Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3336303a3a2f34362d3436203d3e20323632343539.roa
File:                     323830343a3462303a3336303a3a2f34362d3436203d3e20323632343539.roa (raw, json)
Hash identifier:          MFqASN6voDNrNSou7QxiQUR6B3n6rZgIkgZPnbP1mJA=
Subject key identifier:   0B:C5:F8:95:7F:99:57:EC:6F:96:3A:53:E7:06:18:D4:06:02:10:A5
Certificate issuer:       /CN=1C5863392E99A282843AC6397A9E024E91731642
Certificate serial:       13FFA592AAA6F3F92683C9EB2038CC2D6AB2F116
Authority key identifier: 1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3336303a3a2f34362d3436203d3e20323632343539.roa
Signing time:             Fri 23 Jun 2023 13:00:21 +0000
ROA not before:           Fri 23 Jun 2023 12:55:21 +0000
ROA not after:            Fri 21 Jun 2024 13:00:21 +0000
asID:                     262459
IP address blocks:        2804:4b0:360::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:ff:a5:92:aa:a6:f3:f9:26:83:c9:eb:20:38:cc:2d:6a:b2:f1:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5863392E99A282843AC6397A9E024E91731642
        Validity
            Not Before: Jun 23 12:55:21 2023 GMT
            Not After : Jun 21 13:00:21 2024 GMT
        Subject: CN=0BC5F8957F9957EC6F963A53E70618D4060210A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fc:c6:4a:01:47:20:c5:34:9e:b2:2e:d3:55:
                    f1:6d:6b:61:60:26:08:a8:66:63:25:b4:e5:a9:31:
                    fc:81:19:c1:5d:72:3a:bb:c1:14:68:e5:85:1e:04:
                    69:9a:6b:97:ad:bd:6a:ad:75:55:9e:dc:0d:94:6d:
                    eb:30:9a:cd:7a:02:c0:16:b0:9f:35:f4:f8:a5:11:
                    05:ea:90:76:50:a7:70:c0:3c:c4:1a:2f:2c:a4:d9:
                    32:a7:a3:63:0f:eb:cd:18:d5:80:95:53:13:49:76:
                    7f:60:f3:72:37:90:f7:27:26:01:ee:0e:e5:76:fe:
                    32:83:03:a8:d7:2c:11:da:16:7c:03:eb:e4:c4:23:
                    10:87:a9:17:ad:a8:d0:72:4d:c6:0c:b5:6a:86:33:
                    db:80:04:fc:0b:e5:77:6d:d6:e0:42:0f:73:84:3a:
                    c2:e0:0e:86:2a:b4:d1:94:ea:c4:74:43:9a:e3:66:
                    0e:cf:02:3b:94:ca:e8:10:f4:72:c6:1b:0d:bf:1a:
                    9c:5f:23:c5:2d:c3:e4:5e:83:00:aa:7b:cf:5b:f2:
                    a3:20:8f:60:83:3f:85:9f:41:43:d7:73:3f:44:3a:
                    5c:48:ae:a3:5a:4a:a2:1c:6a:25:66:64:69:58:56:
                    ad:b3:e8:82:d0:1a:44:45:58:e5:7e:e1:57:8b:16:
                    df:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C5:F8:95:7F:99:57:EC:6F:96:3A:53:E7:06:18:D4:06:02:10:A5
            X509v3 Authority Key Identifier:
                keyid:1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/1C5863392E99A282843AC6397A9E024E91731642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3336303a3a2f34362d3436203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0:360::/46

    Signature Algorithm: sha256WithRSAEncryption
         11:f8:e0:88:87:32:9b:54:a9:35:5c:9e:92:ec:bc:a7:e9:3f:
         52:d1:18:70:42:05:c9:15:c4:10:55:51:b0:fe:f8:93:1e:56:
         72:6e:60:56:29:fe:fd:04:af:9b:39:10:b9:7f:20:26:3a:83:
         1a:f6:fa:da:f7:fa:b5:6c:c3:5d:0a:c5:37:d5:78:4b:f4:3d:
         71:54:95:b9:02:17:52:cb:a8:a7:05:23:2f:72:72:81:41:1c:
         b9:2d:5a:74:86:5d:3f:bd:e6:bb:0f:04:9e:76:8b:c7:4a:12:
         92:c6:bf:dd:73:41:20:ce:6b:37:48:76:aa:68:a6:64:ea:5d:
         74:9d:24:da:7b:11:8e:61:b0:87:1d:a9:8f:0c:f9:57:52:f9:
         9f:12:b5:ac:4a:25:0d:b1:fb:c6:47:41:cc:46:ca:02:11:39:
         fa:e1:4e:f7:50:49:e4:d6:7f:71:9a:3b:be:df:98:4f:9d:ef:
         06:77:32:b8:12:25:73:c4:e1:5f:50:b1:d7:54:5c:41:b3:0f:
         59:dc:6f:20:1d:37:6d:72:9f:12:9b:ac:06:70:6c:f7:34:97:
         ee:4b:45:4e:de:83:b2:7f:4e:02:bd:a3:36:c9:6d:d9:c3:89:
         e4:5b:06:45:dd:bf:08:8b:a1:86:5e:e0:a1:29:a6:7e:c9:c3:
         be:3e:3a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----