Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130332e302f32342d3234203d3e203533313138.roa
File:                     3137372e31322e3130332e302f32342d3234203d3e203533313138.roa (raw, json)
Hash identifier:          VJ8qVNFQNHSdEeCP0V1NlvlfLN4z6zf/18SR97kKis4=
Subject key identifier:   2B:67:82:12:A7:8D:18:06:69:1C:0E:26:00:3D:2F:5C:2E:0F:32:B0
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       0A772B6FC8F492207994E9D026539C00C19879F6
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130332e302f32342d3234203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 14:39:07 +0000
ROA not before:           Thu 27 Jul 2023 14:34:07 +0000
ROA not after:            Thu 25 Jul 2024 14:39:07 +0000
asID:                     53118
IP address blocks:        177.12.103.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:77:2b:6f:c8:f4:92:20:79:94:e9:d0:26:53:9c:00:c1:98:79:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 14:34:07 2023 GMT
            Not After : Jul 25 14:39:07 2024 GMT
        Subject: CN=2B678212A78D1806691C0E26003D2F5C2E0F32B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f8:b1:64:0e:6f:a4:59:c0:dd:1b:da:dd:9e:
                    76:f6:b2:f1:93:de:b2:40:e1:b2:02:e3:b6:6e:ba:
                    ff:22:e7:80:60:44:24:f8:eb:6a:70:bf:6d:55:ea:
                    64:ec:f5:c1:20:fe:eb:cd:bd:a3:c2:7b:c2:4c:c0:
                    d3:31:5d:1f:2f:8e:d7:08:c4:46:e2:a9:e7:d4:c8:
                    08:8d:fb:19:49:04:be:50:67:09:e6:b2:c6:55:32:
                    f1:4b:3b:30:9c:a4:4e:c1:90:cf:ea:34:69:d2:2a:
                    de:ea:a1:07:f2:42:8e:25:e9:1d:de:90:e9:d2:aa:
                    9c:3e:b0:08:f6:63:88:58:ff:8c:d2:8f:d0:3f:c8:
                    91:4b:88:9d:92:1d:ee:a5:1f:12:53:45:7e:53:2c:
                    23:b4:a3:2e:77:04:20:49:5b:10:a3:e5:64:82:a2:
                    7e:cb:5f:22:4e:fe:6e:fe:fb:46:b6:26:93:3d:e4:
                    72:ad:34:c9:b1:80:b3:fd:37:9b:d0:86:aa:b7:e1:
                    69:8f:d4:e6:f3:54:ab:e6:77:44:58:a0:0d:7a:e0:
                    2b:d6:0c:cc:e7:d2:b1:8e:89:02:ab:5d:1a:23:9a:
                    7c:2e:37:87:ff:36:7f:2d:23:f2:a7:7c:dc:5f:8a:
                    b9:e1:96:d1:5e:ac:10:cf:ed:ad:6e:be:13:ec:c2:
                    09:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:67:82:12:A7:8D:18:06:69:1C:0E:26:00:3D:2F:5C:2E:0F:32:B0
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130332e302f32342d3234203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:81:a4:a9:7f:9d:ef:5d:d0:0d:fc:66:b6:50:f6:91:39:ca:
         4e:12:83:6f:b5:14:a4:78:2d:44:9b:20:b5:c6:cc:1a:b3:af:
         a6:74:08:ce:4b:e4:eb:f2:7a:10:66:14:6c:f2:14:46:81:d0:
         4a:99:01:1d:c8:47:e6:84:9d:1f:3d:48:98:9e:30:f2:f0:5a:
         5b:5e:27:ad:f1:74:3d:3a:fb:cd:e1:d1:97:cc:a2:79:56:15:
         fa:fe:ff:93:69:a9:18:a0:90:82:a8:ac:31:61:82:e4:bd:26:
         aa:b9:2e:c4:ca:67:8d:87:ae:a0:bf:7f:5d:1c:de:c8:6f:19:
         a1:83:99:4e:5f:7a:1b:2a:05:11:06:06:56:5c:6c:1d:dc:77:
         e3:e2:d8:1f:88:7d:c7:65:9e:e1:89:36:da:fc:89:6c:28:f8:
         d4:9f:3d:64:16:f3:aa:82:17:0d:62:df:cd:32:69:f6:14:9a:
         00:cc:5b:10:df:7b:0f:5e:80:f2:3f:5d:91:90:73:52:09:52:
         3e:89:68:a0:a0:88:3e:7b:25:91:5a:63:75:31:ea:2c:d2:b9:
         73:f1:73:81:e4:42:99:55:cd:04:2d:39:fa:84:4d:97:cf:cd:
         aa:a2:02:fa:8f:c0:d3:ea:26:29:53:2d:7e:f4:45:80:09:5e:
         77:79:74:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org