Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/0/3231362e39382e3231362e302f32322d3232203d3e20323636323236.roa
File:                     3231362e39382e3231362e302f32322d3232203d3e20323636323236.roa (raw, json)
Hash identifier:          8Zge9RcOPMbUKPjEV8+/SCNHqTV+N+eCTmW5LPgd+Y4=
Subject key identifier:   B1:7C:81:6B:79:E3:CA:7D:02:9D:5A:FD:3C:2F:F6:09:66:D1:D8:C4
Certificate issuer:       /CN=544E553361B1501B388EADE4FA3F57D1E00882EB
Certificate serial:       3B77AD143C0F9194A90224D07241EB1B7FDD659E
Authority key identifier: 54:4E:55:33:61:B1:50:1B:38:8E:AD:E4:FA:3F:57:D1:E0:08:82:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/544E553361B1501B388EADE4FA3F57D1E00882EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/0/3231362e39382e3231362e302f32322d3232203d3e20323636323236.roa
Signing time:             Fri 23 Feb 2024 12:17:17 +0000
ROA not before:           Fri 23 Feb 2024 12:12:17 +0000
ROA not after:            Fri 21 Feb 2025 12:17:17 +0000
asID:                     266226
IP address blocks:        216.98.216.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:77:ad:14:3c:0f:91:94:a9:02:24:d0:72:41:eb:1b:7f:dd:65:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=544E553361B1501B388EADE4FA3F57D1E00882EB
        Validity
            Not Before: Feb 23 12:12:17 2024 GMT
            Not After : Feb 21 12:17:17 2025 GMT
        Subject: CN=B17C816B79E3CA7D029D5AFD3C2FF60966D1D8C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:51:25:2e:50:e3:6d:45:a0:6e:30:ce:42:b8:
                    56:35:a0:cb:42:30:8d:a4:af:a6:8e:d2:2b:82:8e:
                    c6:ab:73:2c:78:dd:8c:da:b7:4b:25:7c:35:93:29:
                    86:7f:3b:a0:0e:3b:9a:ca:c6:9e:24:ff:bf:0d:4e:
                    89:79:65:20:2d:e9:c5:f2:e5:8e:d2:0f:5b:6e:ec:
                    15:9f:be:5a:2f:a5:fb:9a:30:2a:cd:f0:d5:5a:59:
                    75:cc:33:d9:2c:77:f5:11:22:85:97:17:04:18:73:
                    34:72:1b:ae:66:f3:e9:ea:7e:46:40:0d:a7:dd:34:
                    46:c2:a9:d3:22:d5:70:29:6f:f7:4b:52:d8:fe:3c:
                    40:2e:63:f9:fb:a8:35:aa:56:61:84:0b:b9:7d:78:
                    77:78:6b:3f:17:77:cd:1e:f1:01:82:92:80:b9:14:
                    8e:42:ae:e4:29:57:9d:7d:82:94:29:20:c6:ec:ee:
                    72:0c:25:01:87:85:45:99:d6:42:7e:bf:10:34:d0:
                    f0:07:df:8e:ec:eb:8e:0a:b8:ed:a5:fe:87:08:0c:
                    a2:47:cd:8c:87:fc:ff:74:f5:29:f7:94:23:2f:6c:
                    09:b6:8a:36:10:bd:73:ef:b3:9b:8c:64:a5:ee:cc:
                    4f:d3:69:e3:d8:2a:78:e5:3e:95:15:95:67:93:d0:
                    fc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:7C:81:6B:79:E3:CA:7D:02:9D:5A:FD:3C:2F:F6:09:66:D1:D8:C4
            X509v3 Authority Key Identifier:
