Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3131342e302f32332d3233203d3e203533313138.roa
File:                     3137372e31322e3131342e302f32332d3233203d3e203533313138.roa (raw, json)
Hash identifier:          KiCG0SmrwsKy5ssUFSo4c+aKyBSUdSyklxpVu4GUeF8=
Subject key identifier:   A2:29:F6:D2:A3:DD:E4:A7:A5:86:28:39:69:52:A8:D5:26:0A:FF:18
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       341AA58154FC79EA677F40737057E5C66415DE6B
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3131342e302f32332d3233203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 13:39:51 +0000
ROA not before:           Thu 27 Jul 2023 13:34:51 +0000
ROA not after:            Thu 25 Jul 2024 13:39:51 +0000
asID:                     53118
IP address blocks:        177.12.114.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:1a:a5:81:54:fc:79:ea:67:7f:40:73:70:57:e5:c6:64:15:de:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 13:34:51 2023 GMT
            Not After : Jul 25 13:39:51 2024 GMT
        Subject: CN=A229F6D2A3DDE4A7A58628396952A8D5260AFF18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6e:bc:4d:83:ed:97:cd:52:fa:85:57:53:5a:
                    ba:1d:08:0c:b3:f2:55:4c:f7:bd:cb:e7:53:8b:b3:
                    66:1e:b1:c7:2f:d3:71:df:49:4c:d1:15:41:79:8f:
                    61:7e:18:10:31:f8:39:d0:87:45:c3:3b:1c:47:23:
                    c0:cb:9a:52:fc:22:6c:1d:87:7f:29:56:65:c8:60:
                    64:f7:bc:f1:f7:82:33:41:20:86:e6:ae:50:1e:75:
                    ca:5e:1a:22:e3:5b:ac:9e:db:d4:9b:e3:56:8d:29:
                    56:66:7d:ff:18:a9:ea:91:22:24:05:47:66:fb:3e:
                    65:1a:6f:d6:3b:e1:c2:c2:9f:a3:54:d6:bc:28:69:
                    ea:dc:da:82:c5:0c:b7:05:f4:0b:fa:31:61:70:6d:
                    98:dd:01:29:2c:2b:a0:f9:ed:be:fb:26:4a:76:9e:
                    e2:e8:6d:a0:4e:ac:e7:61:03:5e:01:81:69:9f:fa:
                    48:ce:db:7b:59:a3:6f:25:24:f1:80:c1:c2:ec:f7:
                    2a:61:ad:8c:5e:da:bd:30:8e:99:78:e4:65:0e:ca:
                    42:c5:a5:56:fd:81:5f:1a:4c:83:a0:d0:6d:07:ec:
                    90:00:9e:03:27:5f:ad:89:51:34:d1:49:4f:e2:91:
                    f1:41:39:3a:c3:24:87:09:c7:09:3d:ef:eb:74:de:
                    22:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:29:F6:D2:A3:DD:E4:A7:A5:86:28:39:69:52:A8:D5:26:0A:FF:18
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3131342e302f32332d3233203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:4f:56:f1:ad:f3:65:5b:52:b8:75:7a:0b:38:4d:3c:18:ae:
         5b:4e:c8:dd:31:f0:60:7d:f8:6c:c4:8f:ef:19:14:d1:39:a3:
