Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3131322e302f32312d3231203d3e203533313138.roa
File:                     3137372e31322e3131322e302f32312d3231203d3e203533313138.roa (raw, json)
Hash identifier:          BjC3tXT9OVQfKak5UdtkWzK2JdM94AWsgtd3LYSCtYM=
Subject key identifier:   CE:D8:F1:B5:ED:B0:5A:4F:30:1E:DB:02:88:AE:28:7E:09:8D:24:71
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       76AC86A66A7664266550C5068DB8D47DD92A7A2A
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3131322e302f32312d3231203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 13:15:03 +0000
ROA not before:           Thu 27 Jul 2023 13:10:03 +0000
ROA not after:            Thu 25 Jul 2024 13:15:03 +0000
asID:                     53118
IP address blocks:        177.12.112.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ac:86:a6:6a:76:64:26:65:50:c5:06:8d:b8:d4:7d:d9:2a:7a:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 13:10:03 2023 GMT
            Not After : Jul 25 13:15:03 2024 GMT
        Subject: CN=CED8F1B5EDB05A4F301EDB0288AE287E098D2471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:99:a3:c7:97:f8:4f:14:1f:8d:95:83:b0:d2:
                    22:bb:60:19:ae:9d:15:1b:cf:70:1d:5c:6d:09:ba:
                    57:59:54:cf:26:7b:da:24:07:d6:80:75:f1:bf:0d:
                    cf:9d:0d:86:5d:d9:e3:15:ad:d5:48:f8:0a:09:4f:
                    7a:d1:18:30:40:ae:33:f0:64:05:08:54:cb:ae:3b:
                    ca:bb:ce:76:92:23:dd:06:ec:c2:14:a7:4d:09:cd:
                    9b:ec:dd:9f:e3:cb:a0:ba:88:c1:42:10:c2:e2:0c:
                    ec:a3:6b:e8:2a:a1:79:be:bb:f1:c4:88:8c:0b:e0:
                    ee:cb:21:34:73:73:61:61:b2:66:9f:d2:b4:c0:72:
                    3b:02:bb:24:65:45:21:e7:12:62:ab:b5:44:15:18:
                    07:30:49:df:bc:2a:1c:5c:85:d3:50:84:53:ef:fd:
                    6b:3b:54:d0:f6:18:44:2d:40:94:2b:2c:35:f7:b9:
                    81:32:b3:35:7e:84:ef:7f:ba:da:db:f7:11:51:8b:
                    6e:aa:ad:a0:59:12:2e:98:f2:d4:04:a0:14:6f:28:
                    2e:94:c9:44:90:16:c6:46:8f:5e:3a:45:e9:77:cb:
                    04:18:f9:97:64:bc:99:7d:40:15:53:33:50:8f:6b:
                    07:95:5d:3c:42:f4:0a:d5:00:af:a2:01:38:bc:e5:
                    ed:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D8:F1:B5:ED:B0:5A:4F:30:1E:DB:02:88:AE:28:7E:09:8D:24:71
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3131322e302f32312d3231203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         35:5a:53:35:75:6a:35:aa:5a:1f:d8:90:19:8c:b1:7b:b1:7a:
         d1:f8:55:2f:6e:d4:53:eb:a2:53:52:45:59:49:51:00:9e:e0:
         c0:fe:72:3a:d3:ee:73:57:7e:99:61:1f:88:b2:8c:f9:56:f5:
         bb:35:69:bf:5f:fe:70:2f:47:23:39:b2:6f:62:a4:45:92:ee:
         50:df:16:74:e0:c4:db:d8:54:41:fe:d3:b8:81:96:a3:d5:cf:
         24:7e:ac:a1:c5:8a:a4:ef:1a:e7:c6:20:91:c2:5b:39:cc:88:
         c0:9b:a3:26:ca:7a:e3:3f:89:26:36:d4:da:59:46:01:43:b3:
         46:b3:9f:7c:74:11:75:23:d2:d3:95:7d:d1:f3:ec:df:66:0c:
         c8:46:5c:9a:e7:48:97:05:ce:e9:cb:af:aa:44:41:97:b3:6c:
         ad:c1:9b:2b:aa:b5:7c:84:8f:86:6b:19:64:a6:51:55:02:28:
         b4:1c:1b:ea:71:b3:b3:a1:a3:c3:7c:59:8d:64:99:73:ee:ee:
         3c:6f:3c:97:f6:ef:d2:75:a9:6b:ac:73:8a:ef:d9:5a:fe:8e:
         54:4e:e5:2f:89:9c:db:37:5b:dc:84:02:1a:d1:54:c9:28:bc:
         99:e4:11:84:1b:c3:3a:6a:6f:5a:d4:da:70:78:f0:32:1b:19:
         23:a8:10:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org