Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/0/3133382e3230342e3233322e302f32322d3232203d3e20323633393137.roa
File:                     3133382e3230342e3233322e302f32322d3232203d3e20323633393137.roa (raw, json)
Hash identifier:          ShQxr54bLJcHUxrmTG+8dRoczfyOZ1lVqkSBZXVfL6c=
Subject key identifier:   57:52:82:7C:0C:07:91:BB:99:6F:27:85:16:0F:4A:71:43:46:5A:D7
Certificate issuer:       /CN=0533041425AD9B79362F91E0E8FDCC1A65E2CFD3
Certificate serial:       373A2DC218E909D9EB638B85CB56D9B0BABD064D
Authority key identifier: 05:33:04:14:25:AD:9B:79:36:2F:91:E0:E8:FD:CC:1A:65:E2:CF:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0533041425AD9B79362F91E0E8FDCC1A65E2CFD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/0/3133382e3230342e3233322e302f32322d3232203d3e20323633393137.roa
Signing time:             Sat 16 Dec 2023 00:00:00 +0000
ROA not before:           Fri 15 Dec 2023 23:55:00 +0000
ROA not after:            Sat 14 Dec 2024 00:00:00 +0000
asID:                     263917
IP address blocks:        138.204.232.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:3a:2d:c2:18:e9:09:d9:eb:63:8b:85:cb:56:d9:b0:ba:bd:06:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0533041425AD9B79362F91E0E8FDCC1A65E2CFD3
        Validity
            Not Before: Dec 15 23:55:00 2023 GMT
            Not After : Dec 14 00:00:00 2024 GMT
        Subject: CN=5752827C0C0791BB996F2785160F4A7143465AD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:71:42:a6:d5:ea:6e:05:c9:b4:d8:7b:ba:53:
                    c8:70:6e:4f:e8:5f:bc:7e:23:0c:52:72:0f:ac:25:
                    54:e3:1d:ad:1e:93:ac:67:26:ac:02:e4:17:c7:9e:
                    34:1f:e8:24:cd:43:1a:ac:27:e7:1a:5d:9d:9c:4f:
                    e7:71:95:64:67:64:9a:14:ac:37:47:e9:73:1e:3a:
                    5d:29:8a:76:a0:08:8b:50:b2:37:c3:95:43:d5:f7:
                    e1:26:9a:72:50:55:ef:fb:41:4b:55:1f:5f:4c:4d:
                    2c:a1:7c:87:87:02:81:3d:0b:49:c7:08:eb:27:23:
                    f2:2e:ef:01:1b:4c:5d:d7:4e:b9:0b:44:65:47:b4:
                    cf:ea:60:9b:8a:6e:3e:b3:3c:1f:11:1e:b3:a8:9e:
                    32:91:34:a6:8f:e2:52:8e:b4:74:a0:e4:2a:a2:04:
                    20:88:2b:3c:9a:d1:03:7e:e8:b6:f8:00:9b:fa:26:
                    61:d8:81:26:58:93:09:36:48:71:bf:3c:a0:82:31:
                    bd:fa:e2:18:b2:46:44:d3:12:0c:f7:15:14:8a:63:
                    ae:63:11:cb:ef:52:19:f9:1b:25:66:fb:41:b3:a6:
                    a4:b4:d3:c2:4d:55:52:66:a9:31:b3:87:b0:aa:a1:
                    9b:74:89:54:bc:70:c7:ef:f4:81:3d:fe:d5:5f:ae:
                    82:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:52:82:7C:0C:07:91:BB:99:6F:27:85:16:0F:4A:71:43:46:5A:D7
            X509v3 Authority Key Identifier:
