Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/3132382e3230312e32382e302f32322d3234203d3e20323636363131.roa
File:                     3132382e3230312e32382e302f32322d3234203d3e20323636363131.roa (raw, json)
Hash identifier:          3UuJoMG7ntZQq8GwaIsqqsSr6jSJa154Zi54xqG/Qas=
Subject key identifier:   DF:2D:B4:ED:C5:3E:20:16:93:76:FE:BD:47:2A:B2:4A:10:0F:82:83
Certificate issuer:       /CN=690A88BE654AD67BF30499F617A3C9BFC23AA33B
Certificate serial:       47E8251C8E1772A370E141AF85B8578EEF53B17C
Authority key identifier: 69:0A:88:BE:65:4A:D6:7B:F3:04:99:F6:17:A3:C9:BF:C2:3A:A3:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/690A88BE654AD67BF30499F617A3C9BFC23AA33B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/3132382e3230312e32382e302f32322d3234203d3e20323636363131.roa
Signing time:             Fri 25 Nov 2022 17:04:08 +0000
ROA not before:           Fri 25 Nov 2022 16:59:08 +0000
ROA not after:            Fri 24 Nov 2023 17:04:08 +0000
asID:                     266611
IP address blocks:        128.201.28.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:e8:25:1c:8e:17:72:a3:70:e1:41:af:85:b8:57:8e:ef:53:b1:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690A88BE654AD67BF30499F617A3C9BFC23AA33B
        Validity
            Not Before: Nov 25 16:59:08 2022 GMT
            Not After : Nov 24 17:04:08 2023 GMT
        Subject: CN=DF2DB4EDC53E20169376FEBD472AB24A100F8283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:88:31:78:6f:d4:dc:e5:a3:a7:ba:46:24:b1:
                    2a:f7:7e:68:04:de:ce:04:15:91:3e:c5:09:c3:14:
                    4a:68:24:da:d0:e9:b4:61:37:33:df:a4:ce:3f:f1:
                    15:a0:bb:37:25:5d:ed:3b:ed:82:40:ac:8b:64:6c:
                    34:ff:31:7d:e6:d4:dd:0e:60:54:66:a4:7f:5a:ac:
                    9b:73:e8:b3:06:e4:00:9b:ca:28:6c:3c:bb:49:f2:
                    bc:17:65:05:44:e9:c7:94:f0:18:f5:41:69:9f:a3:
                    c8:40:50:af:c4:c7:58:05:b9:04:9f:81:1e:0a:78:
                    b4:82:f3:15:5f:d6:ba:1f:5b:74:32:f1:07:f7:13:
                    4a:44:13:24:48:ef:3a:ad:87:90:d5:dd:d6:48:b2:
                    5a:49:cd:66:99:f0:24:71:0a:6a:5c:a2:32:ef:d7:
                    23:11:19:6e:ff:43:9d:cd:80:4f:8a:39:ce:b7:6b:
                    ad:d4:56:6a:d8:ed:c3:c1:ec:38:3f:28:ab:17:97:
                    44:9f:26:78:ff:25:ed:ca:1f:04:47:19:50:d3:fc:
                    ce:73:73:31:3c:6c:75:85:ef:65:d4:57:9a:95:8a:
                    e7:23:8d:95:65:78:72:63:00:e8:11:13:8b:9a:a5:
                    44:26:69:f9:4f:a4:05:2e:09:99:c0:6e:b7:19:4e:
                    38:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:2D:B4:ED:C5:3E:20:16:93:76:FE:BD:47:2A:B2:4A:10:0F:82:83
            X509v3 Authority Key Identifier:
                keyid:69:0A:88:BE:65:4A:D6:7B:F3:04:99:F6:17:A3:C9:BF:C2:3A:A3:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/690A88BE654AD67BF30499F617A3C9BFC23AA33B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/690A88BE654AD67BF30499F617A3C9BFC23AA33B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/3132382e3230312e32382e302f32322d3234203d3e20323636363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:17:46:ac:a3:83:1f:d7:31:80:fd:75:51:72:ba:3d:21:e8:
         d8:4a:a0:b2:d1:8a:d1:0c:1a:2f:09:b4:a8:88:d6:76:a6:2e:
         6a:fd:d2:18:0d:ce:af:b6:51:0c:d3:8b:b1:0d:36:a5:ce:0e:
         46:bc:ed:39:2e:63:c1:90:3e:20:f9:83:7e:a9:c2:09:ab:b5:
         af:ba:d2:54:9f:4d:90:ca:7a:19:b2:86:ee:35:39:f1:b2:4a:
         e1:22:34:d1:76:c1:d3:76:f3:b6:b2:7c:4e:0a:cf:f8:a4:93:
         f2:60:a0:82:de:f5:17:15:47:43:64:9d:05:94:11:d4:7a:2d:
         c9:64:ef:f1:b3:b1:b3:d1:2d:05:13:a6:8f:8b:70:c6:3b:15:
         6d:52:aa:72:96:bc:9d:e4:85:92:93:1c:0a:e7:74:fa:1c:2a:
         b1:9a:7c:db:55:25:36:d0:57:e7:7d:34:fc:b9:2f:bf:d4:31:
         e9:97:09:78:4b:22:4d:e8:29:49:a6:ec:56:df:b9:9f:a8:12:
         ed:68:00:a9:ae:8a:a3:1b:c9:9d:fe:8c:b0:5f:df:b6:f4:7b:
         64:0a:e9:d5:9a:19:3d:7c:40:dc:ec:8e:ab:88:1b:88:67:d0:
         8c:a9:ef:ed:cc:62:c2:22:45:62:fd:30:82:98:fb:09:8b:6a:
         ab:db:a9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:16:25 2023 by rpki-client on console-fra.rpki-client.org