Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130342e302f32332d3233203d3e203533313138.roa
File:                     3137372e31322e3130342e302f32332d3233203d3e203533313138.roa (raw, json)
Hash identifier:          cozZzis0p7FuwsZpab2/aHj5eqbvv4xMZxWjt+6IQEQ=
Subject key identifier:   81:D0:CA:73:C4:7D:96:15:8F:52:0C:69:23:D3:40:AB:A6:C1:FA:1B
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       76D7281CDC19CC975F654309FC948F3DE2124F28
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130342e302f32332d3233203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 13:39:03 +0000
ROA not before:           Thu 27 Jul 2023 13:34:03 +0000
ROA not after:            Thu 25 Jul 2024 13:39:03 +0000
asID:                     53118
IP address blocks:        177.12.104.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:d7:28:1c:dc:19:cc:97:5f:65:43:09:fc:94:8f:3d:e2:12:4f:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 13:34:03 2023 GMT
            Not After : Jul 25 13:39:03 2024 GMT
        Subject: CN=81D0CA73C47D96158F520C6923D340ABA6C1FA1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6f:eb:a8:0b:1d:62:a3:bc:57:d5:7e:08:34:
                    84:00:c8:45:8a:d3:1b:2f:e4:e8:e6:09:c0:80:ae:
                    b5:ca:cf:65:22:fc:7b:0b:f8:39:05:2d:11:e2:30:
                    da:79:dd:bd:d6:f2:31:9f:31:37:0c:58:bb:b8:3e:
                    b1:ab:fb:88:e8:4c:9d:9a:aa:61:b7:98:45:0e:e1:
                    cf:05:54:1e:01:a1:56:3e:49:5d:aa:b0:01:c3:42:
                    4e:f1:45:80:92:3c:0b:c7:f3:c5:16:bf:3b:17:e6:
                    0b:38:41:55:56:fa:d3:90:4a:88:61:1b:f1:3e:c2:
                    50:d2:fd:72:df:20:37:c1:7f:12:68:0c:3b:a0:b7:
                    64:c6:ed:e1:36:4d:71:f2:c4:cf:84:5e:91:85:1f:
                    87:da:6c:3a:13:60:b8:83:6f:2e:0a:01:54:7a:89:
                    76:5e:7a:56:f2:f1:2b:66:fb:82:e2:fa:1c:69:06:
                    a9:09:9b:22:b9:eb:08:66:26:8b:a7:45:b4:3b:18:
                    c1:60:ee:2e:09:55:9b:e6:d4:db:76:14:7c:5c:e3:
                    cb:d2:06:d0:dc:36:00:bc:ac:57:1d:15:bd:8f:59:
                    ec:b4:8c:e9:30:a4:a4:32:67:8a:dc:de:9a:22:2f:
                    43:ad:95:54:92:20:e7:a3:9f:d4:77:70:26:bb:fb:
                    78:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D0:CA:73:C4:7D:96:15:8F:52:0C:69:23:D3:40:AB:A6:C1:FA:1B
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130342e302f32332d3233203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:51:a6:52:cf:79:34:d3:05:95:69:db:9a:75:ce:c6:d8:14:
         82:80:b6:03:6e:39:ac:b0:bd:0b:54:2b:23:5c:a7:2b:f8:d5:
         9b:e7:87:93:53:98:6f:0e:49:98:d2:a3:13:bf:13:64:73:2e:
         3a:f2:07:6e:bb:c2:95:f4:0b:15:b7:cf:83:85:a4:a7:bb:fe:
         ed:c7:94:6e:9a:90:c5:7c:1a:d9:40:40:27:c3:7f:b0:ac:a7:
         97:15:b5:d8:ae:30:d1:27:1e:21:ad:1f:30:64:5e:e9:f8:98:
         ab:a2:ab:78:79:9c:fd:3d:8b:12:61:1e:8c:b0:53:40:5f:9a:
         97:bd:72:19:20:51:29:06:86:a6:1f:f5:14:68:9d:bd:4f:32:
         fd:49:1d:df:51:5f:4f:2c:ec:87:34:b7:9e:0e:8b:46:56:b3:
         bb:80:22:42:d3:d4:cc:5f:9c:82:cf:e8:fc:09:73:68:18:24:
         ac:7f:a9:5a:8f:98:fd:74:78:cc:34:c7:3c:e2:46:78:1a:a7:
         5a:52:6d:ad:8f:88:46:f6:99:0c:45:16:93:95:ac:50:bb:5d:
         ce:20:06:b2:8a:43:bc:57:50:86:6c:31:65:9d:85:76:1f:ac:
         13:51:f2:20:75:61:fc:09:bc:a7:8a:00:20:2d:a8:01:74:1d:
         26:43:d8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org