Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/0/3133382e3230342e3233332e302f32342d3234203d3e20323633393137.roa
File:                     3133382e3230342e3233332e302f32342d3234203d3e20323633393137.roa (raw, json)
Hash identifier:          9m99vxk78cxG/kQk9HP1/TV9LymovnV/VQ59c3cut/0=
Subject key identifier:   68:E4:EA:90:71:39:F0:5C:92:56:66:BC:C9:2B:6B:E8:3C:79:C9:CA
Certificate issuer:       /CN=0533041425AD9B79362F91E0E8FDCC1A65E2CFD3
Certificate serial:       25806E75F94D274064E2907C64C1ECE736483373
Authority key identifier: 05:33:04:14:25:AD:9B:79:36:2F:91:E0:E8:FD:CC:1A:65:E2:CF:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0533041425AD9B79362F91E0E8FDCC1A65E2CFD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/0/3133382e3230342e3233332e302f32342d3234203d3e20323633393137.roa
Signing time:             Sat 16 Dec 2023 00:00:00 +0000
ROA not before:           Fri 15 Dec 2023 23:55:00 +0000
ROA not after:            Sat 14 Dec 2024 00:00:00 +0000
asID:                     263917
IP address blocks:        138.204.233.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:80:6e:75:f9:4d:27:40:64:e2:90:7c:64:c1:ec:e7:36:48:33:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0533041425AD9B79362F91E0E8FDCC1A65E2CFD3
        Validity
            Not Before: Dec 15 23:55:00 2023 GMT
            Not After : Dec 14 00:00:00 2024 GMT
        Subject: CN=68E4EA907139F05C925666BCC92B6BE83C79C9CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:86:19:ab:45:89:f0:ba:1a:cd:d3:17:cf:dc:
                    b9:7f:36:51:24:82:41:0b:75:4b:48:43:cc:19:fe:
                    7b:99:47:e2:77:4b:04:e3:d4:65:72:65:6b:79:d4:
                    fa:50:94:f1:5c:ef:b9:3c:58:ee:5e:27:fe:27:b2:
                    1f:c2:3f:5f:23:e9:07:55:3d:18:25:6e:8b:4f:47:
                    f4:0f:a9:c1:6c:3e:9d:c6:e6:25:53:7b:a8:ce:ea:
                    ac:5b:79:b9:ce:55:bf:34:da:54:4d:36:34:cb:62:
                    80:6c:56:28:d9:8b:10:c6:40:46:bd:dc:7d:3d:15:
                    ab:fa:08:4e:6c:4a:a3:83:36:68:2a:05:67:b8:13:
                    3c:23:7d:b3:b5:28:c5:6f:66:03:d8:3b:b7:cb:2b:
                    5b:25:b3:e7:e3:43:e4:cb:45:d7:2e:12:cf:59:70:
                    d2:b6:f4:c9:da:56:2b:49:7e:90:68:76:f4:f1:ce:
                    70:3a:48:a5:ab:f8:7f:a5:80:f4:67:93:94:aa:ab:
                    e1:2d:63:ac:e1:50:85:48:0f:80:44:01:09:6f:c7:
                    89:09:5f:09:66:33:bf:ad:69:c2:03:19:da:19:5b:
                    8c:17:ea:e9:6c:d3:75:45:d0:4d:09:f8:ac:92:47:
                    70:6b:3d:2e:75:a2:1c:17:8f:c9:47:b8:08:a2:c6:
                    c2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E4:EA:90:71:39:F0:5C:92:56:66:BC:C9:2B:6B:E8:3C:79:C9:CA
            X509v3 Authority Key Identifier:
