Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130302e302f32322d3232203d3e203533313138.roa
File:                     3137372e31322e3130302e302f32322d3232203d3e203533313138.roa (raw, json)
Hash identifier:          H5MaavLFy7Q19OGcLOIk0cIP0ewY7jjXFROJS0UzcPg=
Subject key identifier:   BD:B4:33:35:82:97:FE:9D:DF:32:D6:C6:24:3F:33:A3:DC:69:C5:22
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       64E683B0AEA3EFECD6D256AB5B4C05756EC0356D
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130302e302f32322d3232203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 13:18:14 +0000
ROA not before:           Thu 27 Jul 2023 13:13:14 +0000
ROA not after:            Thu 25 Jul 2024 13:18:14 +0000
asID:                     53118
IP address blocks:        177.12.100.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:e6:83:b0:ae:a3:ef:ec:d6:d2:56:ab:5b:4c:05:75:6e:c0:35:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 13:13:14 2023 GMT
            Not After : Jul 25 13:18:14 2024 GMT
        Subject: CN=BDB433358297FE9DDF32D6C6243F33A3DC69C522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1e:24:9f:b0:26:65:74:ad:4c:7b:e8:03:72:
                    d5:dd:ab:21:be:ee:a6:b5:97:f6:f5:f9:5d:14:c3:
                    7a:31:a7:f9:6f:03:60:04:b6:8c:18:63:4a:5a:93:
                    8e:2a:b6:2d:06:9b:bb:ae:3a:2a:5d:99:a1:76:0d:
                    16:95:75:d4:d3:83:4f:4d:cd:fc:fa:f8:47:e7:b5:
                    cf:3d:47:bc:be:78:f7:ad:d4:52:ad:3f:ec:85:0c:
                    4e:5e:70:2f:50:60:6a:0b:f8:5f:6f:e3:3e:a6:ea:
                    52:82:8f:dc:02:4c:d3:6e:ad:e2:d8:be:4c:b2:75:
                    8c:b4:01:3b:ef:04:e9:81:51:ca:d0:43:e8:61:56:
                    75:4b:8a:35:6d:0f:0d:82:e2:8c:06:d7:4d:80:d4:
                    11:22:67:3d:0e:44:de:c4:7a:11:dc:0b:39:ae:6b:
                    78:c5:b4:57:96:4f:92:3d:48:de:58:38:da:23:6a:
                    11:7c:8c:36:1d:eb:96:8d:bd:90:72:f3:86:6b:f3:
                    b1:57:63:ad:c4:81:b0:e9:18:e8:cd:52:78:c3:5c:
                    f2:e1:7f:e2:dc:7a:29:71:15:b7:37:9a:bb:63:97:
                    73:20:a6:b7:b1:48:85:70:2c:53:78:4c:c7:7e:60:
                    38:7c:1d:0d:62:a1:3d:d9:6c:b3:42:79:4c:b0:e6:
                    55:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B4:33:35:82:97:FE:9D:DF:32:D6:C6:24:3F:33:A3:DC:69:C5:22
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130302e302f32322d3232203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:58:ca:3c:9c:cd:2c:58:78:2c:17:72:70:c3:66:cc:09:1e:
         bc:8d:59:f8:bb:45:08:c6:63:de:e2:75:a0:30:e3:6c:92:9d:
         ff:20:0e:49:27:94:f6:a8:13:f4:2c:ba:34:33:ae:09:f9:c6:
         59:c1:32:11:9b:0d:fa:e6:ec:fe:f4:5e:0a:2b:11:7f:f7:eb:
         e2:a1:a1:d9:ac:a4:eb:21:d5:ad:17:43:9e:6f:54:55:07:ad:
         af:9e:63:52:24:76:8c:26:fc:0a:49:62:83:47:45:26:78:bc:
         ea:ec:e8:cb:6e:aa:ed:f2:c6:4d:46:da:73:7b:0e:ca:57:c7:
         62:36:42:ee:70:21:2e:6d:12:48:09:22:d1:e8:03:e3:c4:eb:
         a5:46:a5:52:75:e0:f8:d4:d0:31:0d:90:70:1f:36:d9:4c:0c:
         40:f8:57:e3:7a:f4:94:4e:57:5d:8d:ff:38:d6:92:d2:77:79:
         6e:6d:09:4b:03:eb:46:f3:82:a7:83:e7:9c:75:54:80:8a:0d:
         93:cb:44:43:b6:f1:12:e5:ab:78:8f:eb:77:b3:90:09:73:ab:
         c9:02:01:3d:7c:89:40:8f:0d:70:a6:19:1a:ab:fe:b9:be:9e:
         63:6b:f2:f3:08:40:fb:ad:4b:b4:70:8d:17:85:f0:f7:a1:17:
         9c:93:bc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org