Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130372e302f32342d3234203d3e203533313138.roa
File:                     3137372e31322e3130372e302f32342d3234203d3e203533313138.roa (raw, json)
Hash identifier:          oTXbUhe4sPL1yGhoT4wsWCnj+ZYLLuHHNw7lF4Us6nY=
Subject key identifier:   91:1B:B9:97:7B:73:F1:3A:AC:AB:B5:70:C0:59:62:15:D2:84:CE:08
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       06F44DB4730CF6120C488635968563F77764E046
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130372e302f32342d3234203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 13:44:14 +0000
ROA not before:           Thu 27 Jul 2023 13:39:14 +0000
ROA not after:            Thu 25 Jul 2024 13:44:14 +0000
asID:                     53118
IP address blocks:        177.12.107.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f4:4d:b4:73:0c:f6:12:0c:48:86:35:96:85:63:f7:77:64:e0:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 13:39:14 2023 GMT
            Not After : Jul 25 13:44:14 2024 GMT
        Subject: CN=911BB9977B73F13AACABB570C0596215D284CE08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:59:9c:e4:e0:98:ea:7b:d9:97:06:a5:55:75:
                    cf:3a:a1:ac:59:81:cc:7d:75:58:ef:e1:8e:6f:96:
                    06:5c:1d:dc:2f:c2:d2:0d:fc:98:37:79:93:0c:96:
                    d9:22:5a:6b:1e:9a:79:e0:63:d5:3d:89:05:38:0d:
                    81:80:74:f8:ad:a3:5c:3d:16:21:e7:90:3a:3b:55:
                    7a:6e:16:d6:3d:92:63:bd:ec:9d:8b:6d:15:55:ea:
                    ce:4c:45:6f:fe:47:19:ea:ff:0e:52:29:2d:2f:23:
                    42:35:8d:23:1f:a4:24:28:f7:4c:92:ff:8a:d3:65:
                    93:fb:8b:c5:ce:b6:ac:e8:fc:e7:7d:0e:1b:c3:04:
                    01:21:c3:fc:84:38:ad:62:d8:27:5d:b3:dd:20:04:
                    a0:d3:5a:76:54:6d:43:39:17:76:35:e9:60:83:46:
                    d8:11:06:db:2b:dc:68:42:bb:60:06:ba:d9:53:71:
                    57:d0:78:67:6d:2d:2e:dd:a6:a1:e0:9d:21:79:b9:
                    70:50:ff:e2:5f:ae:f3:55:33:77:a3:c0:e9:e0:f5:
                    ff:38:44:a2:1c:21:34:27:9c:97:31:c2:28:08:24:
                    0a:b4:ca:87:c7:2c:0a:ba:fb:93:c8:82:6a:64:9b:
                    70:aa:ab:00:40:7b:56:44:61:af:31:55:c5:ca:55:
                    df:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:1B:B9:97:7B:73:F1:3A:AC:AB:B5:70:C0:59:62:15:D2:84:CE:08
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130372e302f32342d3234203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:76:5e:1b:83:fd:18:de:95:d7:55:cc:86:ff:4a:07:03:e9:
         db:91:97:1b:3b:4d:1d:0e:6a:e9:4e:99:e0:97:94:eb:12:98:
