Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3333633a3a2f34362d3436203d3e20323632343539.roa
File:                     323830343a3462303a3333633a3a2f34362d3436203d3e20323632343539.roa (raw, json)
Hash identifier:          oYmQSWwUzpgxlyVtBjvpQ0BkzklmttoUkIr4fxxD0a0=
Subject key identifier:   CC:E0:81:93:EF:31:B3:37:04:38:27:B2:FA:E2:EA:BB:F8:F3:CC:0A
Certificate issuer:       /CN=1C5863392E99A282843AC6397A9E024E91731642
Certificate serial:       0CA4444EEE9BBD2752AFE1D54C7C52C89F4ABF19
Authority key identifier: 1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3333633a3a2f34362d3436203d3e20323632343539.roa
Signing time:             Tue 30 Jan 2024 13:00:19 +0000
ROA not before:           Tue 30 Jan 2024 12:55:19 +0000
ROA not after:            Tue 28 Jan 2025 13:00:19 +0000
asID:                     262459
IP address blocks:        2804:4b0:33c::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:a4:44:4e:ee:9b:bd:27:52:af:e1:d5:4c:7c:52:c8:9f:4a:bf:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5863392E99A282843AC6397A9E024E91731642
        Validity
            Not Before: Jan 30 12:55:19 2024 GMT
            Not After : Jan 28 13:00:19 2025 GMT
        Subject: CN=CCE08193EF31B337043827B2FAE2EABBF8F3CC0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6b:af:9d:0f:a9:4a:86:98:6e:5f:f3:d1:9e:
                    dd:ab:60:a5:65:9c:c2:19:d2:a8:d2:45:98:02:8d:
                    d1:d8:1c:5c:83:c5:3e:3d:24:4d:ae:2b:c0:63:cc:
                    9f:b4:ef:2c:ba:18:fb:87:ec:a2:eb:f3:de:b5:44:
                    ac:46:af:8d:68:85:f8:dd:1c:8f:e6:af:c2:fa:06:
                    61:85:df:23:13:85:9d:4d:dd:69:2c:a0:34:5e:22:
                    2d:df:44:92:dd:83:55:1b:de:cc:bd:79:5d:b0:b8:
                    d1:c0:66:44:d3:56:fc:26:e5:78:b2:f8:21:c7:85:
                    c2:bc:e4:23:28:82:dd:06:1e:b6:c5:fe:86:2a:d1:
                    9b:7f:25:6c:c2:00:b7:f8:71:84:fd:11:6f:3c:a8:
                    d5:9e:c6:58:56:da:5b:59:4b:44:c4:76:99:c4:44:
                    f6:df:72:a3:63:a5:44:45:2c:07:42:ba:70:6e:2d:
                    2c:cd:15:29:2e:c5:9d:d7:1e:24:2f:22:e2:6b:75:
                    85:a1:fe:31:38:9d:48:2c:2d:8e:94:ba:7b:13:92:
                    75:a3:01:f9:ab:fc:48:75:35:65:23:f0:8b:14:77:
                    a6:02:91:a1:ea:14:c5:e4:0c:29:d5:e0:92:1a:32:
                    e7:33:85:27:4e:70:e0:48:f8:09:c0:81:56:73:8d:
                    50:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E0:81:93:EF:31:B3:37:04:38:27:B2:FA:E2:EA:BB:F8:F3:CC:0A
            X509v3 Authority Key Identifier:
                keyid:1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/1C5863392E99A282843AC6397A9E024E91731642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3333633a3a2f34362d3436203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0:33c::/46

    Signature Algorithm: sha256WithRSAEncryption
         43:6a:3c:52:46:29:e1:c1:15:bb:b9:57:20:b8:54:ad:9a:62:
         f4:86:dc:44:55:69:c5:b0:06:f6:58:5c:59:27:bc:2b:2a:db:
         40:da:31:46:28:5b:da:a4:4d:78:61:b9:07:f4:9a:99:df:04:
         6f:b6:aa:0a:47:2f:a6:3e:85:37:d5:26:21:a4:a2:a1:e1:35:
         96:c2:15:af:d0:d4:f8:2d:4b:46:a6:f4:c8:e3:e8:28:5a:16:
         e9:ba:a6:21:d1:53:ec:3d:75:07:e4:b1:2f:fc:cf:7c:fa:c1:
         93:46:63:1b:57:0a:e3:70:c7:44:4f:39:a0:21:b3:91:e1:c2:
         cc:86:9c:d5:3d:c5:a1:25:20:49:45:5b:b9:b2:94:23:64:90:
         a1:84:cf:f0:72:6d:f6:d4:cf:67:85:a6:71:39:df:4c:4a:9a:
         45:b6:7b:0e:8e:4a:17:58:8b:31:2b:9e:e9:19:4c:0a:ba:3a:
         be:99:dd:c6:ad:6a:60:5f:4e:a0:ba:9f:f4:55:f1:41:fb:de:
         42:af:25:f4:65:cd:84:92:90:d9:be:e3:81:e7:6f:c0:ab:7b:
         86:4e:cf:6a:72:44:69:21:11:b5:0c:54:82:7d:12:6a:d0:07:
         19:fd:4f:23:c1:37:96:63:fa:0f:2f:f6:f4:87:14:24:ca:80:
         0f:b7:bb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----