Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130322e302f32332d3233203d3e203533313138.roa
File:                     3137372e31322e3130322e302f32332d3233203d3e203533313138.roa (raw, json)
Hash identifier:          HwrJwJFcnbxC52l2hREBmeVQEfJuGFCa0+DeJx8lVcw=
Subject key identifier:   85:24:A2:93:2B:E6:3B:32:94:5A:99:75:3F:9F:8D:45:7C:41:D6:4C
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       563B349C4735C940A08D41626FBDB8A85788727D
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130322e302f32332d3233203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 13:38:55 +0000
ROA not before:           Thu 27 Jul 2023 13:33:55 +0000
ROA not after:            Thu 25 Jul 2024 13:38:55 +0000
asID:                     53118
IP address blocks:        177.12.102.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:3b:34:9c:47:35:c9:40:a0:8d:41:62:6f:bd:b8:a8:57:88:72:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 13:33:55 2023 GMT
            Not After : Jul 25 13:38:55 2024 GMT
        Subject: CN=8524A2932BE63B32945A99753F9F8D457C41D64C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:81:01:28:3a:e5:12:46:55:38:7c:2d:74:ee:
                    ea:5e:42:4b:cf:87:ad:94:ae:19:f5:fd:fd:34:5f:
                    6a:50:d3:65:f6:9e:bb:32:ea:2a:3c:85:c4:70:fa:
                    71:f3:95:a0:47:10:96:64:86:16:67:d1:aa:32:03:
                    27:2d:0e:af:b3:2e:39:b5:c1:3e:08:49:70:3c:b8:
                    a8:54:39:dc:5c:89:54:33:14:8b:cb:98:5f:a4:ba:
                    ba:f2:ac:58:ee:64:df:22:24:4a:cf:a8:02:62:1e:
                    0e:ce:1d:03:bf:b4:e7:37:02:aa:b0:d8:d9:27:36:
                    77:07:75:d8:93:ef:c2:31:a2:50:34:b4:16:c8:8b:
                    0e:16:ce:cc:09:3e:df:a4:8b:cb:e7:70:55:a8:90:
                    c2:be:1b:a0:07:85:68:e4:ef:44:ac:d4:e2:de:32:
                    aa:e9:ed:10:1e:9c:2f:25:9d:b1:d5:70:b3:de:57:
                    2b:83:62:f3:26:53:73:72:33:e2:11:c0:cd:1e:67:
                    ba:e6:7c:5a:f7:a4:11:b7:28:5f:e6:62:28:37:64:
                    6e:64:f2:16:a2:a7:47:52:90:dd:41:6e:b9:b4:01:
                    c3:7a:52:89:bc:a4:43:7f:82:3f:e1:1c:d1:e2:b6:
                    95:b1:ac:14:2d:a2:cb:5d:dc:ad:d3:cb:ee:3c:ab:
                    85:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:24:A2:93:2B:E6:3B:32:94:5A:99:75:3F:9F:8D:45:7C:41:D6:4C
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130322e302f32332d3233203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:7a:d3:62:73:78:19:5b:e0:13:62:55:ad:e4:18:58:fe:74:
         68:01:c8:93:fe:14:0a:c9:e8:04:be:68:13:a7:0f:be:ae:36:
         8d:c9:b5:de:7f:ac:c6:cc:90:b0:2f:71:cb:e8:aa:92:e6:e1:
         15:65:5a:fb:2c:51:02:35:66:a5:46:d6:9c:1c:05:99:5c:a6:
         23:36:06:b4:4f:28:91:bb:34:6b:8e:d1:88:2d:87:17:ab:57:
         17:13:54:73:1e:7c:84:1a:5f:08:e3:64:03:26:be:47:6b:de:
         e5:1c:da:67:13:54:a1:0a:b9:45:10:2b:9a:07:31:42:8a:59:
         37:62:8e:e0:ce:65:d1:52:7d:7a:a0:0c:91:c8:d8:e0:59:bc:
         36:e0:16:47:3d:67:49:51:31:5a:c0:73:1f:17:c5:f6:cb:29:
         7c:67:dc:99:18:91:40:3a:31:54:2c:ba:40:ce:95:45:f8:a3:
         4f:ef:24:f8:bd:75:06:ad:bc:a9:c8:a8:9e:ba:f7:ae:40:eb:
         f3:d2:65:07:b5:cb:0c:78:9a:19:7d:ac:4c:5f:15:46:62:a2:
         90:6f:55:98:c5:4c:a9:16:ef:d1:02:0b:4f:e8:35:27:d5:6d:
         5a:cc:35:d0:54:35:7f:2e:78:d6:02:bb:34:83:4e:49:96:e6:
         1b:a2:55:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org