Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/0/3231362e39382e3231372e302f32342d3234203d3e20323636323236.roa
File:                     3231362e39382e3231372e302f32342d3234203d3e20323636323236.roa (raw, json)
Hash identifier:          jyQmiR0I9joVQDwM5Vi0H7mWBPh3b38sGyjFyPuXugI=
Subject key identifier:   18:31:8D:D7:9D:43:96:04:F6:14:C1:9C:3F:24:D1:36:90:08:69:7D
Certificate issuer:       /CN=544E553361B1501B388EADE4FA3F57D1E00882EB
Certificate serial:       34E9CA7A3F522710C082937C170A91A788E73CE2
Authority key identifier: 54:4E:55:33:61:B1:50:1B:38:8E:AD:E4:FA:3F:57:D1:E0:08:82:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/544E553361B1501B388EADE4FA3F57D1E00882EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/0/3231362e39382e3231372e302f32342d3234203d3e20323636323236.roa
Signing time:             Fri 23 Feb 2024 15:17:18 +0000
ROA not before:           Fri 23 Feb 2024 15:12:18 +0000
ROA not after:            Fri 21 Feb 2025 15:17:18 +0000
asID:                     266226
IP address blocks:        216.98.217.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e9:ca:7a:3f:52:27:10:c0:82:93:7c:17:0a:91:a7:88:e7:3c:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=544E553361B1501B388EADE4FA3F57D1E00882EB
        Validity
            Not Before: Feb 23 15:12:18 2024 GMT
            Not After : Feb 21 15:17:18 2025 GMT
        Subject: CN=18318DD79D439604F614C19C3F24D1369008697D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:07:f0:74:e6:28:74:60:c5:7d:ba:ca:51:36:
                    79:8a:73:88:99:4e:2f:cb:ac:d8:0e:a5:07:8e:b2:
                    79:e6:09:20:52:86:96:fe:a6:3c:46:5d:a0:9c:4e:
                    e8:5a:5a:be:c2:37:21:85:cf:c0:72:c0:ce:18:0a:
                    c0:b8:06:ee:9b:8d:9f:18:27:27:9f:90:16:5e:59:
                    8f:3b:b8:4f:13:65:31:e5:ba:bb:d3:da:cf:48:3f:
                    ab:64:7c:96:07:57:5d:d8:40:e1:c3:ce:8d:67:5d:
                    75:bd:5c:15:19:92:63:bc:b8:03:dd:fb:e4:79:f2:
                    42:b5:b9:6b:1a:0a:cd:8f:16:7b:f2:6e:21:7b:01:
                    17:8e:0a:a5:7f:98:22:8b:43:1c:1f:b7:d3:b6:3c:
                    6b:8c:e0:75:5e:d5:f6:6f:ee:4f:e5:85:a8:4f:8e:
                    03:ea:82:57:43:26:7a:cb:3a:65:cc:25:ae:09:9f:
                    1d:e9:9c:4e:71:82:69:61:9a:c4:a7:b2:08:7c:82:
                    79:fe:42:e5:b3:27:98:b7:56:a4:dd:78:3c:3e:3f:
                    cf:b7:d1:f7:c3:3d:89:e9:36:68:2c:6c:58:e1:2d:
                    7d:41:35:c5:e6:09:67:80:4b:ca:64:4d:d9:10:15:
                    61:a1:6c:67:10:79:c3:34:08:5e:7a:b0:e3:69:01:
                    1a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:31:8D:D7:9D:43:96:04:F6:14:C1:9C:3F:24:D1:36:90:08:69:7D
            X509v3 Authority Key Identifier:
                keyid:54:4E:55:33:61:B1:50:1B:38:8E:AD:E4:FA:3F:57:D1:E0:08:82:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/0/544E553361B1501B388EADE4FA3F57D1E00882EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/544E553361B1501B388EADE4FA3F57D1E00882EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/0/3231362e39382e3231372e302f32342d3234203d3e20323636323236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.98.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:cd:f7:36:4a:be:d6:14:de:6e:33:24:0c:71:f8:b1:23:03:
         7c:a8:0b:f2:bc:d6:de:bb:98:2b:5b:43:ee:d7:2a:71:46:42:
         ca:6f:28:9e:bd:a4:b2:f1:04:32:43:27:e1:f0:72:8a:95:01:
         37:0b:ba:da:46:82:f9:bb:dc:4f:66:9d:4b:cb:79:93:d3:51:
         83:a1:f8:d2:7c:f1:5a:c2:2b:55:30:a4:84:bf:91:27:bb:6f:
         47:4d:15:2e:09:eb:7a:89:36:a4:86:fb:db:9a:65:da:66:14:
         a9:e3:94:fe:b7:0e:b9:3f:72:22:b5:ec:48:96:33:51:07:75:
         02:3c:14:dc:2b:de:0b:25:9c:ea:00:9b:86:91:f0:a2:2b:91:
         f6:a8:c0:76:51:a9:4e:c0:85:c6:73:1a:12:f7:b8:71:1e:e7:
         b0:68:13:58:d9:98:be:63:90:df:f9:12:b6:4f:0c:b3:f5:36:
         7d:56:81:ab:b4:fa:84:3e:d5:0e:61:93:3e:33:b6:86:0e:bc:
         b1:da:c1:7a:6c:47:db:7e:ff:6b:53:eb:f7:aa:7a:13:75:08:
         30:10:da:9e:23:4a:9b:c6:dd:b9:d0:09:1d:1c:32:3f:a8:c6:
         e6:28:2b:36:3e:07:4e:7a:1b:4d:3e:bd:5d:1d:ac:d3:30:d4:
         50:f5:19:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org