Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3439383a3a2f34362d3436203d3e20323632343539.roa
File:                     323830343a3462303a3439383a3a2f34362d3436203d3e20323632343539.roa (raw, json)
Hash identifier:          e4VwHP3s2hhRxPnq6wwhnPAIv1XNsj6KVS/yDiAaIZ0=
Subject key identifier:   24:E9:9E:58:C3:5C:C4:D2:88:38:C5:54:EA:3E:6F:93:6B:23:AB:01
Certificate issuer:       /CN=1C5863392E99A282843AC6397A9E024E91731642
Certificate serial:       6B1D3EA7BCE6EC20D5226D84B3B303267050795A
Authority key identifier: 1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3439383a3a2f34362d3436203d3e20323632343539.roa
Signing time:             Thu 25 Jan 2024 17:02:58 +0000
ROA not before:           Thu 25 Jan 2024 16:57:58 +0000
ROA not after:            Thu 23 Jan 2025 17:02:58 +0000
asID:                     262459
IP address blocks:        2804:4b0:498::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:1d:3e:a7:bc:e6:ec:20:d5:22:6d:84:b3:b3:03:26:70:50:79:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5863392E99A282843AC6397A9E024E91731642
        Validity
            Not Before: Jan 25 16:57:58 2024 GMT
            Not After : Jan 23 17:02:58 2025 GMT
        Subject: CN=24E99E58C35CC4D28838C554EA3E6F936B23AB01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:67:e4:d6:0d:fc:62:54:a1:15:23:cd:93:9d:
                    38:2f:1d:35:d1:11:f0:85:c1:24:dc:c9:89:af:39:
                    01:9b:ce:ff:03:62:f3:de:03:b1:7a:74:74:f5:07:
                    fc:14:01:76:cc:fc:a4:55:db:05:a1:73:1b:d8:01:
                    61:e4:fa:f9:29:c9:be:79:f3:2f:28:19:90:f4:cd:
                    be:63:18:bc:98:ea:5c:dd:5b:87:1a:5a:ba:00:63:
                    0b:02:62:b5:16:3a:79:9f:fe:37:28:81:11:14:20:
                    25:f1:d1:6a:dd:12:39:bf:6a:cc:ff:ac:05:0b:6d:
                    02:4b:e3:94:a4:2a:32:bb:fb:90:82:2e:a3:ed:12:
                    27:84:a9:55:8d:c3:5d:b3:96:a2:38:46:74:46:44:
                    98:17:cd:a9:e6:10:04:10:eb:7b:98:19:76:8f:9f:
                    58:6b:a8:cd:1c:44:59:25:06:6c:1a:6a:0c:01:02:
                    b5:bb:79:08:93:32:9b:87:db:2e:78:9f:1c:df:7a:
                    ec:59:9f:34:de:d4:7e:52:36:63:ff:f4:21:d4:55:
                    69:cf:33:fa:ef:4f:0c:33:e9:e2:5a:0e:64:18:53:
                    d4:d6:c0:67:52:fc:bd:03:11:a9:b0:05:f9:0a:8c:
                    3f:54:88:68:69:3b:f0:bb:fc:aa:82:7a:66:d8:ca:
                    13:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E9:9E:58:C3:5C:C4:D2:88:38:C5:54:EA:3E:6F:93:6B:23:AB:01
            X509v3 Authority Key Identifier:
                keyid:1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/1C5863392E99A282843AC6397A9E024E91731642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3439383a3a2f34362d3436203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0:498::/46

    Signature Algorithm: sha256WithRSAEncryption
         a6:97:06:62:ed:f1:f8:1e:25:07:40:47:36:f4:64:b7:79:af:
         be:22:ba:e1:95:ba:8c:7d:47:69:3e:ac:5b:6a:0c:7d:1b:05:
         21:b1:19:8b:0d:1d:c0:e2:04:d3:69:ef:c1:c9:d8:12:1b:26:
         22:d8:29:bd:e4:24:8e:6b:6a:c1:b8:10:0d:c5:a3:1a:f5:f1:
         de:ba:87:8f:5b:8c:f5:74:61:e9:0a:e7:58:d3:1b:a4:08:ed:
         d6:10:30:0e:45:6b:4e:7b:12:42:c8:b8:e6:73:fb:db:8a:21:
         e0:8e:1e:21:2f:c5:2f:11:87:80:47:8e:0f:39:27:d6:6d:e0:
         4d:e3:3b:91:28:56:82:63:7f:37:17:2d:00:17:fe:b0:f6:32:
         ef:8d:13:90:8b:c4:1a:3e:cc:f3:a7:59:5f:a1:79:2a:78:92:
         7f:80:ec:c6:4f:cd:6d:e7:97:57:20:d2:dc:79:91:84:9f:d8:
         ac:79:6e:b4:89:4d:c1:ee:7f:89:a8:12:8a:51:36:10:67:88:
         a1:29:4a:01:27:fe:6c:ac:1a:6f:ba:6e:89:0d:25:0f:19:b8:
         cb:cb:c3:02:dd:5d:23:40:61:1d:9a:9f:13:e0:cf:78:a7:0c:
         51:21:e0:15:6c:35:0a:b4:a0:b8:e6:f7:8a:ec:5b:1a:32:99:
         88:54:a3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----