                keyid:05:33:04:14:25:AD:9B:79:36:2F:91:E0:E8:FD:CC:1A:65:E2:CF:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/0/0533041425AD9B79362F91E0E8FDCC1A65E2CFD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0533041425AD9B79362F91E0E8FDCC1A65E2CFD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/0/3133382e3230342e3233322e302f32322d3232203d3e20323633393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:92:07:e3:a7:51:c5:80:e8:09:fe:a5:b2:0c:7d:7d:cd:05:
         df:4f:fa:02:87:35:a2:51:ba:f3:a3:62:d8:f2:16:e3:61:c5:
         e4:f3:0c:74:57:24:a7:a3:98:5c:2b:ba:65:45:99:7b:28:34:
         91:0d:87:16:d3:0c:10:da:1b:fc:98:42:6b:87:3d:f6:c6:ea:
         1b:c7:82:03:78:ad:84:d9:4e:6f:34:84:24:bf:e6:39:c4:e0:
         d0:ab:1b:ee:17:4d:b7:e3:b3:68:d5:81:12:bc:00:62:55:34:
         a8:4d:d3:37:a4:9b:ff:3b:86:37:bd:16:d3:4d:64:79:48:ae:
         ad:6c:36:c5:1b:78:6f:e4:12:a9:c5:f7:50:55:a1:1a:9d:37:
         e7:05:bd:5a:11:72:ac:08:44:ad:2f:bd:2b:56:77:54:78:7a:
         c3:06:b5:8f:66:38:d3:08:91:fe:fe:42:8f:94:cf:9f:c7:9a:
         0c:17:e4:4a:e1:ef:15:ae:51:2e:44:fd:02:1b:6c:9e:b5:b3:
         42:79:67:3f:27:af:e5:b5:60:c2:ea:9c:f8:4f:b0:0f:cb:9b:
         2b:d7:99:76:e5:85:0c:20:cb:45:6a:58:03:fd:3c:08:c6:e4:
         15:d4:1b:84:2b:96:ea:4f:d8:15:a1:94:5c:81:be:b8:4e:76:
         f6:c7:6d:37
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUNzotwhjpCdnrY4uFy1bZsLq9Bk0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDUzMzA0MTQyNUFEOUI3OTM2MkY5MUUwRThGRENDMUE2
NUUyQ0ZEMzAeFw0yMzEyMTUyMzU1MDBaFw0yNDEyMTQwMDAwMDBaMDMxMTAvBgNV
BAMTKDU3NTI4MjdDMEMwNzkxQkI5OTZGMjc4NTE2MEY0QTcxNDM0NjVBRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAcUKm1epuBcm02Hu6U8hwbk/o
X7x+IwxScg+sJVTjHa0ek6xnJqwC5BfHnjQf6CTNQxqsJ+caXZ2cT+dxlWRnZJoU
rDdH6XMeOl0pinagCItQsjfDlUPV9+EmmnJQVe/7QUtVH19MTSyhfIeHAoE9C0nH
COsnI/Iu7wEbTF3XTrkLRGVHtM/qYJuKbj6zPB8RHrOonjKRNKaP4lKOtHSg5Cqi
BCCIKzya0QN+6Lb4AJv6JmHYgSZYkwk2SHG/PKCCMb364hiyRkTTEgz3FRSKY65j
EcvvUhn5GyVm+0GzpqS008JNVVJmqTGzh7CqoZt0iVS8cMfv9IE9/tVfroL9AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUV1KCfAwHkbuZbyeFFg9KcUNGWtcwHwYDVR0j
BBgwFoAUBTMEFCWtm3k2L5Hg6P3MGmXiz9MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFZUQlpYSDE4bk1CcnMzMmp1dENzZ3hRUEZqTDFxaUd0d1VkcVBFNU4x
WlUvMC8wNTMzMDQxNDI1QUQ5Qjc5MzYyRjkxRTBFOEZEQ0MxQTY1RTJDRkQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA1MzMwNDE0MjVBRDlCNzkz
NjJGOTFFMEU4RkRDQzFBNjVFMkNGRDMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hWVEJaWEgxOG5NQnJzMzJqdXRDc2d4UVBGakwxcWlHdHdVZHFQRTVOMVpVLzAv
MzEzMzM4MmUzMjMwMzQyZTMyMzMzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMzM5MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAorM6DANBgkqhkiG9w0BAQsFAAOCAQEAZJIH
46dRxYDoCf6lsgx9fc0F30/6Aoc1olG686Ni2PIW42HF5PMMdFckp6OYXCu6ZUWZ
eyg0kQ2HFtMMENob/JhCa4c99sbqG8eCA3ithNlObzSEJL/mOcTg0Ksb7hdNt+Oz
aNWBErwAYlU0qE3TN6Sb/zuGN70W001keUiurWw2xRt4b+QSqcX3UFWhGp035wW9
WhFyrAhErS+9K1Z3VHh6wwa1j2Y40wiR/v5Cj5TPn8eaDBfkSuHvFa5RLkT9Ahts
nrWzQnlnPyev5bVgwuqc+E+wD8ubK9eZduWFDCDLRWpYA/08CMbkFdQbhCuW6k/Y
FaGUXIG+uE529sdtNw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org