Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130342e302f32312d3231203d3e203533313138.roa
File:                     3137372e31322e3130342e302f32312d3231203d3e203533313138.roa (raw, json)
Hash identifier:          T/ac3jdZ1/i5CPZfW6wv1vZ6ij6dgY69fIBaHppHSOs=
Subject key identifier:   82:A5:E2:B4:63:AB:30:7E:79:9B:29:CC:CC:51:08:53:32:5B:A8:C4
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       10F677A9BA574EB26DC7554149AECE28EF753061
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130342e302f32312d3231203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 13:14:49 +0000
ROA not before:           Thu 27 Jul 2023 13:09:49 +0000
ROA not after:            Thu 25 Jul 2024 13:14:49 +0000
asID:                     53118
IP address blocks:        177.12.104.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f6:77:a9:ba:57:4e:b2:6d:c7:55:41:49:ae:ce:28:ef:75:30:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 13:09:49 2023 GMT
            Not After : Jul 25 13:14:49 2024 GMT
        Subject: CN=82A5E2B463AB307E799B29CCCC510853325BA8C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b2:0b:de:41:e3:7f:be:04:79:a2:13:25:8f:
                    d1:a5:29:c3:db:81:a4:bc:da:ef:d4:01:0d:85:16:
                    5a:06:26:0c:a3:44:da:e9:f6:94:84:09:e7:66:38:
                    90:3a:e9:52:17:08:8d:16:9d:de:73:7c:25:1f:5d:
                    c9:44:79:22:06:0f:2e:5a:b4:32:28:4a:72:56:4e:
                    14:cf:0c:ae:64:43:8c:6c:ad:c0:17:73:20:92:9c:
                    6c:8e:24:f9:a6:d3:e8:45:f0:88:67:33:69:86:65:
                    86:82:7c:e6:d1:53:d2:38:43:6d:e0:96:95:55:1d:
                    72:9b:d2:39:b4:5a:ef:87:d7:6e:d7:97:9b:a6:af:
                    7f:1f:3d:fa:1a:f6:d2:ba:22:8a:59:42:f3:18:a0:
                    e2:85:aa:52:84:e3:2a:51:57:84:bc:d6:dd:4e:5e:
                    05:d8:89:53:99:0b:19:89:0c:0c:7a:6a:90:17:50:
                    95:c1:c1:a9:51:10:3b:a9:73:03:91:ed:72:3c:08:
                    33:bf:07:8a:63:34:14:a4:a2:32:56:99:6a:9c:bd:
                    79:91:36:58:8c:d0:e2:17:cc:57:75:8c:45:b3:30:
                    fe:b3:a2:de:3d:1e:86:92:a1:13:5b:f0:a9:cc:53:
                    1e:3f:1b:6b:12:95:2c:e7:14:9d:df:b7:cb:87:1c:
                    4f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A5:E2:B4:63:AB:30:7E:79:9B:29:CC:CC:51:08:53:32:5B:A8:C4
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130342e302f32312d3231203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         91:71:0c:da:1c:4c:77:2b:a9:36:d1:20:36:a0:c1:16:83:97:
         61:b9:88:80:62:41:31:0f:8e:38:dc:83:f5:80:fa:e3:65:6f:
         fa:5e:2e:eb:d5:48:ae:cd:aa:9e:f5:5f:cf:53:68:83:60:74:
         27:9e:5d:81:73:a5:61:18:e7:99:4d:fe:df:0c:b2:52:e3:67:
         f1:a4:b1:32:86:b7:6f:d3:b3:ee:9a:a8:8b:14:73:7e:b9:b7:
         ee:65:71:3c:95:3d:c9:fe:20:ae:56:69:85:b9:cd:f0:50:98:
         4a:9b:d9:f3:2f:6d:09:a1:d1:5e:b1:4f:10:0e:54:2b:47:ac:
         cb:97:1d:e5:4e:29:47:da:75:93:5c:66:e6:bd:65:e1:a3:ac:
         e2:0e:36:d4:56:2a:3e:e5:e6:c2:eb:ed:c9:71:d5:5a:db:2c:
         19:75:25:55:43:37:62:18:86:d5:ff:b6:e6:6f:36:d3:02:92:
         98:86:04:31:14:9a:67:39:bd:d0:c9:1d:56:17:4f:dc:52:0a:
         ac:87:a6:cd:76:f9:92:36:06:f4:7b:9e:07:ed:98:de:6e:d0:
         be:b6:b1:9b:bc:6c:e4:d7:30:2c:5f:12:ae:70:49:89:a3:35:
         3b:79:e1:5f:24:29:a8:86:0d:68:e6:ec:1d:89:b4:b9:79:0a:
         53:7d:3c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org