Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/3231362e39382e3230382e302f32322d3332203d3e20323636323037.roa
File:                     3231362e39382e3230382e302f32322d3332203d3e20323636323037.roa (raw, json)
Hash identifier:          AiCLOX2uPUq4WJ1CFZl5rHrqmoUxfVE3qt17KzI4EN0=
Subject key identifier:   A0:69:40:1D:88:5B:B4:A5:70:35:9D:18:E9:D3:0D:EE:80:DD:05:85
Certificate issuer:       /CN=997A367A05F12CC9A82B3B81E4FD7158F9521BB7
Certificate serial:       15E42DDDEC67AA9097FFB3E3606C1383C5F47D3B
Authority key identifier: 99:7A:36:7A:05:F1:2C:C9:A8:2B:3B:81:E4:FD:71:58:F9:52:1B:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/997A367A05F12CC9A82B3B81E4FD7158F9521BB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/3231362e39382e3230382e302f32322d3332203d3e20323636323037.roa
Signing time:             Fri 05 Jul 2024 20:33:40 +0000
ROA not before:           Fri 05 Jul 2024 20:28:40 +0000
ROA not after:            Fri 04 Jul 2025 20:33:40 +0000
asID:                     266207
IP address blocks:        216.98.208.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e4:2d:dd:ec:67:aa:90:97:ff:b3:e3:60:6c:13:83:c5:f4:7d:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=997A367A05F12CC9A82B3B81E4FD7158F9521BB7
        Validity
            Not Before: Jul  5 20:28:40 2024 GMT
            Not After : Jul  4 20:33:40 2025 GMT
        Subject: CN=A069401D885BB4A570359D18E9D30DEE80DD0585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c5:6b:18:34:3b:d1:74:8c:c1:7e:7f:f5:b4:
                    15:cd:d2:dd:10:d9:f1:b3:a2:5d:9c:f8:5a:1a:9b:
                    98:9f:8f:13:4b:1f:30:ff:1c:60:15:96:c8:0d:e9:
                    29:67:00:67:c2:84:a8:7d:f0:7b:61:c2:63:59:57:
                    04:3c:74:f2:7e:54:1f:01:7e:b2:51:91:6b:d5:ec:
                    dd:4f:5a:2b:a5:f3:cb:83:ca:02:6a:81:3c:de:f5:
                    61:ad:d8:1e:e2:ee:46:e0:72:9f:43:32:3e:59:7b:
                    30:7d:54:3f:b4:b3:e4:f9:ed:8a:83:9a:b8:64:ad:
                    2d:0c:95:4e:83:df:bb:3e:4b:a6:61:d7:3b:25:4c:
                    11:7c:8f:2f:14:c4:4e:a6:19:50:e7:33:23:ae:03:
                    20:2e:90:14:3b:02:e1:79:76:88:67:fe:79:c1:16:
                    43:7f:2d:8a:2e:02:17:fd:b8:4e:d6:4d:84:4c:c1:
                    c3:d2:21:33:5d:a9:46:a7:9a:8e:8f:1d:9d:9a:60:
                    6d:8e:82:d1:36:5e:e7:34:e7:7a:66:de:32:68:19:
                    81:46:c2:4d:e8:a5:10:3f:52:78:bb:84:96:48:88:
                    8d:6c:a0:51:c8:55:75:f4:49:90:8e:07:a2:54:62:
                    c3:2b:0c:29:f9:65:0b:f7:34:83:d1:c3:ba:e9:95:
                    4c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:69:40:1D:88:5B:B4:A5:70:35:9D:18:E9:D3:0D:EE:80:DD:05:85
            X509v3 Authority Key Identifier:
                keyid:99:7A:36:7A:05:F1:2C:C9:A8:2B:3B:81:E4:FD:71:58:F9:52:1B:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/997A367A05F12CC9A82B3B81E4FD7158F9521BB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/997A367A05F12CC9A82B3B81E4FD7158F9521BB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/3231362e39382e3230382e302f32322d3332203d3e20323636323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.98.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:a9:64:ae:d7:05:31:80:04:97:78:ac:e8:e9:dc:9d:86:16:
         aa:86:22:24:62:73:4f:bb:48:5b:a3:ba:00:a3:4d:f4:56:e2:
         0f:bb:39:76:95:fd:d8:95:ff:99:0d:09:5d:19:89:f2:b6:fb:
         49:49:cd:2c:28:61:10:05:0b:49:a9:67:85:3a:32:3a:55:97:
         2b:09:1c:9b:d0:b3:5a:5d:5e:6c:bb:ac:fd:a9:b9:80:60:bf:
         fd:ab:13:3e:b9:8f:4d:bc:3b:fa:b4:5d:71:26:98:97:c4:ca:
         6e:12:e4:1f:c3:84:cf:b6:3a:a4:cd:1e:0e:f6:ad:42:1e:83:
         57:b7:ad:e1:3c:71:c3:fe:fb:48:09:2e:68:db:fd:4e:b1:4b:
         4f:32:0b:9b:71:a0:58:c4:3c:fb:4b:bb:2e:61:87:f8:af:37:
         e8:5d:37:ca:38:2e:02:2e:9b:48:85:39:8b:5f:23:70:6f:4f:
         49:d1:7e:7e:b1:61:3f:b6:70:b5:34:07:a0:e1:fe:74:61:05:
         51:d9:03:6a:a4:53:91:21:78:49:64:d2:8e:8e:e6:7b:12:c4:
         cf:3d:a5:cb:3c:6f:ea:aa:68:f2:4a:91:64:85:27:54:b0:19:
         3c:31:88:28:7d:3a:02:ba:f0:e3:9b:aa:9a:ac:46:aa:d2:07:
         d1:7b:eb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:22:00 2025 by rpki-client