                keyid:54:4E:55:33:61:B1:50:1B:38:8E:AD:E4:FA:3F:57:D1:E0:08:82:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/0/544E553361B1501B388EADE4FA3F57D1E00882EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/544E553361B1501B388EADE4FA3F57D1E00882EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/0/3231362e39382e3231362e302f32322d3232203d3e20323636323236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.98.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:64:2f:28:84:b8:7e:bd:d8:a4:b6:de:af:ce:4d:f6:77:10:
         90:26:fd:cd:6e:9b:6d:00:db:0d:fd:4d:c8:95:ed:1c:72:92:
         23:b7:4f:7d:c8:ec:5e:57:3c:27:93:1e:66:c5:83:dc:f6:db:
         dc:60:fb:2f:31:d5:25:23:30:bd:d2:fd:12:67:ce:1d:19:47:
         55:83:cc:0f:e7:f1:4a:de:62:e5:b5:05:2c:f4:c9:37:b5:eb:
         b4:40:73:ea:50:dd:1e:9d:a0:9e:2e:a0:30:a6:e4:c2:65:80:
         80:12:32:18:36:f0:23:76:d8:5a:a4:cd:3d:d4:1c:25:fe:75:
         7b:2b:bb:58:e5:1e:be:8e:54:ce:54:56:68:e7:7c:79:b3:59:
         68:88:4b:f8:d7:2a:ad:1c:ac:b0:db:89:b2:95:1b:0b:76:24:
         19:8f:df:70:d0:b5:97:4a:82:aa:8c:29:d0:eb:c4:dd:8e:65:
         35:ae:25:d0:a3:3b:28:ad:d4:00:e2:6f:a4:c8:25:1b:a2:57:
         5c:7c:d4:9c:d3:1c:94:f9:d2:1e:80:1f:c8:bc:c4:78:95:10:
         04:bc:53:63:e7:32:86:c1:70:36:18:48:2b:90:13:5a:72:3b:
         92:1f:7d:77:a1:21:52:e6:c6:0a:20:7b:07:0f:ba:ec:08:a1:
         c2:6a:1c:31
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUO3etFDwPkZSpAiTQckHrG3/dZZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQ0RTU1MzM2MUIxNTAxQjM4OEVBREU0RkEzRjU3RDFF
MDA4ODJFQjAeFw0yNDAyMjMxMjEyMTdaFw0yNTAyMjExMjE3MTdaMDMxMTAvBgNV
BAMTKEIxN0M4MTZCNzlFM0NBN0QwMjlENUFGRDNDMkZGNjA5NjZEMUQ4QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFUSUuUONtRaBuMM5CuFY1oMtC
MI2kr6aO0iuCjsarcyx43Yzat0slfDWTKYZ/O6AOO5rKxp4k/78NTol5ZSAt6cXy
5Y7SD1tu7BWfvlovpfuaMCrN8NVaWXXMM9ksd/URIoWXFwQYczRyG65m8+nqfkZA
DafdNEbCqdMi1XApb/dLUtj+PEAuY/n7qDWqVmGEC7l9eHd4az8Xd80e8QGCkoC5
FI5CruQpV519gpQpIMbs7nIMJQGHhUWZ1kJ+vxA00PAH347s644KuO2l/ocIDKJH
zYyH/P909Sn3lCMvbAm2ijYQvXPvs5uMZKXuzE/TaePYKnjlPpUVlWeT0Pw1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUsXyBa3njyn0CnVr9PC/2CWbR2MQwHwYDVR0j
BBgwFoAUVE5VM2GxUBs4jq3k+j9X0eAIguswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEJrOFhpdUFpekdCeWpnQjI4Vm5FcU5CbmlTc3luN2NNY1QxNXlDSjFy
eWgvMC81NDRFNTUzMzYxQjE1MDFCMzg4RUFERTRGQTNGNTdEMUUwMDg4MkVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU0NEU1NTMzNjFCMTUwMUIz
ODhFQURFNEZBM0Y1N0QxRTAwODgyRUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhCazhYaXVBaXpHQnlqZ0IyOFZuRXFOQm5pU3N5bjdjTWNUMTV5Q0oxcnloLzAv
MzIzMTM2MmUzOTM4MmUzMjMxMzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzYzMjMyMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALYYtgwDQYJKoZIhvcNAQELBQADggEBAJ9kLyiE
uH692KS23q/OTfZ3EJAm/c1um20A2w39TciV7RxykiO3T33I7F5XPCeTHmbFg9z2
29xg+y8x1SUjML3S/RJnzh0ZR1WDzA/n8UreYuW1BSz0yTe167RAc+pQ3R6doJ4u
oDCm5MJlgIASMhg28CN22FqkzT3UHCX+dXsru1jlHr6OVM5UVmjnfHmzWWiIS/jX
Kq0crLDbibKVGwt2JBmP33DQtZdKgqqMKdDrxN2OZTWuJdCjOyit1ADib6TIJRui
V1x81JzTHJT50h6AH8i8xHiVEAS8U2PnMobBcDYYSCuQE1pyO5IffXehIVLmxgog
ewcPuuwIocJqHDE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org