Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3131322e302f32332d3233203d3e203533313138.roa
File:                     3137372e31322e3131322e302f32332d3233203d3e203533313138.roa (raw, json)
Hash identifier:          dA4orHABVef/9LZjDzUUqzBhBtC+Ir898OcPuehhX/s=
Subject key identifier:   F9:38:DE:33:AD:49:E5:21:16:E5:26:5F:81:C7:46:1E:4C:3C:8E:18
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       067C3F0005CC27A2560D46CDDA6D8ED890284DAC
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3131322e302f32332d3233203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 13:39:43 +0000
ROA not before:           Thu 27 Jul 2023 13:34:43 +0000
ROA not after:            Thu 25 Jul 2024 13:39:43 +0000
asID:                     53118
IP address blocks:        177.12.112.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:7c:3f:00:05:cc:27:a2:56:0d:46:cd:da:6d:8e:d8:90:28:4d:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 13:34:43 2023 GMT
            Not After : Jul 25 13:39:43 2024 GMT
        Subject: CN=F938DE33AD49E52116E5265F81C7461E4C3C8E18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fc:a9:18:33:4f:16:4c:4e:79:2f:0f:ee:fb:
                    94:a3:30:28:a6:90:85:c2:ff:5b:ae:e1:48:bc:cb:
                    58:39:ee:04:10:08:06:94:4a:ff:72:9e:41:db:2a:
                    f5:88:c0:31:ad:18:29:66:be:76:db:58:e3:d0:48:
                    4f:c1:07:84:59:9a:7a:16:1d:f3:c7:72:17:71:00:
                    b9:35:e9:f0:21:32:3b:64:84:22:d5:9f:3b:3e:31:
                    ff:4b:e3:96:f7:33:66:c3:eb:ca:79:dc:82:49:13:
                    d2:47:5f:c4:dc:34:45:78:44:aa:bd:08:4a:79:5c:
                    b1:f3:00:a4:e1:25:fe:c1:7e:3e:ac:c5:97:a5:4e:
                    b2:9d:57:d2:e8:0d:bd:c7:5c:1b:41:76:f5:2a:64:
                    84:6c:d0:32:45:94:29:8a:52:43:75:ac:4c:ca:bd:
                    7a:20:65:86:76:84:66:5d:cc:d9:90:04:77:e8:15:
                    39:c8:f1:20:2c:de:5c:c6:53:ff:f6:b1:d0:58:bc:
                    dd:94:9f:60:cb:46:1c:a4:49:cf:8f:e4:e5:e0:a2:
                    7b:fa:ea:b9:aa:e9:13:53:84:b9:09:71:94:9c:14:
                    e6:b0:3c:c5:7d:87:6f:ec:be:25:dd:0a:9e:9f:b0:
                    41:02:6b:c3:9b:79:eb:7f:c6:b9:e1:2e:5f:d0:ad:
                    7e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:38:DE:33:AD:49:E5:21:16:E5:26:5F:81:C7:46:1E:4C:3C:8E:18
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3131322e302f32332d3233203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:74:7d:cf:49:3f:7a:05:d8:18:73:0b:d2:9e:d6:aa:27:67:
         fd:85:6f:7e:50:65:d9:78:25:97:35:12:dc:50:39:8b:d9:28:
         4a:7b:69:2e:22:ca:c7:b1:ba:9a:3b:12:77:3b:fb:53:70:d1:
         54:f3:6b:30:fc:c2:8b:a8:4e:24:03:39:f9:d0:8d:76:16:1a:
         07:2f:aa:87:6b:6c:f4:4a:d7:ea:2b:56:37:10:ea:a3:d3:ef:
         da:83:d4:5f:ff:6e:ec:cf:11:62:31:dc:80:a9:03:9d:b4:cc:
         28:76:33:da:e0:59:34:43:43:05:a1:5c:be:79:38:38:59:cb:
         27:87:a9:e4:a7:9f:ff:42:f7:b6:69:5c:82:49:94:b5:f4:f1:
         5b:f4:c1:a4:3c:ab:39:59:b0:1e:26:9a:12:9a:bb:f8:cb:b7:
         22:f8:df:57:ba:8d:ea:c4:bc:e4:08:95:e5:fc:bd:89:96:0d:
         3e:b1:34:0a:a3:31:c9:41:27:59:e6:13:0e:54:a8:26:ef:69:
         78:d7:2f:f5:19:d4:32:ad:96:b0:e5:58:a5:b8:32:9d:70:6d:
         c3:0e:7e:d1:6d:a0:70:2e:8c:3d:45:9f:1d:ac:68:e8:f6:cc:
         7a:98:8f:74:1b:f2:d8:1b:82:2c:31:65:f5:69:19:99:0a:52:
         5d:0d:68:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org