Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130312e302f32342d3234203d3e203533313138.roa
File:                     3137372e31322e3130312e302f32342d3234203d3e203533313138.roa (raw, json)
Hash identifier:          DDUo0XU4UsMfVikxQYg+/hxIogq7LpteAs/CisOWy7o=
Subject key identifier:   F2:64:F2:6A:32:1F:BA:1B:9D:D6:3D:FB:AF:D4:D5:C3:B7:E7:ED:C3
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       542F80B6F5719FF8FA0C7604071E4E1AECB71FAA
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130312e302f32342d3234203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 14:38:50 +0000
ROA not before:           Thu 27 Jul 2023 14:33:50 +0000
ROA not after:            Thu 25 Jul 2024 14:38:50 +0000
asID:                     53118
IP address blocks:        177.12.101.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:2f:80:b6:f5:71:9f:f8:fa:0c:76:04:07:1e:4e:1a:ec:b7:1f:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 14:33:50 2023 GMT
            Not After : Jul 25 14:38:50 2024 GMT
        Subject: CN=F264F26A321FBA1B9DD63DFBAFD4D5C3B7E7EDC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d5:17:24:98:c6:5b:51:33:b8:6b:b1:9f:6c:
                    3e:f7:28:db:5a:76:6d:b5:99:85:eb:fa:b8:7c:98:
                    de:f6:ee:47:a7:fc:4a:8c:39:06:07:15:73:05:46:
                    ef:79:f1:6d:2b:74:53:df:72:3c:9e:64:97:b7:14:
                    39:f9:6a:7d:4f:b0:1a:57:f5:f8:83:9b:03:68:c3:
                    d5:65:8b:4e:46:4b:df:6a:1a:c0:53:57:36:bc:07:
                    2c:b9:56:99:ec:80:89:91:e9:fe:cf:36:57:7f:65:
                    13:c9:a4:2e:eb:54:85:f5:12:74:19:37:09:3a:80:
                    15:d8:26:b8:f3:0e:99:f6:d5:35:52:0f:bf:ac:3b:
                    94:5d:cd:58:e5:5c:ed:1c:97:7b:51:4c:1e:25:b5:
                    56:4c:fd:53:82:91:58:84:ca:4f:f4:01:17:4c:78:
                    83:06:7f:4b:ba:dc:f7:21:b4:a9:f9:c9:fe:81:24:
                    79:17:42:46:56:69:a6:cb:e0:53:53:a7:54:fd:a6:
                    b5:33:88:ff:9c:81:ae:4c:4e:05:25:dd:67:ff:9e:
                    cd:f0:ec:36:d7:6b:08:f1:cf:de:bd:71:cb:18:50:
                    b0:e1:58:50:49:0e:3b:fb:2e:f6:cc:77:25:d1:9f:
                    cd:f4:73:5a:5a:ef:25:83:60:37:42:50:c3:01:7f:
                    72:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:64:F2:6A:32:1F:BA:1B:9D:D6:3D:FB:AF:D4:D5:C3:B7:E7:ED:C3
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130312e302f32342d3234203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:88:15:72:b0:f6:69:fb:41:1c:34:12:53:e2:e0:52:2a:19:
         30:df:62:97:d6:27:1d:2b:9f:5a:da:bb:47:ed:bb:fb:8c:55:
         83:b8:67:f2:9d:0e:8c:c1:43:29:b0:d5:d4:86:ad:d6:66:00:
         f1:c3:13:d3:7f:53:6e:4f:c0:9e:34:f2:3d:fc:a5:51:9f:91:
         e3:f8:2b:5c:df:d9:34:a0:e4:61:a5:7a:f1:b7:57:b8:1d:75:
         1d:99:f8:1d:94:fb:36:8c:74:68:2d:18:fd:25:9c:2c:6a:e3:
         47:86:ca:79:7a:7f:c7:25:8e:a9:b7:22:cb:4c:97:ca:13:9a:
         0e:52:fb:8b:a3:dc:09:8b:99:27:eb:ac:9a:cd:ab:1e:ce:a4:
         3b:22:fe:9f:89:4d:08:23:51:3b:78:0a:4d:a1:dc:b3:5f:9b:
         e2:65:48:c2:04:cb:08:32:df:eb:c0:92:8c:f1:48:79:ef:7d:
         21:e1:50:39:d7:cf:2b:86:bd:ef:a8:2c:c7:22:11:77:4a:7b:
         ca:a2:a6:77:e4:b6:f0:62:50:89:2e:56:1f:dc:ce:81:1c:32:
         c5:5e:98:67:92:37:20:7e:ab:07:8a:90:65:dd:54:c7:f9:11:
         bf:1d:7d:7f:eb:e0:e8:d1:3a:59:54:ff:b1:a3:db:45:fb:de:
         58:b5:f1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org