Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130382e302f32332d3233203d3e203533313138.roa
File:                     3137372e31322e3130382e302f32332d3233203d3e203533313138.roa (raw, json)
Hash identifier:          ZAkDZUuPWC3ODdybWbXU/hckJ6k2kx/7jVZ6lX8e4oY=
Subject key identifier:   22:CF:C5:1A:0F:C8:51:3C:5D:3D:30:BD:55:E5:53:87:11:0D:E4:9C
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       03B26BA0290551D96C7D8E0F71184021A18B49DA
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130382e302f32332d3233203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 13:39:23 +0000
ROA not before:           Thu 27 Jul 2023 13:34:23 +0000
ROA not after:            Thu 25 Jul 2024 13:39:23 +0000
asID:                     53118
IP address blocks:        177.12.108.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:b2:6b:a0:29:05:51:d9:6c:7d:8e:0f:71:18:40:21:a1:8b:49:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 13:34:23 2023 GMT
            Not After : Jul 25 13:39:23 2024 GMT
        Subject: CN=22CFC51A0FC8513C5D3D30BD55E55387110DE49C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d4:0f:ba:5f:51:a0:92:7e:cc:75:27:19:80:
                    d0:8a:40:ec:0d:4a:3e:c6:22:5b:b2:f6:be:7c:2b:
                    da:6e:de:2d:49:e1:56:a4:1c:8b:a5:d4:be:70:0a:
                    55:17:a8:67:27:0a:38:a1:22:cd:35:c8:9d:1c:9c:
                    9f:a8:f6:85:aa:04:87:bd:83:15:19:aa:1c:51:27:
                    07:18:5a:1a:53:43:9d:95:16:74:23:c3:e1:bd:45:
                    e2:04:05:1a:30:09:d1:36:bf:af:b4:61:9a:70:2e:
                    f5:5f:9d:0e:d6:10:49:68:8c:2b:f4:64:91:b7:b5:
                    a8:e6:84:d9:d5:ec:3d:40:2f:e3:68:d5:7f:4d:68:
                    c4:35:41:f9:87:d9:02:f7:2a:b8:7f:5b:b3:14:48:
                    05:7a:f4:02:11:8b:99:be:60:83:45:0d:18:25:7a:
                    6d:f9:45:ea:9a:6a:25:4c:a0:ac:4e:81:5f:2c:0b:
                    e2:7d:34:67:e6:f6:51:44:02:9f:de:ba:4d:1a:9a:
                    3f:87:52:7d:0d:2e:71:fe:a6:f7:31:67:0c:14:18:
                    60:7a:3a:6b:c1:d7:f7:b5:ee:81:8b:ad:41:9a:50:
                    95:77:f7:cd:15:f7:e6:24:4c:d1:7c:d5:e6:9e:14:
                    5d:5b:89:5b:e3:ac:c4:50:20:c7:e2:6b:4b:29:6b:
                    7d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:CF:C5:1A:0F:C8:51:3C:5D:3D:30:BD:55:E5:53:87:11:0D:E4:9C
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130382e302f32332d3233203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:73:3d:fe:28:fe:40:7b:79:41:21:d2:e2:7e:5e:90:90:d2:
         0c:1f:ec:85:5a:3f:9c:65:9a:0c:c6:43:aa:31:59:27:8e:c2:
         c6:2a:2f:b3:f1:b6:c0:ae:0d:0b:4b:2b:ea:12:ac:70:58:4a:
         c6:45:22:10:5b:3c:91:e6:0b:6a:8d:f0:09:24:d0:11:0a:a1:
         d7:64:18:bc:c5:f8:00:79:58:a6:be:7c:59:e2:26:50:4a:b7:
         66:e3:f9:96:98:fa:25:f3:b9:1c:90:62:c1:ae:41:6f:00:77:
         bf:e6:c7:1f:b7:7f:50:f6:64:29:1b:06:ad:40:a6:9e:22:e8:
         8f:f3:fa:dd:b3:f8:ab:9f:8b:18:e9:a8:64:10:92:fa:29:64:
         a0:1d:1b:25:97:fd:13:bb:09:cd:b2:58:9e:d2:6c:49:13:24:
         91:ee:4b:3a:9e:36:ec:d0:e6:5c:77:fd:f4:44:dc:59:48:f5:
         6b:d9:36:62:46:26:05:0f:5e:e4:9f:df:cc:a2:b4:78:55:df:
         3c:b6:4d:a3:b4:73:3a:78:33:44:49:0f:cf:be:ba:61:ee:6e:
         6e:d1:7c:14:48:12:4a:83:ef:a9:30:10:d5:8f:1f:38:24:e0:
         76:04:fb:46:42:15:88:e5:1f:35:3f:9a:dd:b7:7d:94:60:9b:
         02:1a:c8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org