Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130302e302f32332d3233203d3e203533313138.roa
File:                     3137372e31322e3130302e302f32332d3233203d3e203533313138.roa (raw, json)
Hash identifier:          ZgMZwp8udyF/gQ72l7xMWkIIdBkHkNx9PLWBCApqtpI=
Subject key identifier:   16:3C:FE:5D:B7:4A:47:7C:40:30:67:47:A4:FA:26:B8:87:1F:8F:49
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       59E20A395D74F1F00370316FB38B706486EF3F3C
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130302e302f32332d3233203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 13:28:23 +0000
ROA not before:           Thu 27 Jul 2023 13:23:23 +0000
ROA not after:            Thu 25 Jul 2024 13:28:23 +0000
asID:                     53118
IP address blocks:        177.12.100.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e2:0a:39:5d:74:f1:f0:03:70:31:6f:b3:8b:70:64:86:ef:3f:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 13:23:23 2023 GMT
            Not After : Jul 25 13:28:23 2024 GMT
        Subject: CN=163CFE5DB74A477C40306747A4FA26B8871F8F49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:68:a8:3a:47:9d:27:64:c7:af:41:c9:26:97:
                    d5:cc:ad:65:72:24:8f:63:ad:98:ea:79:e1:c2:f4:
                    9c:50:f4:35:6e:14:1f:d0:73:a1:92:62:51:e5:cf:
                    ad:5a:61:85:17:0c:a4:e9:19:72:8a:9f:55:10:4c:
                    0f:91:3d:0d:28:32:64:47:f0:89:04:f9:23:f0:f0:
                    54:4c:05:cc:cc:1e:ff:86:a0:a3:1a:17:c0:31:d4:
                    d1:4e:a6:b2:cc:5a:ce:e8:9f:e2:7b:7a:13:ec:57:
                    b8:9b:1e:71:67:65:c5:c7:4d:f5:12:68:69:27:b7:
                    a4:f8:67:79:ec:3e:30:1b:10:5f:74:39:8c:67:cf:
                    be:76:8c:17:a3:9f:37:37:54:94:21:ef:1d:49:4b:
                    9e:57:dd:d5:66:3d:04:67:6b:a0:9e:d7:b9:41:33:
                    c7:f6:9e:a4:c8:71:39:c9:5f:b4:67:e6:19:43:ea:
                    4e:13:b8:80:2c:95:a7:28:e5:f1:af:43:99:07:42:
                    27:4a:41:40:04:88:3b:be:55:70:bb:78:c3:a8:c0:
                    fa:0d:51:f0:48:3d:91:9e:1a:3e:75:e7:5a:8d:dc:
                    d0:0c:ea:e1:2d:1c:c0:f3:42:ee:bb:1c:62:20:bb:
                    57:95:4b:88:e7:72:17:da:4f:cf:85:96:14:7d:92:
                    04:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:3C:FE:5D:B7:4A:47:7C:40:30:67:47:A4:FA:26:B8:87:1F:8F:49
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130302e302f32332d3233203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:3d:dd:c6:0f:4b:62:1e:79:38:a9:a6:24:3c:1d:77:cf:bf:
         d1:a0:ea:25:ce:2f:29:e6:7d:03:f1:1d:2b:53:aa:cb:9a:a2:
         fb:e4:84:91:5c:0d:1c:37:af:f4:f8:58:10:1e:c4:de:79:ca:
         ed:d2:d3:7f:ae:a8:ac:05:6c:81:4b:9c:ca:6b:49:22:c9:a0:
         a7:b9:ff:c0:c9:9e:85:5a:6b:15:10:25:97:40:e0:bf:45:84:
         c6:cb:76:6b:c5:60:13:b9:4c:76:d5:3a:13:43:54:8c:b2:4c:
         db:da:71:eb:c7:f6:b7:97:92:18:98:7e:fc:31:a9:16:37:67:
         16:dd:73:ab:24:8d:06:70:5f:52:13:d8:61:f4:15:57:22:fe:
         93:fc:6f:d6:1c:74:6a:9e:d3:0c:c6:2e:d5:c5:fa:6c:b3:4b:
         d7:4f:f8:0f:73:16:7d:12:4d:ab:98:fb:85:db:c2:67:d7:c7:
         bf:74:85:c3:28:05:9f:ab:36:67:41:57:48:f0:9e:f7:91:47:
         fc:d0:8f:41:50:38:54:ae:0b:9c:d4:97:85:af:cc:16:0d:30:
         5d:6b:80:9f:da:4a:2d:cf:39:c8:3a:eb:12:0c:cb:17:54:06:
         b4:53:db:8d:3d:a9:36:84:e0:76:b1:4f:e6:b3:78:2c:8c:3a:
         52:90:b0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org