Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130362e302f32332d3233203d3e203533313138.roa
File:                     3137372e31322e3130362e302f32332d3233203d3e203533313138.roa (raw, json)
Hash identifier:          38+Q6tbi75ieK+OhoQwEXx7/1n9KqkQFWctnvjsfxow=
Subject key identifier:   D1:F0:F5:D4:63:65:5F:0E:D9:C2:AE:BB:C7:27:ED:45:BF:90:26:78
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       79CC5F10CB29FC2BBE8888D2B009431234000A2A
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130362e302f32332d3233203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 13:39:11 +0000
ROA not before:           Thu 27 Jul 2023 13:34:11 +0000
ROA not after:            Thu 25 Jul 2024 13:39:11 +0000
asID:                     53118
IP address blocks:        177.12.106.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:cc:5f:10:cb:29:fc:2b:be:88:88:d2:b0:09:43:12:34:00:0a:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 13:34:11 2023 GMT
            Not After : Jul 25 13:39:11 2024 GMT
        Subject: CN=D1F0F5D463655F0ED9C2AEBBC727ED45BF902678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f2:73:22:7d:3a:d1:c7:03:20:28:b6:7c:2a:
                    c6:c5:cd:7e:66:bf:bc:88:06:a9:a3:30:a4:10:dc:
                    ce:45:d2:f2:19:c9:1f:08:3d:3b:81:56:6d:e6:95:
                    49:32:33:1f:4c:3c:7c:e6:24:28:b1:54:a8:98:90:
                    2a:9a:fa:85:47:80:6d:e0:d5:dc:b1:81:c7:9e:0d:
                    c2:74:e2:89:f7:c1:89:83:77:d5:c3:5e:f5:3e:ff:
                    60:7e:af:18:58:5a:ad:bd:50:23:25:c9:43:93:65:
                    89:eb:5d:f0:42:b1:92:3b:32:60:21:74:1b:2c:e4:
                    e1:6b:37:52:4a:9b:65:a0:1f:ec:6d:a7:c5:2e:2e:
                    ab:bb:ae:01:3e:a7:f7:a9:1a:e3:89:7b:50:89:8c:
                    10:7c:95:c1:ab:6b:50:cf:b4:77:7a:44:cb:aa:4b:
                    1e:f3:6c:54:cc:5f:3a:2a:2a:79:95:38:a2:2e:a0:
                    63:47:33:c9:1a:78:57:d2:2c:8d:1f:4b:ad:c0:11:
                    17:56:fc:4f:41:84:d8:67:b1:43:71:6f:2f:45:dd:
                    1d:fe:09:af:85:14:cf:1a:d5:97:df:b2:fa:32:95:
                    73:23:9d:f2:9c:69:e5:5a:18:b5:61:cd:41:79:8b:
                    4d:88:07:c7:d6:c1:bf:8f:cb:02:ba:88:05:53:80:
                    9c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F0:F5:D4:63:65:5F:0E:D9:C2:AE:BB:C7:27:ED:45:BF:90:26:78
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130362e302f32332d3233203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:a1:51:b7:41:ae:c5:20:84:cd:f6:d6:5c:cd:fb:a7:92:eb:
         ad:0a:85:98:df:c8:7f:8c:2f:0c:93:f2:66:05:35:36:f6:36:
         ec:c4:8f:f2:06:6e:91:d3:ff:07:d7:8e:9a:92:e5:dd:6a:93:
         44:78:a0:ad:70:a1:6f:d0:58:e5:5d:fb:09:fe:1d:17:80:ba:
         11:e2:c7:72:83:d1:05:00:5a:b9:c7:9d:ca:2a:e0:4b:e5:b9:
         ac:88:63:d7:05:e8:65:36:a0:6a:8d:e7:de:1e:88:58:34:40:
         e8:fb:d4:ce:00:b2:8d:01:30:83:30:78:67:0a:28:b9:7b:8d:
         cc:15:e0:64:f5:68:28:5c:e1:08:c3:58:c5:29:bb:a7:94:de:
         85:43:4e:01:e0:33:27:4a:ce:be:06:08:0a:6d:d7:f4:98:77:
         90:f5:f3:4d:2d:df:a5:68:e7:c4:34:7c:4c:95:ed:90:3b:a1:
         57:73:5f:e9:cf:f8:9b:12:d9:12:ca:9e:58:13:ea:e4:35:61:
         b0:73:6b:08:60:0d:d8:55:d8:e4:58:d4:46:4b:a0:77:25:29:
         6e:06:e7:a2:09:f5:d8:8e:ae:5f:ad:ce:dd:2b:52:81:b7:6d:
         11:35:f1:b5:92:88:48:54:6b:c8:a9:b3:93:5a:7c:be:54:86:
         49:24:87:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org