Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/0/323830343a323762303a383030303a3a2f33332d3333203d3e20323633393137.roa
File:                     323830343a323762303a383030303a3a2f33332d3333203d3e20323633393137.roa (raw, json)
Hash identifier:          5mBcelIOnvbAXkI7T1BS+sMqqG2MC8Ta+f5TYNYXb8o=
Subject key identifier:   FA:A9:14:C7:D9:20:98:C5:36:30:21:0C:B7:9B:0D:56:2D:AE:76:6B
Certificate issuer:       /CN=0533041425AD9B79362F91E0E8FDCC1A65E2CFD3
Certificate serial:       6F2465701FB84A1BD30B207C975B594903A6B981
Authority key identifier: 05:33:04:14:25:AD:9B:79:36:2F:91:E0:E8:FD:CC:1A:65:E2:CF:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0533041425AD9B79362F91E0E8FDCC1A65E2CFD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/0/323830343a323762303a383030303a3a2f33332d3333203d3e20323633393137.roa
Signing time:             Fri 15 Dec 2023 23:00:00 +0000
ROA not before:           Fri 15 Dec 2023 22:55:00 +0000
ROA not after:            Fri 13 Dec 2024 23:00:00 +0000
asID:                     263917
IP address blocks:        2804:27b0:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:24:65:70:1f:b8:4a:1b:d3:0b:20:7c:97:5b:59:49:03:a6:b9:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0533041425AD9B79362F91E0E8FDCC1A65E2CFD3
        Validity
            Not Before: Dec 15 22:55:00 2023 GMT
            Not After : Dec 13 23:00:00 2024 GMT
        Subject: CN=FAA914C7D92098C53630210CB79B0D562DAE766B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:29:ca:5d:44:0e:1d:e4:c0:82:4f:da:2e:a7:
                    8b:5a:50:03:7b:2c:21:76:33:85:3d:9e:7c:9e:e1:
                    b3:93:bb:ab:3d:c0:57:33:cd:19:b7:7a:6d:c0:da:
                    39:ee:76:3c:9a:41:8d:b1:94:3d:e3:9e:60:b9:d3:
                    68:be:58:a7:27:61:32:ea:b0:e4:6d:b3:fb:42:66:
                    28:ed:b4:8e:a8:ae:80:e7:b8:68:1e:3c:eb:50:cc:
                    b8:07:69:61:cb:49:6e:8f:06:67:7e:16:4b:49:1f:
                    91:47:57:9f:a3:98:fc:1e:c2:e9:a6:45:19:59:11:
                    35:93:c5:11:3b:67:75:b9:37:d5:3f:05:82:c7:98:
                    77:7b:67:35:83:6e:95:e3:d7:26:7f:60:bf:91:aa:
                    75:60:c7:c8:ef:9e:53:42:51:dd:de:20:97:c7:29:
                    7c:31:5b:51:0a:8d:2f:67:91:9d:b7:7a:71:27:d1:
                    46:ad:2f:c8:2c:9b:fd:41:c3:32:ed:83:f8:e8:a9:
                    54:e9:65:51:bf:bf:ca:e0:86:d1:c8:ef:c1:f7:c9:
                    77:62:43:71:8a:31:54:84:dc:c5:b6:96:96:c7:ee:
                    d2:f3:d5:4d:bf:65:75:4a:f1:b4:eb:b5:e1:52:3f:
                    06:49:39:34:54:48:94:a1:05:bb:84:10:d0:c6:41:
                    9f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A9:14:C7:D9:20:98:C5:36:30:21:0C:B7:9B:0D:56:2D:AE:76:6B
            X509v3 Authority Key Identifier:
                keyid:05:33:04:14:25:AD:9B:79:36:2F:91:E0:E8:FD:CC:1A:65:E2:CF:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/0/0533041425AD9B79362F91E0E8FDCC1A65E2CFD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0533041425AD9B79362F91E0E8FDCC1A65E2CFD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/0/323830343a323762303a383030303a3a2f33332d3333203d3e20323633393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27b0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         9a:ca:1a:07:03:62:06:1c:eb:fa:f3:1c:ca:ec:fe:b8:b9:b7:
         d0:6e:ff:e1:0f:a9:7e:7c:a2:d5:0b:67:0d:c4:37:38:85:33:
         ed:60:02:16:62:25:eb:cc:02:ad:6c:5e:5d:f2:47:9d:86:ae:
         41:05:24:da:c6:d6:d7:db:14:d2:dc:cb:cf:50:f8:e0:eb:37:
         d3:3c:0c:c9:d7:ee:9d:48:5c:39:63:c9:24:4c:2f:c1:f2:d6:
         a5:b3:6d:41:36:fa:74:9d:e4:f5:be:25:11:78:9c:f2:8a:a0:
         59:1f:f1:88:d9:c2:31:93:4e:0b:92:af:3d:a5:f8:40:cb:49:
         db:de:9d:2f:0a:71:72:aa:42:5a:d1:5d:1f:b7:c4:78:e3:5c:
         ed:a4:95:27:44:d3:d2:6b:80:7e:84:ca:bb:e4:a4:98:ca:67:
         e5:0f:03:f0:09:2d:cc:2a:08:fb:2f:25:fa:54:0b:0e:3b:b0:
         6e:c8:c9:1d:89:01:95:69:a6:82:73:15:5d:84:aa:ae:66:08:
         ba:2a:e8:81:24:76:da:85:a5:3a:63:ab:6a:52:ec:b9:4a:b2:
         65:28:e5:e3:eb:24:c1:0c:a3:5a:2f:5c:bf:73:04:a6:ef:c5:
         74:40:fe:3e:90:a8:69:72:76:bc:c6:62:a3:b9:64:8b:55:fa:
         f7:ad:95:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org