Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130382e302f32322d3232203d3e203533313138.roa
File:                     3137372e31322e3130382e302f32322d3232203d3e203533313138.roa (raw, json)
Hash identifier:          z91BOwES/TsNQdRiz86Fim5DuRiCZ8FJTMN80uQ7xc8=
Subject key identifier:   00:3B:9A:FE:1D:8B:F2:5E:BF:B3:9B:3E:66:D2:C5:22:1B:C5:ED:22
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       06DCB133DC119E188ECCF86362C78B2947F43583
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130382e302f32322d3232203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 13:18:34 +0000
ROA not before:           Thu 27 Jul 2023 13:13:34 +0000
ROA not after:            Thu 25 Jul 2024 13:18:34 +0000
asID:                     53118
IP address blocks:        177.12.108.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:dc:b1:33:dc:11:9e:18:8e:cc:f8:63:62:c7:8b:29:47:f4:35:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 13:13:34 2023 GMT
            Not After : Jul 25 13:18:34 2024 GMT
        Subject: CN=003B9AFE1D8BF25EBFB39B3E66D2C5221BC5ED22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:fa:61:70:0d:d0:5e:f5:a2:b2:01:05:cb:e5:
                    07:04:16:eb:c2:12:76:75:07:20:17:29:c1:58:4a:
                    08:b0:23:4d:d0:0a:6b:07:78:6a:95:78:92:97:e5:
                    23:ca:83:2e:12:78:a9:d8:5e:8d:49:47:95:c2:6a:
                    50:0f:fd:46:22:6c:0b:5b:71:57:c6:76:6c:8f:a8:
                    ca:c7:3d:0a:fc:87:79:23:ba:c2:25:e9:14:af:41:
                    48:99:96:08:de:c4:de:19:00:03:86:0a:a3:fb:cc:
                    3a:9f:17:06:98:44:fd:77:97:d6:9f:ac:3a:71:8f:
                    90:90:01:8a:e7:c3:a4:ff:06:6d:9f:09:0f:91:fd:
                    6b:f8:81:5c:36:f2:c8:0e:3e:fe:9a:f7:e9:39:a8:
                    53:f1:88:82:30:63:66:09:ac:ad:56:f4:6a:25:f5:
                    76:70:03:45:02:3b:13:c6:8d:b8:aa:8f:b9:ec:d1:
                    8c:48:1f:d8:9b:9d:80:ab:3b:08:5e:57:62:5b:43:
                    0c:c9:9d:7f:39:a6:ba:1f:20:0e:82:31:5b:52:6f:
                    02:7d:cd:0f:8f:59:19:77:98:1f:9a:58:2b:57:bd:
                    03:ee:29:24:0f:47:7e:68:3f:9d:c5:81:3e:b1:ec:
                    71:37:29:36:97:da:49:eb:9a:1c:52:99:7b:d2:84:
                    ac:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:3B:9A:FE:1D:8B:F2:5E:BF:B3:9B:3E:66:D2:C5:22:1B:C5:ED:22
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130382e302f32322d3232203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:96:a9:5a:98:01:90:23:6b:ae:29:08:2e:6d:75:75:e3:7f:
         9b:1d:3e:3a:2f:29:20:e1:48:4d:cf:dc:aa:d9:c6:1f:d6:8b:
         21:14:0f:c1:6c:80:3d:13:e6:ef:ab:e3:e2:68:b4:cb:ac:fb:
         9a:0a:ba:a6:c6:6d:aa:f2:32:39:7f:9e:6d:ef:e5:33:5c:73:
         41:ea:dc:bd:80:c2:c0:06:ab:ba:69:45:8f:84:45:08:bd:fa:
         9e:70:90:ef:a8:53:22:3b:a8:f3:d7:d5:e6:3f:48:05:94:48:
         f9:ca:85:45:af:8d:d7:9a:af:c6:b9:ba:76:f9:9e:d2:5d:b3:
         cc:b5:b0:c1:0e:2a:68:5d:46:4e:fd:2c:62:d1:cf:d4:e1:95:
         e2:99:5b:be:f8:e1:1f:d9:79:72:c5:9f:a5:67:7f:4c:50:65:
         d2:36:3c:e3:14:bd:36:29:20:ed:4c:b5:76:3f:64:64:a8:ff:
         ca:06:be:bf:73:26:55:6e:46:09:c0:0a:c2:39:63:ef:f4:7d:
         a8:1a:e3:48:61:a5:14:82:ee:d2:da:e2:a6:2e:79:e9:51:65:
         e3:9c:7d:27:b9:21:17:a0:42:4e:6d:57:d3:4d:09:ba:48:3e:
         9b:f9:4b:38:8b:f9:0e:8d:38:25:62:a5:88:10:c8:08:0c:5c:
         b4:8d:92:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org