Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3438383a3a2f34362d3436203d3e20323632343539.roa
File:                     323830343a3462303a3438383a3a2f34362d3436203d3e20323632343539.roa (raw, json)
Hash identifier:          32RKTkgPGjQzONLaQ1RK3eG399arLQcQIO+uEys3Hio=
Subject key identifier:   F0:69:15:D3:0E:67:B8:EE:F8:C5:54:95:F7:22:18:68:5A:E7:D4:5B
Certificate issuer:       /CN=1C5863392E99A282843AC6397A9E024E91731642
Certificate serial:       7A0E5BB2C4A1DCCFD98AA9D3A92F9506C47C6986
Authority key identifier: 1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3438383a3a2f34362d3436203d3e20323632343539.roa
Signing time:             Mon 27 Nov 2023 17:56:15 +0000
ROA not before:           Mon 27 Nov 2023 17:51:15 +0000
ROA not after:            Mon 25 Nov 2024 17:56:15 +0000
asID:                     262459
IP address blocks:        2804:4b0:488::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:0e:5b:b2:c4:a1:dc:cf:d9:8a:a9:d3:a9:2f:95:06:c4:7c:69:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5863392E99A282843AC6397A9E024E91731642
        Validity
            Not Before: Nov 27 17:51:15 2023 GMT
            Not After : Nov 25 17:56:15 2024 GMT
        Subject: CN=F06915D30E67B8EEF8C55495F72218685AE7D45B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:26:5f:63:72:0d:d8:47:7e:97:75:16:e7:31:
                    08:77:94:98:da:02:3e:ba:a3:ff:85:e6:09:3d:84:
                    80:ef:29:62:2b:74:1c:a5:4f:44:bd:4c:4f:46:61:
                    66:2b:70:4c:24:cc:fb:f1:30:78:44:cb:1a:39:eb:
                    93:5a:cd:72:6e:f9:f6:4e:ab:d5:2a:14:a5:b1:13:
                    0d:71:6d:94:55:51:fd:34:8f:ab:de:30:3c:a4:82:
                    1a:47:a1:f3:1e:00:56:39:56:26:61:c2:ac:ef:a6:
                    28:99:c6:67:71:df:7c:ed:91:38:1e:3e:5e:61:ce:
                    f4:8a:b1:a2:23:ce:b8:94:34:7c:5e:37:d7:1c:41:
                    db:a4:2c:b6:8c:66:9c:10:c4:ca:43:b2:40:aa:1c:
                    5b:8d:b6:5e:12:32:7a:51:dc:13:1c:3f:46:b3:27:
                    c9:cc:32:f7:e4:48:36:71:63:0b:f3:f9:a0:7e:f8:
                    0d:50:29:0c:19:cd:09:0f:a0:40:ba:57:25:43:5a:
                    10:54:b7:b4:92:ac:a7:4c:7b:34:49:94:66:cd:a4:
                    e4:c5:77:5f:84:8d:fd:22:62:66:51:4b:93:80:65:
                    6b:d6:ab:d5:4e:10:17:ab:18:5a:33:84:29:e9:f6:
                    98:4d:31:95:c8:32:00:2b:17:c5:a1:b2:af:fd:41:
                    ef:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:69:15:D3:0E:67:B8:EE:F8:C5:54:95:F7:22:18:68:5A:E7:D4:5B
            X509v3 Authority Key Identifier:
                keyid:1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/1C5863392E99A282843AC6397A9E024E91731642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3438383a3a2f34362d3436203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0:488::/46

    Signature Algorithm: sha256WithRSAEncryption
         db:7c:6a:14:c9:1d:b2:0f:e2:9f:0c:e4:82:08:33:c8:ac:a5:
         e8:73:97:e2:b8:e3:5b:a2:d3:4b:a1:75:99:13:f5:55:ab:b0:
         bb:5a:fd:2f:5e:4d:3b:83:5d:4c:3a:b3:80:40:66:93:3f:d0:
         b8:91:55:a2:f3:ba:92:bb:8f:15:5f:76:f3:a3:90:d5:ca:b9:
         cf:cb:9f:d0:a5:e7:4e:6b:35:f2:cf:ca:0d:18:93:cf:db:9a:
         a9:6e:7f:5f:35:ac:47:af:d5:0d:6f:10:4b:4c:67:68:b3:0a:
         3e:71:ef:48:77:68:6b:5a:16:4d:e2:8b:10:7e:09:d2:f7:a4:
         4a:29:03:0a:26:fa:02:59:60:14:60:73:f7:dd:dd:6e:ed:a3:
         a0:f6:7b:7a:3f:ba:ab:a1:f7:bc:52:f7:5d:ed:2c:24:25:c2:
         f3:32:b6:26:7c:ec:07:0f:c4:e0:af:29:44:05:9b:86:18:ad:
         66:4e:d9:9c:10:f4:68:f3:c2:16:9a:70:16:da:6a:36:66:6b:
         f6:d6:a5:da:d7:be:8b:22:10:fb:95:a0:1c:dc:e7:b0:dd:f3:
         1e:f7:1f:04:37:bc:7a:76:0d:c7:91:44:b5:6e:bd:09:56:ad:
         fd:3c:13:48:3e:30:3c:45:39:f1:9c:89:ff:d2:cd:f1:3b:93:
         31:5e:0f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----