Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3131302e302f32342d3234203d3e203533313138.roa
File:                     3137372e31322e3131302e302f32342d3234203d3e203533313138.roa (raw, json)
Hash identifier:          7XwKx5HcxdgemlgCO81xO62YcdM+Pe2XuCzaFhYi8iY=
Subject key identifier:   20:9C:C0:F4:87:40:00:F8:4B:09:9F:40:CF:4F:0B:84:85:86:5F:46
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       4E6E7ED9507804038F923E238BF435DE99AFB081
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3131302e302f32342d3234203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 13:45:08 +0000
ROA not before:           Thu 27 Jul 2023 13:40:08 +0000
ROA not after:            Thu 25 Jul 2024 13:45:08 +0000
asID:                     53118
IP address blocks:        177.12.110.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:6e:7e:d9:50:78:04:03:8f:92:3e:23:8b:f4:35:de:99:af:b0:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 13:40:08 2023 GMT
            Not After : Jul 25 13:45:08 2024 GMT
        Subject: CN=209CC0F4874000F84B099F40CF4F0B8485865F46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ef:50:ad:a4:32:2f:9b:ef:76:8a:3e:e6:f9:
                    72:6e:3c:b5:5e:41:d6:c4:05:b7:17:0a:76:c7:51:
                    28:75:6d:2e:37:4b:1d:c4:41:22:63:24:ce:87:3f:
                    66:e1:11:31:22:30:0f:26:70:97:e3:f8:47:0d:e9:
                    37:56:47:fb:05:67:9d:fb:3f:eb:fa:da:d8:0f:9e:
                    47:4c:b1:64:a0:c0:0d:6a:27:32:bb:84:6d:cf:b7:
                    96:cc:9d:88:a5:46:37:ed:a9:6b:da:cd:e4:73:0f:
                    ca:3e:c3:06:ba:ed:95:a2:f2:f2:41:99:e6:d0:45:
                    d3:13:30:7d:21:79:ec:fc:57:42:a6:2e:34:3e:6f:
                    63:e2:5c:b3:e1:a7:e4:19:73:84:39:c7:ea:42:93:
                    ac:f2:d6:8e:2e:08:9b:b9:bb:f6:d8:d9:d5:a0:91:
                    90:8d:ba:40:11:3c:35:a6:77:12:ef:7e:9a:21:dc:
                    aa:d4:98:58:63:95:d5:68:5c:16:1f:98:12:e6:a4:
                    a4:0b:03:59:e1:04:42:0d:c6:3f:f7:4c:e2:f4:72:
                    d0:76:d5:c7:32:bc:d7:21:e7:24:0a:1a:b9:7c:1d:
                    b6:3a:a3:64:29:1e:96:6d:1b:60:76:70:90:f7:1e:
                    48:c7:d8:07:a1:58:f5:9f:fe:cb:ac:98:e3:a3:1f:
                    16:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:9C:C0:F4:87:40:00:F8:4B:09:9F:40:CF:4F:0B:84:85:86:5F:46
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3131302e302f32342d3234203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:a7:56:8d:6e:f0:78:0a:bf:c3:f0:5e:c5:84:f2:3d:aa:9d:
         26:8b:68:03:3a:16:23:7e:2b:5e:43:20:1e:8d:70:81:e0:88:
