Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3131392e302f32342d3234203d3e203533313138.roa
File:                     3137372e31322e3131392e302f32342d3234203d3e203533313138.roa (raw, json)
Hash identifier:          EEXZ5dfFxY3mIvqSwYv74/ZyC0kg6uDxPZ2N2mpOlsk=
Subject key identifier:   00:B5:40:65:13:94:04:A4:9D:CA:39:ED:21:AA:22:AB:3E:0E:CC:8E
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       084946553F106B1291757B754F3DADB17D60CDA4
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3131392e302f32342d3234203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 13:47:52 +0000
ROA not before:           Thu 27 Jul 2023 13:42:52 +0000
ROA not after:            Thu 25 Jul 2024 13:47:52 +0000
asID:                     53118
IP address blocks:        177.12.119.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:49:46:55:3f:10:6b:12:91:75:7b:75:4f:3d:ad:b1:7d:60:cd:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 13:42:52 2023 GMT
            Not After : Jul 25 13:47:52 2024 GMT
        Subject: CN=00B54065139404A49DCA39ED21AA22AB3E0ECC8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:42:8a:03:78:45:ba:5b:22:82:5e:c3:18:4f:
                    5d:d3:7d:be:b1:fd:9c:da:11:fe:87:01:81:1b:a9:
                    61:eb:bd:73:65:d1:5d:b6:84:ef:af:d0:b3:5d:c8:
                    e1:4c:3e:3e:9a:2c:ab:a5:65:b1:14:85:0c:bc:2a:
                    8b:3e:32:22:fb:2c:81:4d:bf:b0:d8:78:2a:92:23:
                    f1:d8:89:bd:dc:63:6f:36:91:c8:87:2f:63:0e:95:
                    2a:f0:08:bc:0f:3b:84:4d:3f:8c:b8:fb:16:34:c6:
                    cc:61:b6:dd:7a:f8:9a:00:dd:5e:64:b5:89:0d:5a:
                    8e:9f:37:20:78:bc:0c:d0:5b:de:a2:b2:2b:b2:b0:
                    98:92:6c:b6:55:b1:8f:39:8a:05:d5:ec:9e:39:7e:
                    5a:65:60:8f:89:fd:3c:70:b6:2d:d4:72:7d:a9:c3:
                    af:06:3a:4c:96:89:02:fc:bf:ff:42:09:78:3e:01:
                    c7:84:31:87:09:66:65:75:8c:a9:27:e7:ae:b7:7a:
                    84:cb:44:a2:3a:d9:2c:a4:26:c5:6d:8b:44:44:fb:
                    65:d8:dc:92:59:bc:84:37:ac:3b:90:a0:6b:f1:48:
                    55:2f:cb:64:43:15:14:79:a9:38:89:c5:a9:c9:56:
                    c4:35:c8:33:58:b4:7e:6f:27:91:eb:94:d3:68:bd:
                    87:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B5:40:65:13:94:04:A4:9D:CA:39:ED:21:AA:22:AB:3E:0E:CC:8E
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3131392e302f32342d3234203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:4a:3b:50:b1:fb:68:6a:d9:e6:0b:2c:d0:aa:f0:e1:52:7a:
         9f:96:2a:53:ea:b9:b3:f7:47:51:3a:5d:45:d2:da:4b:92:d0:
         56:83:de:84:63:4f:95:a0:2a:af:3c:d2:5f:db:10:40:90:ce:
         73:6a:7b:7b:e4:87:5f:34:58:a7:87:b0:f3:f8:b2:0e:1b:fe:
         f7:73:41:4e:7e:92:a4:30:ef:91:90:f3:a4:b4:27:e0:72:50:
         08:71:df:8d:6d:51:3b:c2:f0:64:04:ab:4a:b0:e6:be:09:92:
         89:20:ed:2d:16:22:06:c5:d1:e9:51:52:85:81:e5:34:ae:63:
         0e:cc:cb:76:03:c8:95:50:3c:88:88:e0:02:ef:a9:63:0e:08:
         b9:00:70:10:4c:66:a2:ba:e1:fa:b0:59:29:1a:e4:a4:a8:d0:
         e4:04:01:a0:dd:93:73:b4:95:86:da:b5:a4:db:10:fa:29:5c:
         de:4a:bc:a9:bc:fe:eb:43:e6:91:04:58:77:92:a0:83:61:1b:
         d4:e4:19:84:dd:e1:5d:30:46:48:28:70:a1:84:6b:4b:aa:5e:
         c0:25:c8:d1:25:4a:2d:0f:95:a0:ae:7f:78:1d:45:2b:33:e3:
         6e:cd:e8:5c:ea:7f:d7:4b:39:6a:36:46:0f:62:3b:28:62:95:
         50:f8:9e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org