         9e:00:d4:96:d4:51:f9:7a:bc:81:e3:93:2f:59:03:40:31:6c:
         76:74:16:46:df:f5:7a:71:89:fe:17:9a:e7:c5:fa:9e:75:7b:
         43:2c:91:cf:9c:3e:2d:4d:ab:9d:45:dd:82:ae:d5:55:0b:ea:
         93:47:43:41:0e:b2:4b:4d:68:fa:29:34:b2:65:fb:ff:88:cb:
         a9:49:da:1d:c1:9b:0f:26:06:91:ec:ef:fc:a1:7b:cb:95:87:
         85:d1:78:6a:46:bb:3a:f4:97:95:7a:f3:3c:ef:7d:2c:97:02:
         de:6c:9b:ab:80:d9:b2:f4:a3:13:15:6c:49:79:00:be:a6:4e:
         da:22:ac:cc:2e:4c:a0:ed:c5:2f:32:7c:56:4a:83:35:8d:69:
         01:4f:17:ba:72:a7:0b:da:e1:1d:c6:c1:60:9f:47:de:7b:79:
         74:fb:fe:00:5b:55:72:ec:ed:7c:52:1c:f7:f1:63:3e:7f:9c:
         59:b6:a7:e8:fa:59:41:3f:ad:8f:3c:e5:16:cc:bc:70:74:1a:
         5d:78:46:5a:61:72:fe:40:02:90:2b:26:02:94:94:0b:da:54:
         32:33:fb:35
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBvRNtHMM9hIMSIY1loVj93dk4EYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTVFRDFEQUMxNjZGNzFEQzQ2Rjk3QzYxNUU5Mjg3RDdE
NkY5RUE5MTAeFw0yMzA3MjcxMzM5MTRaFw0yNDA3MjUxMzQ0MTRaMDMxMTAvBgNV
BAMTKDkxMUJCOTk3N0I3M0YxM0FBQ0FCQjU3MEMwNTk2MjE1RDI4NENFMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEWZzk4Jjqe9mXBqVVdc86oaxZ
gcx9dVjv4Y5vlgZcHdwvwtIN/Jg3eZMMltkiWmsemnngY9U9iQU4DYGAdPito1w9
FiHnkDo7VXpuFtY9kmO97J2LbRVV6s5MRW/+Rxnq/w5SKS0vI0I1jSMfpCQo90yS
/4rTZZP7i8XOtqzo/Od9DhvDBAEhw/yEOK1i2Cdds90gBKDTWnZUbUM5F3Y16WCD
RtgRBtsr3GhCu2AGutlTcVfQeGdtLS7dpqHgnSF5uXBQ/+JfrvNVM3ejwOng9f84
RKIcITQnnJcxwigIJAq0yofHLAq6+5PIgmpkm3CqqwBAe1ZEYa8xVcXKVd/fAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUkRu5l3tz8Tqsq7VwwFliFdKEzggwHwYDVR0j
BBgwFoAUle0drBZvcdxG+XxhXpKH19b56pEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVRHMXNMOXJEWDZoalhSMzdheHNYblNockVRaHVqWmdWd0JTSmFpYUpQ
Y2ovMC85NUVEMURBQzE2NkY3MURDNDZGOTdDNjE1RTkyODdEN0Q2RjlFQTkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk1RUQxREFDMTY2RjcxREM0
NkY5N0M2MTVFOTI4N0Q3RDZGOUVBOTEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FURzFzTDlyRFg2aGpYUjM3YXhzWG5TaHJFUWh1alpnVndCU0phaWFKUGNqLzAv
MzEzNzM3MmUzMTMyMmUzMTMwMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMz
MzEzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsQxrMA0GCSqGSIb3DQEBCwUAA4IBAQAkdl4bg/0Y
3pXXVcyG/0oHA+nbkZcbO00dDmrpTpngl5TrEpieANSW1FH5eryB45MvWQNAMWx2
dBZG3/V6cYn+F5rnxfqedXtDLJHPnD4tTaudRd2CrtVVC+qTR0NBDrJLTWj6KTSy
Zfv/iMupSdodwZsPJgaR7O/8oXvLlYeF0XhqRrs69JeVevM8730slwLebJurgNmy
9KMTFWxJeQC+pk7aIqzMLkyg7cUvMnxWSoM1jWkBTxe6cqcL2uEdxsFgn0fee3l0
+/4AW1Vy7O18Uhz38WM+f5xZtqfo+llBP62PPOUWzLxwdBpdeEZaYXL+QAKQKyYC
lJQL2lQyM/s1
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org