Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/0/3133382e3230342e3233322e302f32332d3233203d3e20323633393137.roa
File:                     3133382e3230342e3233322e302f32332d3233203d3e20323633393137.roa (raw, json)
Hash identifier:          e6LWY+1o1r8vndr44YhjNwnHpY2H4onAZu4aadebebI=
Subject key identifier:   DA:A1:CF:9A:79:6F:66:25:9F:19:A3:8D:75:25:36:AF:6C:8E:EB:C1
Certificate issuer:       /CN=0533041425AD9B79362F91E0E8FDCC1A65E2CFD3
Certificate serial:       7B51841D1735A7FF8243EB63B73C9A0C218A29AB
Authority key identifier: 05:33:04:14:25:AD:9B:79:36:2F:91:E0:E8:FD:CC:1A:65:E2:CF:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0533041425AD9B79362F91E0E8FDCC1A65E2CFD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/0/3133382e3230342e3233322e302f32332d3233203d3e20323633393137.roa
Signing time:             Fri 15 Dec 2023 23:00:00 +0000
ROA not before:           Fri 15 Dec 2023 22:55:00 +0000
ROA not after:            Fri 13 Dec 2024 23:00:00 +0000
asID:                     263917
IP address blocks:        138.204.232.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:51:84:1d:17:35:a7:ff:82:43:eb:63:b7:3c:9a:0c:21:8a:29:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0533041425AD9B79362F91E0E8FDCC1A65E2CFD3
        Validity
            Not Before: Dec 15 22:55:00 2023 GMT
            Not After : Dec 13 23:00:00 2024 GMT
        Subject: CN=DAA1CF9A796F66259F19A38D752536AF6C8EEBC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:73:8c:b4:70:af:ef:1d:57:66:1c:5f:4d:e8:
                    e8:8d:ca:56:1e:87:1d:e1:6b:9e:67:7e:6e:61:9d:
                    c2:1e:a1:3e:d6:68:f7:89:df:29:a5:92:3e:3a:3a:
                    dc:7c:c8:62:cb:3a:8f:f2:7f:7b:94:8c:9e:db:4a:
                    35:12:03:71:34:de:cf:9c:7c:32:e7:63:2a:c7:0d:
                    8c:c2:25:89:f4:9c:4b:2f:c0:b9:85:8a:03:38:e6:
                    38:94:61:1c:6c:88:da:b5:24:f3:7e:65:3b:00:df:
                    7c:70:eb:fc:fc:a4:51:63:ea:1e:93:d7:b8:5e:8d:
                    47:c4:f8:b3:02:76:39:2b:ce:d1:f3:1d:6e:99:48:
                    7b:66:d3:7b:8b:25:1e:71:26:3d:3d:bc:19:a0:29:
                    7e:85:ef:b4:97:9f:53:08:ea:45:7c:9e:72:6c:0a:
                    a8:74:b4:95:e2:bb:e9:99:c5:5f:75:d1:b5:a1:52:
                    26:e0:e9:d4:26:d0:ab:e7:ba:c6:4c:76:e6:cb:63:
                    24:5f:a0:ea:45:87:94:e1:46:37:d2:fc:70:47:5c:
                    15:1a:97:f9:84:8a:6b:00:03:42:af:61:e9:0a:55:
                    8d:a3:5a:1a:27:22:24:0e:17:b9:1a:d2:d0:67:0d:
                    9a:0c:50:2d:1d:13:e6:f4:c2:b8:58:39:5c:b3:28:
                    4f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A1:CF:9A:79:6F:66:25:9F:19:A3:8D:75:25:36:AF:6C:8E:EB:C1
            X509v3 Authority Key Identifier:
                keyid:05:33:04:14:25:AD:9B:79:36:2F:91:E0:E8:FD:CC:1A:65:E2:CF:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/0/0533041425AD9B79362F91E0E8FDCC1A65E2CFD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0533041425AD9B79362F91E0E8FDCC1A65E2CFD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/0/3133382e3230342e3233322e302f32332d3233203d3e20323633393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:90:a6:87:10:0e:4d:4f:5e:84:02:5e:27:54:34:1b:27:ac:
         05:64:c0:0a:d7:7f:52:87:2d:ab:fe:56:2f:a1:f6:75:51:c6:
         25:f9:50:80:e8:68:b8:62:46:e7:49:68:a5:d9:e7:a7:a1:8e:
         1b:66:e4:5f:ea:72:f2:f3:80:e8:26:5e:a3:13:09:48:72:b6:
         b0:01:bc:a2:b5:a4:3c:ea:b4:d2:de:24:5d:a4:d9:a9:0b:16:
         4f:e6:f8:ca:21:a5:96:5e:ca:86:2b:43:53:23:89:45:06:19:
         38:87:b3:08:8b:a1:3b:cd:08:bd:d8:4d:cb:b0:61:e4:2a:e2:
         79:18:9b:a3:85:24:4d:4d:87:f1:d9:68:50:80:d5:b4:97:56:
         45:57:1a:83:69:3a:0b:42:18:31:ab:97:27:95:95:c8:c7:4a:
         f6:34:9f:9c:c9:9d:27:63:01:ec:4b:e9:b4:61:d7:cb:85:3d:
         cc:d6:eb:81:87:cb:c0:14:8f:44:9f:d6:29:25:7d:ec:e7:4e:
         e3:98:7a:b0:68:e4:90:cb:75:6d:ce:95:9e:84:12:88:a6:26:
         a5:e3:e0:37:7d:ab:16:c8:ac:ba:c0:d5:42:45:6c:a0:d0:de:
         90:7e:9a:fe:26:75:c0:c5:ab:54:b8:57:0a:1f:1f:0e:fa:c7:
         d9:e1:82:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org