Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3131322e302f32302d3230203d3e203533313138.roa
File:                     3137372e31322e3131322e302f32302d3230203d3e203533313138.roa (raw, json)
Hash identifier:          6BiQ1CAC3oypPnSigkjPUyn1L8oVq0ONh3aDqY+YYNw=
Subject key identifier:   35:D0:7B:BA:49:96:1E:8D:6E:35:01:04:BC:54:A4:43:E4:C1:52:C1
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       64357A3A54141407B58A47C126E65C5275125B6D
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3131322e302f32302d3230203d3e203533313138.roa
Signing time:             Tue 08 Aug 2023 20:00:01 +0000
ROA not before:           Tue 08 Aug 2023 19:55:01 +0000
ROA not after:            Tue 06 Aug 2024 20:00:01 +0000
asID:                     53118
IP address blocks:        177.12.112.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:35:7a:3a:54:14:14:07:b5:8a:47:c1:26:e6:5c:52:75:12:5b:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Aug  8 19:55:01 2023 GMT
            Not After : Aug  6 20:00:01 2024 GMT
        Subject: CN=35D07BBA49961E8D6E350104BC54A443E4C152C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7f:28:c1:24:66:94:80:cd:fc:ca:f2:85:8e:
                    5e:41:fe:ff:00:74:dd:6d:aa:ed:b2:d8:21:dd:b6:
                    9a:3a:54:c6:80:bc:3a:72:4d:f3:5a:dc:24:c9:58:
                    75:71:da:4d:9d:25:0a:9a:1d:51:65:79:6c:8d:8f:
                    45:ef:34:b0:b5:a9:af:54:1f:cd:1a:2b:0c:cf:7a:
                    dd:d8:58:19:6c:a1:d5:5a:71:06:1a:1a:4e:7b:ed:
                    28:fc:d9:b9:12:ac:d0:1c:46:bb:3f:67:2a:b6:ad:
                    e8:58:92:ed:91:38:78:32:33:a4:77:71:f1:11:98:
                    14:99:f4:ef:e3:8b:ab:6f:d1:b3:89:38:b4:de:22:
                    8f:a3:85:07:fc:6d:d4:94:87:95:60:b9:f8:01:83:
                    58:12:4e:de:6e:1d:d4:bb:c8:26:a7:22:49:13:b2:
                    21:98:44:8f:d8:c3:23:fc:49:cf:49:e8:03:1b:9b:
                    e8:7f:69:44:6e:68:c1:67:0b:63:4d:e0:8b:3f:c8:
                    a4:2b:51:4e:42:1d:ae:17:ea:8d:b1:50:58:04:0f:
                    c7:f8:d4:cc:59:31:9a:a5:6e:64:da:d8:1e:24:ad:
                    9b:e0:5c:fd:b2:79:6c:6b:08:28:da:f4:71:bc:52:
                    9a:1f:a7:06:ed:ff:26:7c:2d:b6:dd:0e:eb:07:25:
                    bf:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D0:7B:BA:49:96:1E:8D:6E:35:01:04:BC:54:A4:43:E4:C1:52:C1
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3131322e302f32302d3230203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         77:20:94:ff:de:13:8f:a6:96:bb:19:3b:17:cd:53:84:e6:bc:
         9b:72:97:ed:28:88:3a:9f:0f:3b:c1:e7:a1:da:52:be:76:96:
         69:f6:a8:22:c3:88:bc:26:97:0d:f5:5b:24:f6:2b:4b:75:14:
         c8:db:4b:88:56:b1:ec:53:80:02:d5:48:69:47:ec:9f:73:33:
         e4:4b:ed:ad:0e:01:bb:69:12:31:22:ea:c0:ac:2a:d5:23:47:
         a5:e2:02:30:2f:3c:2e:a7:02:10:f5:4c:4f:37:fd:4c:c7:ba:
         61:e5:0c:55:ac:de:01:34:ef:27:a6:ab:db:35:6a:17:ba:0f:
         3f:3b:5e:1e:a8:9d:cd:76:a2:12:a3:2e:1c:48:a8:87:15:40:
         6b:6c:73:2d:49:b0:ce:de:0e:c1:66:78:7a:8b:48:aa:1e:c1:
         93:13:f2:3a:57:7c:52:67:5a:51:3f:13:3d:fb:d5:94:f7:e7:
         5a:90:d4:bd:26:3e:14:d5:91:43:21:74:24:21:d8:fb:73:b8:
         89:d0:1a:67:e6:79:b8:f1:ce:e4:c9:c7:2e:5f:c4:22:7b:d1:
         e4:c6:84:75:69:4d:b3:c5:1a:66:32:51:93:86:6b:98:31:e3:
         aa:bc:e3:89:98:a9:43:fb:ce:22:6c:97:e3:50:65:30:5e:71:
         1a:b9:bb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org