Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/0/3231362e39382e3231362e302f32342d3234203d3e20323636323236.roa
File:                     3231362e39382e3231362e302f32342d3234203d3e20323636323236.roa (raw, json)
Hash identifier:          3DhzZSySpZ3Hj+IuwJ4TCp1spET9d7pLwGsipDR3aZE=
Subject key identifier:   68:98:55:7B:DD:E1:81:10:C2:45:27:7F:63:1D:D7:C5:E8:2B:25:7E
Certificate issuer:       /CN=544E553361B1501B388EADE4FA3F57D1E00882EB
Certificate serial:       529BAEA5232E2BE0818262547780F324392D3C17
Authority key identifier: 54:4E:55:33:61:B1:50:1B:38:8E:AD:E4:FA:3F:57:D1:E0:08:82:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/544E553361B1501B388EADE4FA3F57D1E00882EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/0/3231362e39382e3231362e302f32342d3234203d3e20323636323236.roa
Signing time:             Fri 23 Feb 2024 15:17:17 +0000
ROA not before:           Fri 23 Feb 2024 15:12:17 +0000
ROA not after:            Fri 21 Feb 2025 15:17:17 +0000
asID:                     266226
IP address blocks:        216.98.216.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:9b:ae:a5:23:2e:2b:e0:81:82:62:54:77:80:f3:24:39:2d:3c:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=544E553361B1501B388EADE4FA3F57D1E00882EB
        Validity
            Not Before: Feb 23 15:12:17 2024 GMT
            Not After : Feb 21 15:17:17 2025 GMT
        Subject: CN=6898557BDDE18110C245277F631DD7C5E82B257E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:48:e7:0c:8f:08:1f:42:0d:9d:f4:34:1d:e2:
                    54:b4:4f:c9:74:39:bd:7b:7b:f6:37:00:c5:4a:61:
                    09:18:d7:2c:08:1f:c6:af:72:9b:6a:06:da:69:df:
                    35:1e:8b:04:ce:5b:0e:c2:d0:73:6b:dd:3c:ea:c6:
                    1d:08:0a:14:97:b1:37:24:a6:88:32:3e:33:fd:be:
                    b6:b0:f6:af:1d:e4:62:2b:4a:cb:ab:5b:e3:1d:5a:
                    99:69:27:fc:df:db:f3:16:5e:55:8e:af:2d:30:35:
                    ea:69:b5:7f:f3:f7:df:73:45:8b:2c:fa:a9:8d:29:
                    04:db:73:ec:0b:81:e5:f9:28:a0:be:84:fe:b4:b6:
                    56:61:cf:d8:3b:41:4c:ad:ab:83:f7:a8:05:90:00:
                    9b:ad:23:c2:fa:0b:f0:24:b6:aa:77:bd:b8:2e:fc:
                    ed:e5:c5:50:8b:be:c0:e4:8c:bb:09:28:15:f5:ef:
                    5a:55:08:80:91:6d:93:97:72:08:4e:fc:90:d3:af:
                    8e:ad:a7:bd:31:ce:97:e1:1d:30:e1:f0:c5:38:c0:
                    a3:86:87:de:e3:91:50:99:94:84:fc:24:ef:7c:13:
                    04:c7:83:c5:38:03:8c:7d:b7:f0:9d:61:c9:5f:bf:
                    4d:bc:d0:47:05:4f:74:06:9a:61:fb:b2:9c:b1:29:
                    73:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:98:55:7B:DD:E1:81:10:C2:45:27:7F:63:1D:D7:C5:E8:2B:25:7E
            X509v3 Authority Key Identifier:
                keyid:54:4E:55:33:61:B1:50:1B:38:8E:AD:E4:FA:3F:57:D1:E0:08:82:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/0/544E553361B1501B388EADE4FA3F57D1E00882EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/544E553361B1501B388EADE4FA3F57D1E00882EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/0/3231362e39382e3231362e302f32342d3234203d3e20323636323236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.98.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:1b:a6:c9:90:c1:50:aa:e4:df:41:9b:f3:37:c9:21:50:42:
         2d:d2:38:13:a9:e5:ed:93:f8:32:ae:c5:a4:4f:bd:82:12:43:
         87:a5:1c:a9:d0:d1:83:9d:9a:2e:16:9e:80:5d:e4:19:e6:00:
         e3:fa:4f:c0:e0:dc:2a:9d:45:6f:d0:8e:21:0e:8b:51:56:05:
         4a:82:e8:77:c9:6c:d6:fc:9b:e2:05:d9:07:6e:a2:9d:d2:98:
         7e:30:b5:e1:c4:bd:d0:6a:b0:bc:e2:d6:36:32:72:0f:9b:01:
         2f:fe:52:5a:31:60:03:79:5a:c2:8d:5c:43:27:7f:61:b3:78:
         f1:a1:30:45:d1:55:a9:84:02:51:74:c8:e5:7f:b8:08:1d:74:
         11:9e:af:89:ab:37:e1:2a:fb:a3:ae:75:f4:59:66:76:cf:7f:
         bf:1b:20:60:18:2f:48:76:18:4c:4a:53:e5:0b:85:d3:2c:b7:
         7a:44:a2:5d:d7:a3:51:23:a1:81:03:09:2c:5f:5b:ca:30:17:
         96:e7:f6:ee:82:ec:b5:7d:28:68:27:f3:9d:c5:0d:6f:a5:c2:
         3f:cf:9d:0d:16:e8:df:74:91:5c:83:81:bf:fb:59:fa:38:6a:
         16:f2:2c:18:5f:82:1d:49:53:5b:a0:f1:6e:46:92:62:ac:ac:
         f0:2a:ee:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:08 2024 by rpki-client on console-ams.rpki-client.org