Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/0/3133382e3230342e3233342e302f32342d3234203d3e20323633393137.roa
File:                     3133382e3230342e3233342e302f32342d3234203d3e20323633393137.roa (raw, json)
Hash identifier:          ZGuBJaJRiik2n95t7ZsO1PRrxupjSTxQsfbILJhSSfE=
Subject key identifier:   1E:E3:B7:E5:23:D2:48:8F:A6:B9:2E:35:65:76:6F:48:E4:C1:BA:7D
Certificate issuer:       /CN=0533041425AD9B79362F91E0E8FDCC1A65E2CFD3
Certificate serial:       60386350BD5894CCDA64FDA85C9B5497E32D48F9
Authority key identifier: 05:33:04:14:25:AD:9B:79:36:2F:91:E0:E8:FD:CC:1A:65:E2:CF:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0533041425AD9B79362F91E0E8FDCC1A65E2CFD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/0/3133382e3230342e3233342e302f32342d3234203d3e20323633393137.roa
Signing time:             Fri 15 Dec 2023 23:00:00 +0000
ROA not before:           Fri 15 Dec 2023 22:55:00 +0000
ROA not after:            Fri 13 Dec 2024 23:00:00 +0000
asID:                     263917
IP address blocks:        138.204.234.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:38:63:50:bd:58:94:cc:da:64:fd:a8:5c:9b:54:97:e3:2d:48:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0533041425AD9B79362F91E0E8FDCC1A65E2CFD3
        Validity
            Not Before: Dec 15 22:55:00 2023 GMT
            Not After : Dec 13 23:00:00 2024 GMT
        Subject: CN=1EE3B7E523D2488FA6B92E3565766F48E4C1BA7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:97:b0:03:06:1d:e5:74:0a:b5:55:6c:7e:d2:
                    7e:b1:24:34:d7:99:ef:6f:29:a1:f7:49:52:d4:5b:
                    da:20:b5:e7:2a:4f:85:30:ea:e4:16:b2:63:ac:01:
                    8d:de:15:b4:8b:8f:a8:f1:86:2d:fb:ad:c4:f8:2f:
                    81:39:12:b3:52:9d:ba:9c:b4:22:b2:e9:7e:ac:a0:
                    5a:ce:6b:5e:a7:3b:d8:36:b2:47:6b:65:7a:61:2f:
                    69:61:e5:b9:ed:4a:ab:43:fe:ee:6b:07:3e:77:dc:
                    dd:7d:ca:5e:f6:e6:01:43:40:4e:1e:74:73:26:7d:
                    a6:8d:10:dd:cb:05:9d:13:f9:45:77:f9:4c:fb:e1:
                    f4:24:06:3d:f1:7f:f7:9e:16:6c:d7:ae:a3:85:46:
                    40:97:af:77:fe:ac:12:bf:7e:ad:2b:43:62:71:18:
                    5f:8a:d2:82:f2:72:e5:70:a8:9f:bf:8b:db:1b:b8:
                    b7:dd:45:1e:a9:c4:19:22:f0:7c:55:13:e9:f7:a4:
                    56:d1:3f:69:a9:28:5e:d6:1c:bc:d7:49:b7:70:a5:
                    4f:29:40:f8:ba:d0:64:43:0a:10:83:fb:45:ca:57:
                    14:7f:fb:8d:9a:d8:b2:6b:dd:7d:fb:00:7b:44:e2:
                    93:eb:7a:65:09:f0:56:77:6c:c6:3c:09:c8:31:81:
                    1a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E3:B7:E5:23:D2:48:8F:A6:B9:2E:35:65:76:6F:48:E4:C1:BA:7D
            X509v3 Authority Key Identifier:
                keyid:05:33:04:14:25:AD:9B:79:36:2F:91:E0:E8:FD:CC:1A:65:E2:CF:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/0/0533041425AD9B79362F91E0E8FDCC1A65E2CFD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0533041425AD9B79362F91E0E8FDCC1A65E2CFD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/0/3133382e3230342e3233342e302f32342d3234203d3e20323633393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:5b:9d:25:67:01:4d:fd:94:7f:d2:9e:58:3f:ca:5a:8c:e3:
         f8:f0:d7:10:c6:8a:f8:80:0e:78:7c:6c:c2:dc:ad:28:3b:4e:
         a5:1c:33:b9:27:3e:56:39:6d:94:09:60:64:57:7f:1e:64:72:
         48:9d:ee:81:5c:8d:b6:4c:66:49:fd:c7:ca:99:e8:ff:4d:9d:
         60:bc:a3:4b:66:a8:8b:c9:0a:d7:2b:9d:52:e8:3c:ef:ee:fd:
         cf:8f:12:ce:b7:89:f5:fd:87:da:27:a2:b4:34:d3:47:b4:83:
         7b:af:0a:51:9e:e8:51:91:54:68:d0:5a:c1:b6:60:bf:b2:65:
         43:5e:f2:9c:18:2e:19:13:14:89:bc:3a:ec:d8:13:5d:6d:8e:
         32:f7:ec:34:15:12:3c:84:0e:49:3d:9e:3f:c3:6d:0d:e5:7a:
         d1:11:fd:51:9c:6a:b0:a0:0b:b4:91:b4:28:6f:a9:1e:c4:53:
         19:d8:f6:93:18:59:89:a6:1b:f8:83:bb:fe:69:c2:86:db:94:
         a9:65:40:ca:9d:c6:c8:1a:4b:6a:94:65:78:78:5a:04:0f:46:
         48:26:78:07:51:c1:38:21:62:69:27:3e:58:55:6c:db:e8:14:
         cd:e5:94:e7:19:d5:78:d0:af:7b:74:5f:28:f2:e7:cc:d0:c1:
         80:b9:dd:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org