         5a:b7:87:b9:e7:8d:e6:5a:d9:e3:6b:64:31:99:7b:00:e9:0e:
         e9:15:2c:78:d9:80:fd:bd:24:d0:8e:b5:16:2f:06:70:1a:57:
         66:6b:40:7c:86:b8:df:85:bb:a3:4a:f4:1b:c1:40:83:8c:b6:
         16:dc:18:7d:19:a6:22:be:3c:97:c2:c0:96:66:18:51:0e:d7:
         fa:c4:00:01:cb:13:69:04:03:25:ce:bf:f3:e2:19:c5:31:3a:
         f7:60:12:c9:71:eb:34:71:ad:a1:dc:44:ed:8a:a0:1c:4e:ec:
         5b:a4:58:f2:5e:b7:74:7b:e9:17:d1:78:dc:50:2a:43:fd:3b:
         2a:79:c8:b2:c0:38:0c:82:54:68:9f:b5:b6:79:94:1c:50:c2:
         c0:ab:56:75:fd:61:9c:c5:c6:ae:ba:7f:26:c1:0a:b9:fb:5b:
         2d:7c:c8:8f:88:26:51:4b:ce:21:0b:67:19:da:c5:c1:5f:93:
         4b:2c:fb:b5:cc:9c:c5:91:80:47:d6:6b:fe:b5:1a:6b:e7:94:
         21:f4:ab:1f:50:e9:1c:f5:71:73:a4:f5:fa:e9:e7:38:93:10:
         2e:65:8f:88
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTm5+2VB4BAOPkj4ji/Q13pmvsIEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTVFRDFEQUMxNjZGNzFEQzQ2Rjk3QzYxNUU5Mjg3RDdE
NkY5RUE5MTAeFw0yMzA3MjcxMzQwMDhaFw0yNDA3MjUxMzQ1MDhaMDMxMTAvBgNV
BAMTKDIwOUNDMEY0ODc0MDAwRjg0QjA5OUY0MENGNEYwQjg0ODU4NjVGNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB71CtpDIvm+92ij7m+XJuPLVe
QdbEBbcXCnbHUSh1bS43Sx3EQSJjJM6HP2bhETEiMA8mcJfj+EcN6TdWR/sFZ537
P+v62tgPnkdMsWSgwA1qJzK7hG3Pt5bMnYilRjftqWvazeRzD8o+wwa67ZWi8vJB
mebQRdMTMH0heez8V0KmLjQ+b2PiXLPhp+QZc4Q5x+pCk6zy1o4uCJu5u/bY2dWg
kZCNukARPDWmdxLvfpoh3KrUmFhjldVoXBYfmBLmpKQLA1nhBEINxj/3TOL0ctB2
1ccyvNch5yQKGrl8HbY6o2QpHpZtG2B2cJD3HkjH2AehWPWf/susmOOjHxYPAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUIJzA9IdAAPhLCZ9Az08LhIWGX0YwHwYDVR0j
BBgwFoAUle0drBZvcdxG+XxhXpKH19b56pEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVRHMXNMOXJEWDZoalhSMzdheHNYblNockVRaHVqWmdWd0JTSmFpYUpQ
Y2ovMC85NUVEMURBQzE2NkY3MURDNDZGOTdDNjE1RTkyODdEN0Q2RjlFQTkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk1RUQxREFDMTY2RjcxREM0
NkY5N0M2MTVFOTI4N0Q3RDZGOUVBOTEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FURzFzTDlyRFg2aGpYUjM3YXhzWG5TaHJFUWh1alpnVndCU0phaWFKUGNqLzAv
MzEzNzM3MmUzMTMyMmUzMTMxMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMz
MzEzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsQxuMA0GCSqGSIb3DQEBCwUAA4IBAQCnp1aNbvB4
Cr/D8F7FhPI9qp0mi2gDOhYjfiteQyAejXCB4Ihat4e5543mWtnja2QxmXsA6Q7p
FSx42YD9vSTQjrUWLwZwGldma0B8hrjfhbujSvQbwUCDjLYW3Bh9GaYivjyXwsCW
ZhhRDtf6xAAByxNpBAMlzr/z4hnFMTr3YBLJces0ca2h3ETtiqAcTuxbpFjyXrd0
e+kX0XjcUCpD/TsqeciywDgMglRon7W2eZQcUMLAq1Z1/WGcxcauun8mwQq5+1st
fMiPiCZRS84hC2cZ2sXBX5NLLPu1zJzFkYBH1mv+tRpr55Qh9KsfUOkc9XFzpPX6
6ec4kxAuZY+I
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org