Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/3133382e3230342e3233322e302f32342d3234203d3e20323633393137.roa
File:                     3133382e3230342e3233322e302f32342d3234203d3e20323633393137.roa (raw, json)
Hash identifier:          Itqw9nr0eGdBF1ZqUrKVeXAk0sAF91af+PdW0TgpjGA=
Subject key identifier:   FE:FA:82:1D:E6:57:F6:95:7E:38:E9:0A:65:F1:31:3D:48:29:40:FB
Certificate issuer:       /CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
Certificate serial:       7B1B77930FAF3108A07C0DB9B973D5DBA5C3CCDC
Authority key identifier: 46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/3133382e3230342e3233322e302f32342d3234203d3e20323633393137.roa
Signing time:             Wed 05 Mar 2025 19:00:09 +0000
ROA not before:           Wed 05 Mar 2025 18:55:09 +0000
ROA not after:            Wed 04 Mar 2026 19:00:09 +0000
asID:                     263917
IP address blocks:        138.204.232.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:1b:77:93:0f:af:31:08:a0:7c:0d:b9:b9:73:d5:db:a5:c3:cc:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
        Validity
            Not Before: Mar  5 18:55:09 2025 GMT
            Not After : Mar  4 19:00:09 2026 GMT
        Subject: CN=FEFA821DE657F6957E38E90A65F1313D482940FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8a:10:4e:ba:05:3c:3d:a6:b3:94:f6:2b:76:
                    24:26:65:bf:f0:ba:b0:fa:32:14:28:a9:07:f1:77:
                    16:70:e9:fb:56:af:25:0e:3a:e6:0a:b3:e0:8d:d6:
                    f9:3c:4d:cd:dc:d5:ab:e8:31:6d:f0:f6:8a:95:01:
                    ad:f7:8d:12:83:a6:c5:1c:00:f4:4f:32:f5:52:e3:
                    bd:eb:32:bc:8d:04:e9:e5:b5:df:f7:23:52:0b:2a:
                    d0:a4:a7:c1:28:8c:d8:2b:00:e1:fe:68:a4:b0:6e:
                    98:fe:dd:fc:9b:03:f0:6c:c6:70:db:dc:dd:79:9d:
                    af:55:eb:23:ee:95:b6:76:b6:02:47:e6:0c:ad:f5:
                    33:a6:60:51:11:bf:d3:23:4f:3e:cf:a6:14:a5:d6:
                    e4:f7:8a:26:59:55:f2:d8:7e:15:7e:38:ad:e1:ce:
                    95:47:18:92:44:55:b7:fb:42:0c:c5:e5:03:03:e7:
                    78:7e:f0:48:31:12:13:32:06:93:59:8c:77:94:8b:
                    95:43:68:42:27:01:a0:45:f8:a8:cc:0f:f2:36:77:
                    d7:5d:cf:50:cf:6e:20:10:fa:10:5e:77:0d:c2:cb:
                    d9:97:5c:ba:5e:8b:a5:7e:13:d2:95:37:c0:df:0b:
                    c5:f8:63:ab:2a:e5:d1:26:ba:3d:fa:1a:70:15:11:
                    e3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FA:82:1D:E6:57:F6:95:7E:38:E9:0A:65:F1:31:3D:48:29:40:FB
            X509v3 Authority Key Identifier:
                keyid:46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/3133382e3230342e3233322e302f32342d3234203d3e20323633393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:00:37:24:c9:0d:84:7e:fa:fc:91:8e:77:6f:d3:1c:5d:58:
         a6:9d:8a:4b:6f:8a:b8:90:cf:c9:c5:35:6f:5d:28:d0:bd:a7:
         21:ec:92:a2:15:d6:a0:f2:8e:5b:5c:60:89:5f:7b:fb:ed:55:
         5c:85:09:51:be:d9:6a:e3:4f:17:9c:fb:a3:ed:fc:61:f8:b5:
         4c:6f:40:f5:f5:a1:bb:3a:91:e4:03:4d:1a:93:71:93:b4:35:
         31:eb:ad:f1:07:5b:38:70:fa:b8:f3:e7:de:e3:4f:f8:b0:a2:
         22:2f:f6:ab:9e:d8:61:af:8e:2b:21:68:d7:64:2d:89:f3:0b:
         4f:cc:c1:18:72:f2:21:b0:ef:39:4b:70:e6:39:c1:29:7a:17:
         23:b9:2b:1d:91:c7:5d:ef:42:75:45:3d:7c:95:af:d4:54:45:
         7f:76:15:e4:61:b8:8f:b8:7a:9f:8c:97:b7:fb:86:76:dd:45:
         6f:dd:9b:c1:00:50:e8:54:13:ca:00:c9:48:d3:b5:13:64:74:
         bc:4f:e7:a5:c8:82:ae:ba:4b:bc:13:21:0f:14:85:40:7e:0a:
         ed:b6:4f:d8:ab:1c:5d:56:fe:e0:ee:32:68:98:83:8c:48:89:
         1a:61:4d:a4:33:fc:4b:dc:d5:84:0a:be:d2:71:b0:66:94:f5:
         5d:bd:c5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:14:49 2025 by rpki-client