                keyid:05:33:04:14:25:AD:9B:79:36:2F:91:E0:E8:FD:CC:1A:65:E2:CF:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/0/0533041425AD9B79362F91E0E8FDCC1A65E2CFD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0533041425AD9B79362F91E0E8FDCC1A65E2CFD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/0/3133382e3230342e3233332e302f32342d3234203d3e20323633393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:d0:ec:59:df:0d:71:2f:fb:b5:96:dd:3a:b2:50:60:8c:76:
         98:a3:55:6f:31:5b:97:ac:0c:0a:07:a2:54:f0:a1:74:1e:79:
         c7:c5:b7:c3:40:17:c6:f1:94:4d:db:9a:b5:1c:e8:4f:3d:62:
         5d:71:21:57:a4:75:51:bd:aa:fd:94:25:70:bd:ba:c1:87:cf:
         74:e5:f6:f1:ae:1a:ef:4e:50:4b:54:66:74:cb:af:6e:d5:27:
         2c:85:9b:36:9a:25:0a:35:24:29:7c:e3:7c:07:5b:f6:9e:9f:
         38:31:b6:7f:b5:b5:6d:15:b6:90:5e:2e:e7:8e:fc:b7:5f:51:
         5e:b6:8c:f3:81:77:72:30:7e:01:0a:c8:60:64:58:06:0a:a5:
         8c:48:73:6e:68:67:b2:87:42:70:50:d0:11:41:bb:8f:33:45:
         fa:86:9d:b3:d4:8d:1f:53:de:04:dd:7b:23:8b:0c:54:52:0a:
         5e:1f:76:89:11:dd:90:27:a2:b6:f5:d2:fe:0b:ae:36:c5:ea:
         2e:f0:60:97:a8:9e:e8:b9:d5:2b:e0:dc:54:14:97:d8:c4:93:
         11:59:ee:95:bb:93:c7:ad:3f:84:14:ba:0a:2b:3c:2f:b4:91:
         67:e5:7c:2c:80:79:54:78:a5:32:a4:4a:ed:e8:07:a7:cc:b6:
         3f:95:da:9b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUJYBudflNJ0Bk4pB8ZMHs5zZIM3MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDUzMzA0MTQyNUFEOUI3OTM2MkY5MUUwRThGRENDMUE2
NUUyQ0ZEMzAeFw0yMzEyMTUyMzU1MDBaFw0yNDEyMTQwMDAwMDBaMDMxMTAvBgNV
BAMTKDY4RTRFQTkwNzEzOUYwNUM5MjU2NjZCQ0M5MkI2QkU4M0M3OUM5Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkhhmrRYnwuhrN0xfP3Ll/NlEk
gkELdUtIQ8wZ/nuZR+J3SwTj1GVyZWt51PpQlPFc77k8WO5eJ/4nsh/CP18j6QdV
PRglbotPR/QPqcFsPp3G5iVTe6jO6qxbebnOVb802lRNNjTLYoBsVijZixDGQEa9
3H09Fav6CE5sSqODNmgqBWe4EzwjfbO1KMVvZgPYO7fLK1sls+fjQ+TLRdcuEs9Z
cNK29MnaVitJfpBodvTxznA6SKWr+H+lgPRnk5Sqq+EtY6zhUIVID4BEAQlvx4kJ
XwlmM7+tacIDGdoZW4wX6uls03VF0E0J+KySR3BrPS51ohwXj8lHuAiixsKLAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUaOTqkHE58FySVma8yStr6Dx5ycowHwYDVR0j
BBgwFoAUBTMEFCWtm3k2L5Hg6P3MGmXiz9MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFZUQlpYSDE4bk1CcnMzMmp1dENzZ3hRUEZqTDFxaUd0d1VkcVBFNU4x
WlUvMC8wNTMzMDQxNDI1QUQ5Qjc5MzYyRjkxRTBFOEZEQ0MxQTY1RTJDRkQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA1MzMwNDE0MjVBRDlCNzkz
NjJGOTFFMEU4RkRDQzFBNjVFMkNGRDMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hWVEJaWEgxOG5NQnJzMzJqdXRDc2d4UVBGakwxcWlHdHdVZHFQRTVOMVpVLzAv
MzEzMzM4MmUzMjMwMzQyZTMyMzMzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM5MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIrM6TANBgkqhkiG9w0BAQsFAAOCAQEAEdDs
Wd8NcS/7tZbdOrJQYIx2mKNVbzFbl6wMCgeiVPChdB55x8W3w0AXxvGUTduatRzo
Tz1iXXEhV6R1Ub2q/ZQlcL26wYfPdOX28a4a705QS1RmdMuvbtUnLIWbNpolCjUk
KXzjfAdb9p6fODG2f7W1bRW2kF4u5478t19RXraM84F3cjB+AQrIYGRYBgqljEhz
bmhnsodCcFDQEUG7jzNF+oads9SNH1PeBN17I4sMVFIKXh92iRHdkCeitvXS/guu
NsXqLvBgl6ie6LnVK+DcVBSX2MSTEVnulbuTx60/hBS6Cis8L7SRZ+V8LIB5VHil
MqRK7egHp8y2P5Xamw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org