Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130382e302f32342d3234203d3e203533313138.roa
File:                     3137372e31322e3130382e302f32342d3234203d3e203533313138.roa (raw, json)
Hash identifier:          N3DmE++NMAPxuDcQZHPe0xnWLECrYtgTrFyFVKQrXag=
Subject key identifier:   DB:83:32:73:5B:40:2F:F1:3C:28:BE:9C:C2:7D:03:CC:A0:F3:9B:2D
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       36156527047373970ED7F8ED058574127B41C39C
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130382e302f32342d3234203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 13:44:47 +0000
ROA not before:           Thu 27 Jul 2023 13:39:47 +0000
ROA not after:            Thu 25 Jul 2024 13:44:47 +0000
asID:                     53118
IP address blocks:        177.12.108.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:15:65:27:04:73:73:97:0e:d7:f8:ed:05:85:74:12:7b:41:c3:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 13:39:47 2023 GMT
            Not After : Jul 25 13:44:47 2024 GMT
        Subject: CN=DB8332735B402FF13C28BE9CC27D03CCA0F39B2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8a:e7:8e:c9:00:6d:cf:36:2f:da:80:f4:c5:
                    8a:7e:4f:c7:2e:d2:20:11:db:7b:38:b5:4d:8b:e7:
                    f1:5a:79:50:2e:14:83:c3:c9:6e:8c:69:cf:75:41:
                    c1:72:da:90:95:a9:8d:5c:1a:8a:2a:40:b8:7f:8c:
                    f5:73:da:0d:c5:b6:67:98:9d:63:d2:18:39:22:25:
                    ec:2a:51:28:97:db:ab:7d:38:49:c2:b2:7c:93:ec:
                    0f:0e:3f:46:a9:d7:6f:43:8b:15:75:6b:57:53:5f:
                    9f:fe:29:2e:fe:26:9e:cf:22:7f:a1:37:44:72:1b:
                    15:3c:8b:23:d3:27:78:fc:b7:9b:42:aa:2b:e9:ef:
                    fb:94:e3:65:d7:a8:2d:33:c8:9a:dc:04:b5:7a:28:
                    2c:06:df:65:bf:57:7e:75:4d:5d:e5:74:e8:ba:8a:
                    66:8e:73:af:f0:a3:a9:4b:ff:9b:02:8a:c8:e2:58:
                    6b:77:13:cc:68:55:c5:61:05:64:5b:bf:38:70:16:
                    c0:2c:44:cb:0e:03:dc:44:61:a9:83:9a:37:e7:b1:
                    d9:ff:0c:3a:bd:68:de:48:32:d8:ab:57:4b:ce:0e:
                    90:ce:a3:06:bf:a8:63:1d:74:87:fc:09:16:ca:3c:
                    f0:e0:78:66:16:17:c4:cc:10:24:ae:ea:8f:79:2d:
                    f4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:83:32:73:5B:40:2F:F1:3C:28:BE:9C:C2:7D:03:CC:A0:F3:9B:2D
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3130382e302f32342d3234203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:20:b2:34:7e:6b:2d:88:ae:ac:e8:80:60:62:03:25:c6:b4:
         10:83:f7:36:91:64:b3:a9:1d:7f:4b:d7:c8:68:db:50:2e:2d:
         07:a3:29:ec:eb:3c:ad:34:af:09:08:ad:d1:53:0f:5f:ad:e9:
         9b:17:70:18:50:91:50:c1:d5:41:9d:e7:9f:51:a7:e6:c9:67:
         c7:83:ac:ce:05:c1:2d:9d:f9:17:4c:17:2d:02:e0:4a:4d:18:
         09:22:85:a7:24:66:68:e9:34:82:6e:dc:16:c0:62:87:aa:0a:
         8c:39:2d:18:57:f8:a8:24:6f:d8:e4:62:37:2b:6b:b5:5e:fd:
         b9:65:a5:ef:67:d6:de:d3:83:2f:da:f5:a8:b9:83:cc:92:1a:
         3f:c3:d9:92:3e:0f:b8:22:a0:f2:f6:0f:bf:ec:7d:72:66:54:
         77:d8:8e:e1:cf:dd:16:52:b3:08:e4:29:0e:a0:b8:d0:5b:3a:
         24:d8:f5:92:44:ab:31:f8:a8:6f:06:6a:f8:38:32:27:c6:98:
         bd:30:bb:12:a2:51:76:45:41:a8:fa:ea:ed:f8:f9:3d:40:e8:
         5a:e8:0c:89:c6:60:d7:c7:a3:83:5d:0b:9b:85:a3:e6:7e:ee:
         e3:b9:ee:69:8d:1e:7a:54:96:51:54:4f:6e:b5:ed:ba:78:ce:
         ce:82:75:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org