Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3335303a3a2f34362d3436203d3e20323632343539.roa
File:                     323830343a3462303a3335303a3a2f34362d3436203d3e20323632343539.roa (raw, json)
Hash identifier:          652KF1BCb3qx+kfpXx2epMfZ+1a/Cus3HzsLMzynDGQ=
Subject key identifier:   34:2A:CC:A7:FF:13:2E:A4:60:01:EC:BC:99:5F:7A:73:6E:44:92:BD
Certificate issuer:       /CN=1C5863392E99A282843AC6397A9E024E91731642
Certificate serial:       4929E57DF2B4C1DAB8EC3591677523BCF9D528CE
Authority key identifier: 1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3335303a3a2f34362d3436203d3e20323632343539.roa
Signing time:             Fri 23 Jun 2023 13:00:22 +0000
ROA not before:           Fri 23 Jun 2023 12:55:22 +0000
ROA not after:            Fri 21 Jun 2024 13:00:22 +0000
asID:                     262459
IP address blocks:        2804:4b0:350::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:29:e5:7d:f2:b4:c1:da:b8:ec:35:91:67:75:23:bc:f9:d5:28:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5863392E99A282843AC6397A9E024E91731642
        Validity
            Not Before: Jun 23 12:55:22 2023 GMT
            Not After : Jun 21 13:00:22 2024 GMT
        Subject: CN=342ACCA7FF132EA46001ECBC995F7A736E4492BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:97:47:2a:25:f4:34:f6:0c:d3:3a:4d:39:ba:
                    46:23:c1:33:fe:7c:5f:33:f6:43:c5:8f:7f:1d:7e:
                    20:86:a9:09:f7:aa:b8:6d:5f:d1:98:f4:b5:87:6d:
                    67:0e:cb:1b:3f:c5:f7:46:a4:29:88:a9:c7:21:ad:
                    bd:01:5e:cc:55:a7:fd:65:f1:b8:38:28:34:79:9d:
                    72:1a:23:08:78:0e:af:69:d4:99:86:71:99:b3:e8:
                    5e:dc:24:2c:af:6a:e2:60:af:2f:f0:dc:8c:7c:74:
                    12:5c:38:75:7a:7c:b7:4d:23:33:39:24:d5:61:ef:
                    79:7b:b1:86:4a:2c:3f:7c:00:d9:47:bc:c7:07:8a:
                    13:d0:07:cf:9d:f3:19:7f:a3:28:79:0a:6f:0a:3c:
                    a7:be:2c:52:ed:2e:6d:cc:ce:f3:0c:55:4d:0a:16:
                    2b:5d:1d:8c:81:b0:1e:a0:4b:e2:67:06:8a:75:eb:
                    05:60:50:eb:25:7a:01:43:50:16:4e:71:42:bb:57:
                    ab:86:1e:f3:e4:12:53:37:4d:dc:80:2d:49:39:27:
                    78:22:a3:8e:27:c6:74:21:ce:26:cb:f0:aa:d4:1c:
                    26:1f:26:4f:4b:42:f2:02:1e:cc:70:9d:1a:63:b9:
                    48:64:48:71:e3:12:db:f3:e0:2e:34:a6:f2:6a:b9:
                    23:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:2A:CC:A7:FF:13:2E:A4:60:01:EC:BC:99:5F:7A:73:6E:44:92:BD
            X509v3 Authority Key Identifier:
                keyid:1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/1C5863392E99A282843AC6397A9E024E91731642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3335303a3a2f34362d3436203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0:350::/46

    Signature Algorithm: sha256WithRSAEncryption
         97:ef:be:9b:27:da:8f:19:ee:32:30:75:91:6c:73:59:74:8d:
         3a:be:8e:15:51:a6:c3:fd:87:21:c1:08:a8:2c:1a:bc:42:c9:
         26:89:47:aa:d4:cc:30:0f:79:d1:85:cd:c9:dd:84:b5:9a:51:
         43:4f:59:71:12:eb:27:c2:60:cd:8d:b6:8e:9d:e6:5c:1e:bf:
         ce:88:a4:84:f9:99:92:69:50:1e:59:17:fe:6d:7a:24:2c:a8:
         41:9d:14:b6:c6:a9:68:82:3d:32:40:3f:da:03:b7:a3:88:6f:
         03:dd:8f:61:20:a0:3d:d5:04:30:84:82:d8:7a:db:b3:98:b8:
         50:c8:ce:a2:b8:cf:46:f3:93:98:f3:68:9f:d6:fb:cb:6e:e5:
         3c:b3:e4:27:ba:11:a3:d9:d5:13:23:48:00:f3:2a:6a:c6:89:
         c7:24:cd:bc:79:e2:4a:a8:29:8f:c4:a1:43:ea:9c:d4:68:fa:
         aa:b7:6f:cc:2c:a5:4a:73:65:5e:97:09:13:30:13:f3:cd:99:
         78:c2:bd:59:6b:de:39:4f:fa:5d:6b:b6:a2:d2:26:2d:8e:03:
         ba:bc:c7:a4:83:63:98:6f:2f:be:eb:e7:45:8b:c3:04:c6:c5:
         80:e6:32:0f:cf:6b:84:7e:b6:da:86:d0:fe:e2:c7:75:68:e1:
         0a:e0:87:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----