Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3131372e302f32342d3234203d3e203533313138.roa
File:                     3137372e31322e3131372e302f32342d3234203d3e203533313138.roa (raw, json)
Hash identifier:          OTr6AkR/orhp1+M4ctbZ0jau8HpLw5r8AyE/a0fj0Ds=
Subject key identifier:   F7:70:19:78:29:8F:7C:E5:BC:B8:B8:67:A0:A7:DC:A9:E8:45:A0:CE
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       7BE9FE6F965A5641E1A82F80C826388F908A76F4
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3131372e302f32342d3234203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 13:46:58 +0000
ROA not before:           Thu 27 Jul 2023 13:41:58 +0000
ROA not after:            Thu 25 Jul 2024 13:46:58 +0000
asID:                     53118
IP address blocks:        177.12.117.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e9:fe:6f:96:5a:56:41:e1:a8:2f:80:c8:26:38:8f:90:8a:76:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 13:41:58 2023 GMT
            Not After : Jul 25 13:46:58 2024 GMT
        Subject: CN=F7701978298F7CE5BCB8B867A0A7DCA9E845A0CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a2:1a:cd:a8:25:60:3a:54:0a:68:3f:85:24:
                    32:a2:4d:d7:5b:eb:dd:08:b9:90:dc:1a:16:53:75:
                    d8:14:8e:7c:1f:76:21:4a:f8:e2:c4:82:96:ff:e8:
                    02:8f:7d:88:52:e9:d0:f3:cd:d2:9c:11:d6:ed:e1:
                    01:b6:b7:8e:79:5c:95:86:b3:a2:47:97:9e:4e:1e:
                    c9:4f:13:a9:78:52:80:15:2a:cc:cf:7b:87:6c:d3:
                    fb:ff:bf:78:d3:5d:1a:78:71:bd:73:4d:51:ee:14:
                    00:a2:94:2c:cc:b9:ab:9f:de:5b:8f:fb:31:02:7d:
                    92:40:19:ea:c0:2d:e6:e6:15:27:8c:3a:80:fa:43:
                    d1:12:57:cd:07:7c:dc:09:62:e3:43:dc:e7:de:d3:
                    ac:1f:c3:b9:3c:4b:ab:da:e4:4d:7a:0d:80:2b:13:
                    3c:48:30:d4:a5:f9:7b:46:fb:59:11:4b:6b:a8:2a:
                    5b:30:cd:1a:ae:9f:73:f3:56:3a:fa:c2:cb:91:54:
                    c2:25:55:2d:4a:a1:c1:31:49:51:e5:aa:44:5f:22:
                    90:5e:59:84:ea:8a:6e:c8:de:a3:af:5f:df:e7:97:
                    af:38:b2:a4:1b:75:41:9b:47:de:69:c3:5f:d1:a5:
                    7a:9c:ac:c9:6e:80:c1:ca:52:3c:1a:50:55:8c:c9:
                    f6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:70:19:78:29:8F:7C:E5:BC:B8:B8:67:A0:A7:DC:A9:E8:45:A0:CE
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3131372e302f32342d3234203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:42:58:ef:a0:0a:c6:d4:14:c4:65:72:6c:d7:09:4c:55:fb:
         d9:e7:92:6d:1f:e3:91:f8:ba:b9:d2:0c:a5:0e:fe:e3:e6:3c:
