Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130362e302f32342d3234203d3e203533313138.roa
File:                     3137372e31322e3130362e302f32342d3234203d3e203533313138.roa (raw, json)
Hash identifier:          08dpDwJQi1zjEWp0xfpARn3KlqScafm8p/AnwAhozuU=
Subject key identifier:   E5:76:A3:65:61:7D:9C:6C:88:E8:62:1E:58:02:E1:80:46:1A:01:70
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       4E074271F4487B43FF9AEF25235C6FD7D2C784CB
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130362e302f32342d3234203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 13:44:04 +0000
ROA not before:           Thu 27 Jul 2023 13:39:04 +0000
ROA not after:            Thu 25 Jul 2024 13:44:04 +0000
asID:                     53118
IP address blocks:        177.12.106.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:07:42:71:f4:48:7b:43:ff:9a:ef:25:23:5c:6f:d7:d2:c7:84:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 13:39:04 2023 GMT
            Not After : Jul 25 13:44:04 2024 GMT
        Subject: CN=E576A365617D9C6C88E8621E5802E180461A0170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:11:78:9f:80:44:72:23:7a:1c:48:49:1a:66:
                    42:f7:ac:4a:68:c9:d3:9f:09:66:71:31:63:32:5f:
                    66:79:11:69:77:c6:f9:3e:8d:d2:03:90:4d:84:75:
                    3c:1c:86:af:54:9c:5a:c3:e0:2d:12:6d:d4:64:e1:
                    df:29:0a:63:68:a5:45:4c:4a:c0:e3:ca:d0:fd:d4:
                    82:af:24:71:d2:e7:44:6c:05:70:26:57:c8:bd:30:
                    a3:01:30:e0:90:48:8f:3e:d2:ad:b0:33:76:28:5c:
                    d0:25:ee:12:77:af:c4:3b:75:56:9d:6b:dd:a9:49:
                    ef:c6:94:b5:d4:69:39:6b:04:cd:4c:74:0e:89:80:
                    15:d9:b2:e1:67:13:0d:1d:f3:9e:72:11:01:28:8d:
                    b6:6d:4c:c1:92:13:14:03:29:ae:aa:c5:b8:ba:c7:
                    11:d5:af:4e:77:57:a2:2c:a2:ea:fa:7b:d3:be:62:
                    56:15:97:c2:48:b5:af:9c:3a:4c:e9:51:fe:3f:cf:
                    36:4f:8e:3b:ec:52:2c:6e:03:9a:11:f1:bd:d0:bf:
                    b9:23:67:69:02:ac:b5:45:84:d6:db:38:c4:db:63:
                    2e:af:9b:8e:b6:62:4a:af:14:ae:69:6b:88:b4:c0:
                    c8:3e:e5:2a:96:b4:93:cb:0f:20:31:a5:ce:f1:83:
                    38:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:76:A3:65:61:7D:9C:6C:88:E8:62:1E:58:02:E1:80:46:1A:01:70
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130362e302f32342d3234203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:d7:b1:7e:5f:e6:ab:a3:5f:5c:e9:73:ac:25:c8:3d:ca:bd:
         a4:43:a6:38:5a:e9:ec:a2:ad:eb:05:4b:c2:d5:23:09:9e:90:
         25:92:0f:4d:cb:ae:ab:a5:dc:aa:48:b7:19:87:1a:a3:ad:5c:
         11:4a:a8:d8:c1:e7:fa:7e:7d:c9:eb:5d:81:76:6d:53:bf:47:
         73:da:e4:b3:ab:7b:b8:c8:40:70:68:f0:ff:dd:ae:9b:ea:01:
         e4:be:dd:5b:5d:2b:8d:46:16:b1:12:57:28:86:bc:0d:5f:33:
         1a:fe:4f:03:00:a0:4a:9f:7a:44:5a:93:ff:7e:ef:df:a7:eb:
         40:87:2c:4c:fa:0e:46:16:fc:1d:f3:10:56:99:6c:5a:5b:83:
         b6:14:90:ff:14:06:be:2b:cb:e0:36:18:a5:a7:4d:ac:c8:52:
         43:42:8d:ca:a4:16:f0:39:f0:84:e7:08:6e:2a:d6:0b:79:77:
         2b:a1:5f:97:a6:88:ba:5e:26:07:83:f9:4f:2c:62:f7:8e:35:
         ee:6d:c9:b5:d0:d1:d4:cb:e3:09:5c:ed:fe:36:9e:b8:e9:ed:
         3e:14:8a:b0:3e:0d:b8:92:42:4a:88:18:cf:b3:86:26:d5:24:
         18:88:40:7f:4d:42:9e:25:d7:d8:26:e4:1e:f9:a5:41:e2:2f:
         df:b0:0f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org