Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3131342e302f32342d3234203d3e203533313138.roa
File:                     3137372e31322e3131342e302f32342d3234203d3e203533313138.roa (raw, json)
Hash identifier:          m2x7yzutNtDao0zZmBdRKQsESD5dxC89JiJmU1rJvxI=
Subject key identifier:   1A:66:52:C6:33:89:16:4F:DF:F8:26:53:A0:DF:0C:AC:AD:A1:D7:B4
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       54795AA7285571F61691DA82C8E7DE24B0BD879B
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3131342e302f32342d3234203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 13:46:13 +0000
ROA not before:           Thu 27 Jul 2023 13:41:13 +0000
ROA not after:            Thu 25 Jul 2024 13:46:13 +0000
asID:                     53118
IP address blocks:        177.12.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:79:5a:a7:28:55:71:f6:16:91:da:82:c8:e7:de:24:b0:bd:87:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 13:41:13 2023 GMT
            Not After : Jul 25 13:46:13 2024 GMT
        Subject: CN=1A6652C63389164FDFF82653A0DF0CACADA1D7B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:49:0b:9e:4c:e6:9a:70:63:4c:a4:62:96:b0:
                    25:63:ca:2f:7b:6c:f0:75:23:92:25:db:48:c0:de:
                    22:a1:8a:3d:04:2b:e1:c3:89:f7:97:4a:27:79:5f:
                    1b:34:6a:f1:b3:83:3a:0d:df:fc:21:8d:51:71:a8:
                    34:00:a2:7b:6e:d0:c4:67:c3:87:c6:61:c1:c9:d9:
                    d5:92:3f:a5:66:fd:b9:3a:b7:ab:7d:b6:c5:c6:40:
                    3f:bf:9f:54:dd:4e:d4:1e:54:c8:02:a3:24:fd:c7:
                    4b:80:d2:1d:e0:3b:00:ab:5b:f6:ea:52:3e:d7:8e:
                    47:e7:e3:f0:69:b0:18:0d:38:9c:e1:2c:56:23:4b:
                    bf:96:df:1e:77:b6:82:ce:dc:cd:95:98:b9:d0:91:
                    e3:9f:fd:41:79:f9:f6:27:55:89:72:81:dd:39:b2:
                    f5:bc:e5:11:b6:35:41:41:0b:6a:d0:c3:ce:d3:28:
                    71:e8:a8:ce:17:3d:07:32:09:91:40:dc:c2:2f:5b:
                    83:ee:6b:f9:79:69:39:e9:a4:9f:2e:6a:8d:7a:a0:
                    a0:3a:55:6e:f1:38:53:8a:ac:fd:61:83:7d:e4:b0:
                    84:8e:ac:50:a2:87:94:22:53:4f:b9:1c:13:e0:0c:
                    5b:be:8a:db:56:dd:60:07:66:be:c3:2a:73:8b:a5:
                    3e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:66:52:C6:33:89:16:4F:DF:F8:26:53:A0:DF:0C:AC:AD:A1:D7:B4
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3131342e302f32342d3234203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:3c:e0:a2:c0:75:1b:a1:1e:b1:b1:a3:6b:c2:92:c3:26:16:
         de:75:5c:98:90:ef:31:22:88:69:63:07:50:dd:bb:71:21:86:
         e7:a2:f5:a2:5d:ff:93:45:79:75:07:9e:13:1c:f4:5d:eb:3e:
         43:a2:c7:d8:fe:11:e1:db:16:8b:81:f1:2b:0c:1d:32:1b:f6:
         4b:31:b8:00:d9:ae:fa:11:68:37:30:d0:0b:ea:61:f6:bb:71:
         0a:c1:d7:73:c5:a0:1f:61:0d:57:af:48:08:97:7e:5b:2a:42:
         6b:d4:1a:ae:a4:db:61:6d:f7:4a:94:be:f6:aa:44:e9:d1:a4:
         d4:47:70:da:cc:22:14:4e:83:6d:37:af:90:a4:5a:19:a0:66:
         62:33:1c:1d:4e:2e:28:67:8e:b5:07:1b:91:3e:4c:c6:fa:f7:
         c1:77:64:40:58:22:c2:95:30:b8:c2:9e:59:9f:03:ed:73:22:
         e3:4e:f2:f9:2c:6b:a5:df:c1:c1:3a:db:b4:28:c3:57:1a:92:
         80:d9:29:84:b1:de:d1:41:52:cc:3e:5d:c1:c7:66:11:cb:f9:
         e5:9d:24:a7:12:ca:cc:27:65:3a:17:c8:e8:ed:55:aa:0d:bd:
         cf:9a:21:32:16:50:93:70:cb:b9:22:27:15:99:65:86:9f:24:
         88:06:b6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org