:84:54:37:27:cb:de:6b:8d:b0:53:b5:b0:12:1f:ed:
         5c:9d:36:71
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUZgKZpn5qi5e0mGcB+QrtRmHV2PAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM1ODYzMzkyRTk5QTI4Mjg0M0FDNjM5N0E5RTAyNEU5
MTczMTY0MjAeFw0yNDAxMzAxMjU1MTlaFw0yNTAxMjgxMzAwMTlaMDMxMTAvBgNV
BAMTKDVFMjE2MzUxQUNFRjZFQUE5Njc3MUMyMjQ1NUIzQzM0QUFGMDU0RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYCnFBaNi2xrOfcsF6NW4DIv8U
y1ZCjd4JDYs9O6DSPxzm8byzDMujlRRPc6nhiY+hzuyZOPbok8wK/cC6VcQsYxJn
GAYtnUHjRAwmCSixtR5Sw6UPbODSYeEKiU0YA1GnvJaXSuD9IvWj8tK8avc+cLjy
AhVdwiKi+iaweHv+BXFITcl4jTDjMmXfbkYKcNw7p5tLTIsKHP4L1JFAItL2/jIe
7h8Uo8QsKAfTAuL2EQxkQoGQijlFgz3F04bppucgiygw0H0DbllWUSG786dSbjIu
gd9WhSHYrVWt/5OyAxDTPINqUgH4U3Gm5wdkgzS6UJLL8+7lTzkmOLhE7x9jAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUXiFjUazvbqqWdxwiRVs8NKrwVP4wHwYDVR0j
BBgwFoAUHFhjOS6ZooKEOsY5ep4CTpFzFkIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjhIc3dveUszZ2kzTlUzUHl6am9zWHNnVFVBNmhVY2JQVnVhM2tidzdK
RXAvMC8xQzU4NjMzOTJFOTlBMjgyODQzQUM2Mzk3QTlFMDI0RTkxNzMxNjQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFDNTg2MzM5MkU5OUEyODI4
NDNBQzYzOTdBOUUwMjRFOTE3MzE2NDIuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI4SHN3b3lLM2dpM05VM1B5empvc1hzZ1RVQTZoVWNiUFZ1YTNrYnc3SkVwLzAv
MzIzODMwMzQzYTM0NjIzMDNhMzMzMjYzM2EzYTJmMzQzNjJkMzQzNjIwM2QzZTIw
MzIzNjMyMzQzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKAQEsAMsMA0GCSqGSIb3DQEBCwUAA4IB
AQB63bNxtbOHrwS24KMDnx9shV2sPDncnhMIvFFAl6h5S+UWw+bgTZjIh9SXhkUb
YN6K1o0BJI8XJjQsEPme87CnTRfT9DQfmsaWtwDsjL1Arzc0pUji7HIdCtQgCM65
BcDCAEPoD/HzdBLpkaLRshcVI0sLMLOEJIVT5HZzqlwpICAVAZD/zZSaaC56WC0r
WgnAWbDU/aOobqCwlWiC0Cg3yNkDVinM/Q8HZAgSq9YyTenp5qqNNu/BrcXMSYOe
ZKtkHnG2xg4sYWN4sHwAhyCUf9F2IGXqhZriRXU167Wl7ytgnbUcrKIe9/idQbqE
VDcny95rjbBTtbASH+1cnTZx
-----END CERTIFICATE-----