Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130322e302f32342d3234203d3e203533313138.roa
File:                     3137372e31322e3130322e302f32342d3234203d3e203533313138.roa (raw, json)
Hash identifier:          GtABVYPN2kFd2K9E31PHQc2fzH3/WRT7BefgL5M0tRc=
Subject key identifier:   38:07:0F:CF:69:8F:AA:15:A4:B3:8F:FC:75:7B:C8:7E:B7:B3:B8:63
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       29130F234C13F4D4703433926D991EA2D087E195
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130322e302f32342d3234203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 14:38:57 +0000
ROA not before:           Thu 27 Jul 2023 14:33:57 +0000
ROA not after:            Thu 25 Jul 2024 14:38:57 +0000
asID:                     53118
IP address blocks:        177.12.102.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:13:0f:23:4c:13:f4:d4:70:34:33:92:6d:99:1e:a2:d0:87:e1:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 14:33:57 2023 GMT
            Not After : Jul 25 14:38:57 2024 GMT
        Subject: CN=38070FCF698FAA15A4B38FFC757BC87EB7B3B863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:44:0c:49:17:ec:6d:1b:dc:97:63:f1:00:14:
                    7a:c2:08:42:fe:8d:2a:94:3a:45:fc:8c:67:3e:46:
                    83:e6:45:05:64:de:be:78:5e:2d:b6:76:2a:10:2c:
                    e2:40:8a:14:11:92:0b:68:89:22:2b:f0:66:b2:6f:
                    64:b7:39:93:16:a0:43:e1:ed:e0:74:71:55:63:df:
                    13:db:4c:e1:08:75:d4:9f:59:88:28:51:0e:d7:98:
                    b9:c7:00:11:be:4d:ed:42:21:d2:b5:53:d0:4d:a5:
                    96:88:e7:73:d8:4f:4e:31:64:59:e5:8f:01:c9:24:
                    eb:54:4c:91:a6:ef:fc:de:10:18:39:bc:b1:12:df:
                    f2:01:a9:d9:0e:d2:ac:d3:7b:c8:64:b7:34:94:fa:
                    30:e2:00:be:f2:12:85:14:3d:3d:a0:13:f3:25:24:
                    32:c9:a5:b1:fe:6b:b3:57:af:84:00:f1:cd:5a:cb:
                    3b:06:e5:5b:59:b3:4b:8f:2a:51:5a:33:87:70:55:
                    f5:ba:be:90:b6:3d:81:e4:09:36:32:eb:67:a7:76:
                    91:89:8b:98:e9:99:d1:00:7e:79:b3:7e:e7:50:44:
                    b9:88:82:e0:67:b2:26:db:21:ec:98:78:eb:9c:c0:
                    03:cc:21:90:49:ff:ff:0f:57:d0:2a:d0:6a:78:30:
                    70:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:07:0F:CF:69:8F:AA:15:A4:B3:8F:FC:75:7B:C8:7E:B7:B3:B8:63
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130322e302f32342d3234203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:02:9e:11:91:a0:14:8b:23:a1:c2:f0:a6:3f:3d:a9:32:cf:
         2e:1a:d6:08:4d:81:c6:2d:32:02:2e:06:75:ec:d2:81:e0:fb:
         1a:de:d0:f8:3d:3a:ff:b8:91:cf:b9:50:d2:dd:80:4d:41:df:
         6e:d2:a7:d9:5f:ed:bd:a1:c0:65:3c:fa:c2:e9:c4:7f:30:09:
         44:f7:56:31:85:89:5b:a3:ea:8a:78:7b:6f:94:52:2d:43:fc:
         be:77:bb:45:b0:25:13:8b:97:1f:32:27:25:f6:c7:13:82:e4:
         59:4d:7c:8a:07:ea:52:9d:fd:d0:e6:59:4d:f3:1f:99:1c:1a:
         f5:6f:87:4a:97:5a:15:63:75:50:09:15:5c:3a:88:ab:2d:e9:
         20:4c:12:66:a7:32:6d:9f:d0:4a:a7:47:b0:3c:68:d6:be:26:
         34:f7:3c:84:89:bc:da:8f:c6:99:bc:09:93:d4:0a:cf:7d:01:
         75:a9:53:a5:d8:82:35:11:a2:27:2e:51:fa:8a:51:38:07:6c:
         b5:f8:2b:6c:85:0a:9d:af:71:0b:ce:ea:b3:4c:59:72:7e:b5:
         7c:e0:b5:9f:31:12:24:56:55:45:24:27:36:fb:1b:dd:9d:67:
         9a:7d:8d:c6:af:0c:4b:28:a4:11:a6:9d:48:98:d1:a5:2a:0f:
         3a:fd:04:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org