Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3132302e302f32312d3231203d3e203533313138.roa
File:                     3137372e31322e3132302e302f32312d3231203d3e203533313138.roa (raw, json)
Hash identifier:          xNDNUedxx2yjjunZl4iLqSbueD6vXZkelfGNOXJLGkc=
Subject key identifier:   8C:2E:B2:2E:EE:06:84:0A:EC:02:BC:E9:67:AE:76:E4:C2:26:8E:89
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       182991C015A4BBD816F820A1B465F2ECD508E1D1
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3132302e302f32312d3231203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 13:15:29 +0000
ROA not before:           Thu 27 Jul 2023 13:10:29 +0000
ROA not after:            Thu 25 Jul 2024 13:15:29 +0000
asID:                     53118
IP address blocks:        177.12.120.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:29:91:c0:15:a4:bb:d8:16:f8:20:a1:b4:65:f2:ec:d5:08:e1:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 13:10:29 2023 GMT
            Not After : Jul 25 13:15:29 2024 GMT
        Subject: CN=8C2EB22EEE06840AEC02BCE967AE76E4C2268E89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:00:c0:d7:6b:3d:31:c2:36:95:5a:0f:50:a4:
                    24:ea:8e:8f:bf:2c:aa:bb:70:cd:69:cc:81:27:e6:
                    ee:df:14:d2:68:ed:8f:ee:eb:12:01:9f:76:6c:75:
                    63:dd:b4:e8:31:79:75:d3:ab:4e:7c:18:d0:67:6a:
                    d4:8b:f5:74:72:10:f0:e6:65:17:4d:3f:6c:a2:fb:
                    dc:aa:77:18:16:45:5f:45:e3:32:aa:47:72:43:7c:
                    02:3e:98:e7:81:f8:40:0e:1b:4b:c7:a8:ad:6c:77:
                    0a:27:77:24:e8:1c:63:30:66:f1:8b:f3:7e:08:e4:
                    c7:a5:91:7c:83:c9:3a:ab:aa:0c:f6:1a:b1:74:a7:
                    68:24:4a:c2:ad:41:d4:55:a1:8c:ca:59:0a:45:ea:
                    c2:62:fc:d2:a4:97:32:c8:14:d9:c7:98:25:68:36:
                    a4:3d:9a:9e:08:21:63:a1:79:fa:61:d3:af:e8:1e:
                    d3:f0:1b:3a:8e:cc:b5:21:e0:02:03:ec:c1:d6:11:
                    68:27:34:fc:a1:1e:b8:d4:9d:35:21:31:ed:84:92:
                    59:59:61:a8:c1:d1:5f:58:3d:61:85:80:a5:38:3f:
                    27:ba:3a:d4:dc:f9:1f:a6:8e:59:11:51:c7:d0:ad:
                    b6:6b:a8:75:00:b0:7c:59:f4:99:77:1d:49:e8:fb:
                    55:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2E:B2:2E:EE:06:84:0A:EC:02:BC:E9:67:AE:76:E4:C2:26:8E:89
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3132302e302f32312d3231203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         04:3f:25:5c:ee:af:75:0f:ad:51:a8:8a:56:58:ba:b5:65:24:
         a7:b5:b9:4b:86:bf:04:5a:f7:99:c3:00:33:51:80:3e:bc:4a:
         2d:17:70:a6:b7:93:48:0b:9b:4d:f3:22:de:59:20:29:b9:d8:
         a2:f7:e5:47:78:8e:e0:63:c5:9e:b3:af:bf:61:59:09:06:09:
         48:26:82:17:44:80:3a:16:e8:86:31:7a:8b:0c:0a:af:ff:54:
         fe:c2:3b:db:10:28:f7:6e:fc:6a:7d:4f:ed:48:82:9a:97:03:
         30:f1:6b:e6:c9:14:00:21:80:05:f9:52:dc:df:b8:74:b1:ca:
         5e:a6:81:4a:c8:c2:4c:49:f2:05:6b:c1:4d:3e:9d:95:e6:e5:
         f2:1e:67:6d:60:5f:9f:56:33:f5:b6:8c:d1:71:04:2b:4a:96:
         2c:62:da:2a:c6:d9:df:29:50:c5:ef:ca:28:95:56:3c:a2:9c:
         48:a4:c0:ff:a2:74:bf:7d:ee:67:fe:f3:18:30:d4:94:c0:a2:
         f5:ee:8e:cd:4e:7a:3d:86:9e:e4:6f:44:3f:76:3e:0d:8a:45:
         7e:0d:ee:9a:69:41:c5:81:3c:f6:2a:c5:7d:14:7c:68:73:9e:
         4e:18:bd:5a:2d:e7:b5:1e:4f:a1:d4:54:18:b0:50:ae:1d:d1:
         8a:d8:01:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org