Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3131362e302f32322d3232203d3e203533313138.roa
File:                     3137372e31322e3131362e302f32322d3232203d3e203533313138.roa (raw, json)
Hash identifier:          QkW8jV/RqJ24OTmuyUucp7c3EZoH6aXz0eUe9p1LF+Q=
Subject key identifier:   9B:8D:6E:45:14:D5:B2:26:9D:21:E2:FE:82:E3:C6:FF:DB:A4:BB:5A
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       6B0B70024EB6B30DCDDDC88258AF18625780D628
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3131362e302f32322d3232203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 13:18:59 +0000
ROA not before:           Thu 27 Jul 2023 13:13:59 +0000
ROA not after:            Thu 25 Jul 2024 13:18:59 +0000
asID:                     53118
IP address blocks:        177.12.116.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:0b:70:02:4e:b6:b3:0d:cd:dd:c8:82:58:af:18:62:57:80:d6:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 13:13:59 2023 GMT
            Not After : Jul 25 13:18:59 2024 GMT
        Subject: CN=9B8D6E4514D5B2269D21E2FE82E3C6FFDBA4BB5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8e:08:d1:2d:37:ab:6c:a2:af:cf:6f:89:ec:
                    3f:ed:a2:38:ea:6a:86:5a:f0:a1:72:dd:47:28:55:
                    66:f0:07:3e:5d:88:ed:c8:b9:3c:11:28:e0:5e:76:
                    8b:0b:58:02:e4:96:1a:64:19:cc:b3:0e:6e:ea:07:
                    e5:f8:e3:f0:aa:81:50:5d:64:09:dc:a9:ec:e0:e6:
                    b8:79:13:af:df:06:fe:ca:2b:30:15:b1:90:c3:8e:
                    04:40:01:84:c0:23:0d:62:e8:31:9a:a8:cd:08:6b:
                    f2:8d:ba:de:b2:1a:96:fb:d0:6e:77:5d:9a:a0:f5:
                    84:43:16:ec:51:05:6a:22:9b:05:87:0f:54:38:77:
                    1f:66:f4:93:f1:12:57:0b:6f:16:2a:7d:04:69:d1:
                    5d:f3:2e:d0:26:e2:d4:0a:1f:2a:ad:56:1f:30:08:
                    58:6a:be:62:e4:d8:dc:85:ea:4a:25:1c:a1:54:9f:
                    09:f2:b6:66:87:de:af:54:fd:e0:45:b4:dd:da:9a:
                    1f:b3:f9:88:06:1e:81:35:c6:a1:24:0b:69:e2:0c:
                    3e:49:d4:55:d2:d4:2c:0b:fc:20:8f:8c:05:2d:ed:
                    ea:41:b2:60:c9:14:26:4e:cf:92:76:58:66:1b:1b:
                    84:a5:f7:52:96:ac:33:70:38:63:f8:50:26:1a:24:
                    d5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:8D:6E:45:14:D5:B2:26:9D:21:E2:FE:82:E3:C6:FF:DB:A4:BB:5A
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3131362e302f32322d3232203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:da:20:a7:5c:83:78:cd:fc:b8:56:9c:78:10:b0:77:ec:c4:
         a0:0b:5e:08:a7:e7:56:20:d9:5d:7b:fb:10:e6:77:89:d2:db:
         1e:d3:fd:55:f8:29:bb:eb:f6:28:38:95:19:63:ba:77:62:f4:
         27:c5:13:42:ca:91:79:77:29:bf:65:e9:10:d1:d4:65:2f:66:
         86:47:e2:4c:bc:f5:94:89:91:c5:ef:b0:c8:48:6d:9a:3c:2d:
         49:f4:9b:38:44:fc:ca:be:87:8a:46:3e:f0:e4:1c:71:88:b7:
         c5:e8:57:7f:94:e8:4a:55:d3:87:e5:c6:c0:7f:36:a0:52:22:
         91:8f:1f:cd:77:4b:ab:15:ba:c5:d2:a6:ab:9e:2a:9c:67:9a:
         52:9f:74:19:07:03:89:c9:f5:d7:af:88:28:cf:3b:1a:24:1b:
         00:c5:d5:e9:ca:f9:36:bc:5f:51:33:2f:88:08:3e:97:ad:87:
         56:7b:eb:ad:f4:6b:98:f9:37:ae:40:b1:a8:a6:a3:ba:a1:a4:
         88:c1:24:d6:1d:90:05:8b:1b:d5:1c:f9:29:23:7b:ed:65:41:
         e2:bf:80:7f:4f:45:e1:8e:b7:c9:84:f9:a2:1c:73:05:00:ce:
         ca:89:e1:fc:c2:07:91:94:3a:1d:2a:97:7c:17:03:e1:eb:9a:
         2e:ec:e0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org