Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130342e302f32342d3234203d3e203533313138.roa
File:                     3137372e31322e3130342e302f32342d3234203d3e203533313138.roa (raw, json)
Hash identifier:          Lacl4IV7vhL/qi5SuM/vDSjLF4PJXBSoy8pfptGUYeU=
Subject key identifier:   7E:AE:37:AC:D0:EC:7A:01:E3:35:DA:6D:A0:F1:D1:48:F9:9C:4A:0F
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       321640FACAA91DEE8584506FE68972E91039F72F
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130342e302f32342d3234203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 13:43:45 +0000
ROA not before:           Thu 27 Jul 2023 13:38:45 +0000
ROA not after:            Thu 25 Jul 2024 13:43:45 +0000
asID:                     53118
IP address blocks:        177.12.104.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:16:40:fa:ca:a9:1d:ee:85:84:50:6f:e6:89:72:e9:10:39:f7:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 13:38:45 2023 GMT
            Not After : Jul 25 13:43:45 2024 GMT
        Subject: CN=7EAE37ACD0EC7A01E335DA6DA0F1D148F99C4A0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:51:43:99:fe:d7:58:e8:82:55:b4:b8:7f:b7:
                    7b:7e:08:1b:66:43:c0:55:3d:59:e5:29:8d:4b:25:
                    8c:7b:fb:23:5e:f4:6d:31:55:d3:1b:57:1c:eb:0f:
                    9f:8c:36:b2:8f:b6:70:92:13:e1:39:40:af:84:0c:
                    3d:61:ab:a5:1f:19:df:d3:c4:9e:5e:5d:e3:6d:75:
                    3f:f2:d3:09:18:99:3f:bf:c1:28:ec:f9:66:cf:f0:
                    47:48:36:14:f5:c0:63:95:a0:35:02:ba:60:2d:65:
                    85:ba:01:e5:34:7c:06:68:c3:37:1e:15:fa:c0:d5:
                    0d:fc:28:9d:ae:fa:63:96:6b:36:0c:af:c2:ba:20:
                    77:c6:18:31:f2:db:c2:cf:d6:14:7a:60:33:66:7b:
                    6f:ec:0f:39:a5:74:e1:d2:bc:f6:50:cb:be:d9:3b:
                    e0:9c:72:8d:1a:e0:bd:51:51:1b:24:8d:41:0c:76:
                    07:78:d5:73:9b:26:5f:87:9e:b3:95:f7:00:70:e0:
                    fb:31:4e:6e:aa:f2:29:b0:a7:d7:b3:8f:13:14:24:
                    81:11:ea:88:ce:4a:b9:8f:a6:73:ae:eb:f1:57:24:
                    e5:91:0a:86:5a:0b:77:af:d4:dd:be:54:0b:6c:3d:
                    cb:fb:99:7d:c3:b2:81:86:1a:99:0d:d6:78:f5:13:
                    b8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AE:37:AC:D0:EC:7A:01:E3:35:DA:6D:A0:F1:D1:48:F9:9C:4A:0F
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130342e302f32342d3234203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:f3:5f:fb:de:19:02:76:6a:63:28:b9:c3:49:9e:65:22:be:
         d1:a6:96:71:d4:89:92:c6:cf:69:76:c7:ec:22:63:35:e8:db:
         72:70:3d:4a:9f:49:8f:c8:b6:34:42:8f:61:4b:4c:c2:bb:98:
         48:da:15:22:d1:2c:be:da:fd:79:e5:9f:47:92:de:80:38:0d:
         5a:07:f8:51:35:84:45:fb:d0:0f:9d:70:a0:f0:8f:9b:ea:e0:
         a8:1e:8e:16:c7:d6:3f:82:d1:16:64:c2:a7:ca:6c:63:f6:0b:
         bd:49:13:b5:f5:46:7b:5b:49:d9:d3:85:3b:82:7a:41:8b:ab:
         d9:a6:d3:52:36:d0:08:de:1d:dc:74:9e:12:b8:14:6b:72:b2:
         f0:ad:99:a1:88:7e:53:04:a3:bd:65:bb:56:1d:fc:a2:e7:a3:
         67:ae:52:da:77:04:9b:54:5b:13:af:78:bc:b7:f9:67:0e:0c:
         52:bf:65:bb:5c:ec:6e:1d:d0:49:20:53:b1:38:61:d0:df:b5:
         d7:85:61:99:ef:ce:09:a3:e3:85:63:02:7b:e9:da:cb:fa:3e:
         9e:65:39:b1:a2:47:3e:2d:51:5f:41:4c:6d:c1:1f:b7:8d:15:
         7c:4f:4c:31:28:5f:1f:a5:02:73:4b:e3:be:ed:74:2d:2a:63:
         21:b3:9c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org