         cf:29:3a:4b:11:66:eb:7e:59:af:72:c7:b6:02:af:99:9c:0f:
         8d:ef:a1:13:0d:b2:65:81:59:25:ae:6f:74:d4:54:1b:38:ca:
         2d:26:93:3b:ca:de:52:83:20:80:68:9f:2f:4a:fb:14:86:a7:
         a6:f9:41:26:36:da:bb:ed:8a:41:28:1d:77:3d:22:a9:c5:69:
         f1:9d:96:9a:dc:42:55:03:53:67:ab:29:44:95:0f:cf:f6:7e:
         22:a1:6b:43:be:f1:02:4f:eb:0b:93:16:d1:89:22:03:0d:40:
         5d:a7:37:e9:85:7e:ba:3d:74:4e:4e:5a:81:56:0d:98:f1:24:
         0a:c7:a1:bd:9b:94:84:c5:52:ba:03:d1:fe:9b:0a:0d:9f:81:
         52:87:fb:d5:8c:ca:ae:0b:01:9b:54:8b:1d:9a:36:72:03:7c:
         f0:7a:0c:95:9b:c4:09:7e:35:d6:1e:9f:32:99:b2:c1:66:d3:
         dc:80:cc:e9:f0:6d:8d:12:fb:93:52:fb:71:6a:44:58:e8:53:
         f1:7f:81:83:10:d3:b8:78:63:59:0d:8b:42:6d:78:6c:19:28:
         54:55:c4:8f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUe+n+b5ZaVkHhqC+AyCY4j5CKdvQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTVFRDFEQUMxNjZGNzFEQzQ2Rjk3QzYxNUU5Mjg3RDdE
NkY5RUE5MTAeFw0yMzA3MjcxMzQxNThaFw0yNDA3MjUxMzQ2NThaMDMxMTAvBgNV
BAMTKEY3NzAxOTc4Mjk4RjdDRTVCQ0I4Qjg2N0EwQTdEQ0E5RTg0NUEwQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdohrNqCVgOlQKaD+FJDKiTddb
690IuZDcGhZTddgUjnwfdiFK+OLEgpb/6AKPfYhS6dDzzdKcEdbt4QG2t455XJWG
s6JHl55OHslPE6l4UoAVKszPe4ds0/v/v3jTXRp4cb1zTVHuFACilCzMuauf3luP
+zECfZJAGerALebmFSeMOoD6Q9ESV80HfNwJYuND3Ofe06wfw7k8S6va5E16DYAr
EzxIMNSl+XtG+1kRS2uoKlswzRqun3PzVjr6wsuRVMIlVS1KocExSVHlqkRfIpBe
WYTqim7I3qOvX9/nl684sqQbdUGbR95pw1/RpXqcrMlugMHKUjwaUFWMyfbLAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU93AZeCmPfOW8uLhnoKfcqehFoM4wHwYDVR0j
BBgwFoAUle0drBZvcdxG+XxhXpKH19b56pEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVRHMXNMOXJEWDZoalhSMzdheHNYblNockVRaHVqWmdWd0JTSmFpYUpQ
Y2ovMC85NUVEMURBQzE2NkY3MURDNDZGOTdDNjE1RTkyODdEN0Q2RjlFQTkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk1RUQxREFDMTY2RjcxREM0
NkY5N0M2MTVFOTI4N0Q3RDZGOUVBOTEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FURzFzTDlyRFg2aGpYUjM3YXhzWG5TaHJFUWh1alpnVndCU0phaWFKUGNqLzAv
MzEzNzM3MmUzMTMyMmUzMTMxMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMz
MzEzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsQx1MA0GCSqGSIb3DQEBCwUAA4IBAQAMQljvoArG
1BTEZXJs1wlMVfvZ55JtH+OR+Lq50gylDv7j5jzPKTpLEWbrflmvcse2Aq+ZnA+N
76ETDbJlgVklrm901FQbOMotJpM7yt5SgyCAaJ8vSvsUhqem+UEmNtq77YpBKB13
PSKpxWnxnZaa3EJVA1NnqylElQ/P9n4ioWtDvvECT+sLkxbRiSIDDUBdpzfphX66
PXROTlqBVg2Y8SQKx6G9m5SExVK6A9H+mwoNn4FSh/vVjMquCwGbVIsdmjZyA3zw
egyVm8QJfjXWHp8ymbLBZtPcgMzp8G2NEvuTUvtxakRY6FPxf4GDENO4eGNZDYtC
bXhsGShUVcSP
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org