Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3131362e302f32332d3233203d3e203533313138.roa
File:                     3137372e31322e3131362e302f32332d3233203d3e203533313138.roa (raw, json)
Hash identifier:          JnUsDAKcvGJ3eKlWjwIsH5xfNPSxs94CkeEmjrUAq30=
Subject key identifier:   B0:25:C8:40:A5:39:70:C6:C7:0E:96:B9:AB:12:F0:6C:A1:56:C4:9A
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       26AFC860BB4064A029824EB18E9C33F11104AC7D
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3131362e302f32332d3233203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 13:40:00 +0000
ROA not before:           Thu 27 Jul 2023 13:35:00 +0000
ROA not after:            Thu 25 Jul 2024 13:40:00 +0000
asID:                     53118
IP address blocks:        177.12.116.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:af:c8:60:bb:40:64:a0:29:82:4e:b1:8e:9c:33:f1:11:04:ac:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 13:35:00 2023 GMT
            Not After : Jul 25 13:40:00 2024 GMT
        Subject: CN=B025C840A53970C6C70E96B9AB12F06CA156C49A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4c:df:23:0f:ef:37:3f:ec:1a:dd:8b:aa:f8:
                    fa:f0:52:88:6b:23:45:88:8e:59:da:2c:d4:cf:5e:
                    bc:ae:26:da:56:74:0e:56:7b:2c:ec:e5:34:77:0f:
                    8d:6d:ef:dc:0f:e6:72:a4:bb:5d:b6:74:76:11:53:
                    13:fe:e4:56:23:c7:0d:00:01:85:18:f6:6c:cf:43:
                    d8:f1:52:df:38:fb:ec:c8:26:e3:36:67:6a:f5:fb:
                    7b:51:13:d4:4f:7b:d4:54:a2:8c:d9:54:e0:73:ec:
                    cd:e0:05:4b:a6:87:b9:3a:93:94:ad:08:4e:d1:43:
                    45:da:d2:f2:46:81:60:56:ba:e3:72:d2:6c:2a:3f:
                    64:43:a4:a4:22:26:17:b3:99:5c:26:8d:8a:12:4b:
                    39:43:64:12:18:d4:8a:8c:71:df:05:f5:cd:4f:99:
                    c9:f2:7a:5f:c7:92:d7:6c:86:c9:56:22:80:af:9b:
                    da:d3:12:ca:b4:b2:13:6a:65:be:e1:0e:91:9d:da:
                    c3:d4:32:13:71:d1:63:ff:68:af:d5:e6:06:64:69:
                    57:79:88:4a:25:a5:5a:af:36:1c:29:14:7b:67:4e:
                    14:8d:2a:11:5d:62:d0:01:e8:8b:fe:e3:0f:0e:bf:
                    24:db:c6:7d:94:aa:34:f6:e4:22:8e:ec:46:2f:f0:
                    6f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:25:C8:40:A5:39:70:C6:C7:0E:96:B9:AB:12:F0:6C:A1:56:C4:9A
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3131362e302f32332d3233203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cd:2c:6e:ed:4b:fe:30:19:c0:5f:fc:3b:e8:8c:51:e9:e8:3d:
         9b:96:0b:1a:cb:bd:77:41:f3:fa:d1:ce:64:63:84:3b:1c:54:
         8d:f6:7b:8c:df:f7:13:16:4d:5c:ef:eb:03:ec:66:9e:dd:04:
         3d:7b:fe:ae:2d:30:9b:89:34:f6:8a:63:1e:3b:55:5e:30:89:
         e1:2f:83:fa:d3:13:7f:68:ab:f2:3b:43:57:f7:1f:8c:fa:c1:
         be:27:99:cd:ba:2c:b7:f3:e5:5d:ca:48:d2:c9:48:67:c3:67:
         c0:46:a6:2c:ce:25:47:62:64:08:2a:11:41:71:8a:1d:fa:6a:
         47:ff:cc:bd:88:0f:a0:63:cf:9e:3d:9f:70:cc:8d:84:e6:ba:
         0e:40:8c:a7:90:56:b1:9d:c6:78:ac:93:93:81:e2:7f:e6:41:
         04:5e:de:20:7b:63:21:1a:ae:55:dd:cd:28:f6:3d:aa:0d:e2:
         17:29:e9:f3:6f:c8:1d:c8:73:26:9d:a3:b3:da:cf:5e:f4:e0:
         77:2d:db:a2:39:a9:d7:3b:cb:7e:00:d4:fe:23:4d:ae:86:fe:
         f0:a9:8e:aa:84:68:73:cb:ae:bf:01:50:c7:79:3e:bd:da:92:
         7b:cf:fb:b3:58:d8:77:23:01:8e:11:8b:0b:69:1e:bc:41:ca:
         b6:f5:ee:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org