         12:39:78:0b:74:8e:c8:03:00:83:72:88:5e:f7:d7:f2:47:3d:
         8f:c0:dd:3c:aa:31:2f:43:cc:8e:6a:c2:36:22:79:ff:c8:83:
         81:30:5c:06:ff:e3:13:9d:72:65:15:7b:66:cf:74:ba:42:98:
         4d:24:9a:b9:ca:5c:f8:15:64:f5:2b:16:7d:ec:3c:38:c4:78:
         40:33:2c:f6:48:fb:2b:47:89:11:5e:57:5a:3c:d1:83:7b:90:
         85:dc:67:6c:af:97:01:9d:9d:10:07:e7:b3:3f:3e:bc:aa:c6:
         39:6a:1c:65:f5:3d:64:e6:c3:81:6e:e0:c4:e5:58:bd:0a:1c:
         55:7a:6e:e1:87:cf:c6:0e:c3:ea:f6:c2:f7:08:3e:7d:a2:40:
         31:57:c3:79:dc:a5:ca:85:5d:a9:ed:94:61:9c:f1:58:ff:bd:
         f5:dc:ce:e3:82:f2:2b:31:da:d8:78:73:8d:c7:ab:c7:db:5f:
         d9:42:21:2b:1d:58:e4:5c:55:1b:e2:93:b6:65:97:3c:1e:53:
         0a:87:81:d4:13:38:65:5b:35:85:66:22:f2:55:ec:e4:cf:12:
         be:9f:15:ba
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNBqlgVT8eepnf0BzcFflxmQV3mswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTVFRDFEQUMxNjZGNzFEQzQ2Rjk3QzYxNUU5Mjg3RDdE
NkY5RUE5MTAeFw0yMzA3MjcxMzM0NTFaFw0yNDA3MjUxMzM5NTFaMDMxMTAvBgNV
BAMTKEEyMjlGNkQyQTNEREU0QTdBNTg2MjgzOTY5NTJBOEQ1MjYwQUZGMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4brxNg+2XzVL6hVdTWrodCAyz
8lVM973L51OLs2Yesccv03HfSUzRFUF5j2F+GBAx+DnQh0XDOxxHI8DLmlL8Imwd
h38pVmXIYGT3vPH3gjNBIIbmrlAedcpeGiLjW6ye29Sb41aNKVZmff8YqeqRIiQF
R2b7PmUab9Y74cLCn6NU1rwoaerc2oLFDLcF9Av6MWFwbZjdASksK6D57b77Jkp2
nuLobaBOrOdhA14BgWmf+kjO23tZo28lJPGAwcLs9yphrYxe2r0wjpl45GUOykLF
pVb9gV8aTIOg0G0H7JAAngMnX62JUTTRSU/ikfFBOTrDJIcJxwk97+t03iKTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUoin20qPd5Kelhig5aVKo1SYK/xgwHwYDVR0j
BBgwFoAUle0drBZvcdxG+XxhXpKH19b56pEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVRHMXNMOXJEWDZoalhSMzdheHNYblNockVRaHVqWmdWd0JTSmFpYUpQ
Y2ovMC85NUVEMURBQzE2NkY3MURDNDZGOTdDNjE1RTkyODdEN0Q2RjlFQTkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk1RUQxREFDMTY2RjcxREM0
NkY5N0M2MTVFOTI4N0Q3RDZGOUVBOTEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FURzFzTDlyRFg2aGpYUjM3YXhzWG5TaHJFUWh1alpnVndCU0phaWFKUGNqLzAv
MzEzNzM3MmUzMTMyMmUzMTMxMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMz
MzEzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsQxyMA0GCSqGSIb3DQEBCwUAA4IBAQCET1bxrfNl
W1K4dXoLOE08GK5bTsjdMfBgffhsxI/vGRTROaMSOXgLdI7IAwCDcohe99fyRz2P
wN08qjEvQ8yOasI2Inn/yIOBMFwG/+MTnXJlFXtmz3S6QphNJJq5ylz4FWT1KxZ9
7Dw4xHhAMyz2SPsrR4kRXldaPNGDe5CF3Gdsr5cBnZ0QB+ezPz68qsY5ahxl9T1k
5sOBbuDE5Vi9ChxVem7hh8/GDsPq9sL3CD59okAxV8N53KXKhV2p7ZRhnPFY/731
3M7jgvIrMdrYeHONx6vH21/ZQiErHVjkXFUb4pO2ZZc8HlMKh4HUEzhlWzWFZiLy
VezkzxK+nxW6
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org