Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3132302e302f32332d3233203d3e203533313138.roa
File:                     3137372e31322e3132302e302f32332d3233203d3e203533313138.roa (raw, json)
Hash identifier:          xX9X2Jq4DJLSgW9tRDwPr7t61nsjsB/Y0HkY1JdcYY8=
Subject key identifier:   5F:68:7A:1E:06:BC:34:45:8E:80:2C:73:C1:33:AB:BF:6C:49:90:BE
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       109FB045413C2E2629339EEEF460D72DEB0A6D79
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3132302e302f32332d3233203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 13:40:18 +0000
ROA not before:           Thu 27 Jul 2023 13:35:18 +0000
ROA not after:            Thu 25 Jul 2024 13:40:18 +0000
asID:                     53118
IP address blocks:        177.12.120.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:9f:b0:45:41:3c:2e:26:29:33:9e:ee:f4:60:d7:2d:eb:0a:6d:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 13:35:18 2023 GMT
            Not After : Jul 25 13:40:18 2024 GMT
        Subject: CN=5F687A1E06BC34458E802C73C133ABBF6C4990BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c5:cf:db:40:1d:c5:46:6c:06:1c:f9:ea:b6:
                    eb:c7:9c:03:e8:a4:d5:0c:f7:4c:39:a4:ac:c8:54:
                    e1:05:17:fe:72:8b:26:54:c1:38:7e:46:fe:78:70:
                    88:a5:72:47:1e:be:82:67:08:7d:fc:33:7d:b6:d3:
                    f9:92:16:d3:e0:64:10:63:4d:c8:43:de:9b:96:31:
                    46:83:28:c2:a4:a4:ef:69:2d:0d:2c:19:fb:6e:46:
                    3d:f3:00:b7:35:e2:8b:ff:c9:e8:18:d4:cf:ff:e9:
                    4f:76:c3:0d:27:4d:0b:2e:f7:ee:3e:2d:0c:62:40:
                    24:99:bd:77:20:e8:60:bb:61:c5:58:4f:63:24:3c:
                    c3:23:b5:3c:ee:3c:9d:7d:52:df:8f:53:35:d0:2b:
                    58:0c:12:25:e8:56:a4:60:5b:fe:e2:82:3d:4b:c6:
                    49:1f:22:b3:83:10:45:2a:6c:bc:b0:f3:3b:1f:9a:
                    7b:aa:67:9b:2a:e4:7b:87:3d:ee:43:ce:e9:e6:ff:
                    00:1a:1a:49:45:7f:47:1b:ff:10:dc:bd:29:4c:79:
                    b1:e9:e6:21:ae:de:29:3b:42:24:a4:af:6f:28:6a:
                    b2:57:47:a0:f0:0d:1c:48:10:63:96:b8:1e:ec:c4:
                    b4:d8:1e:46:8f:a8:c2:84:a8:fa:4e:f9:12:56:80:
                    d8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:68:7A:1E:06:BC:34:45:8E:80:2C:73:C1:33:AB:BF:6C:49:90:BE
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3132302e302f32332d3233203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:f7:e0:06:0c:af:bd:fe:ca:5f:0f:45:2b:b4:8d:46:51:bc:
         1e:83:de:a0:99:fd:db:ea:77:73:70:d8:b4:4f:f7:33:2d:7d:
         a6:ad:e4:86:f4:85:11:ae:b7:fd:c1:d7:78:ad:c7:73:ad:49:
         b3:5a:fa:20:df:73:e0:b3:93:87:34:60:f3:3c:ae:1e:02:66:
         23:6b:52:fb:a2:a6:5e:21:d2:08:b8:33:a1:6d:58:77:21:dd:
         f7:03:d3:bd:21:e2:80:0b:bd:a9:1d:34:b7:9a:b8:04:d7:fc:
         19:3f:3e:c7:5b:70:8f:5a:3c:bd:ef:7e:57:4e:b7:88:b1:e0:
         f0:ea:af:81:1c:4d:24:a2:fd:6b:c5:d2:b8:85:65:87:f0:66:
         5e:13:b9:72:ba:23:0c:b4:e5:57:5d:c9:95:5c:fc:d4:27:8d:
         35:f7:6b:fd:f2:d1:7a:e7:ad:71:69:10:e8:0c:39:3f:b6:d2:
         20:d6:af:66:41:20:4f:b3:41:cd:4c:85:44:4d:77:df:a6:33:
         b2:e9:ab:d2:59:a2:b3:a8:d7:50:ab:a0:94:f7:93:d8:00:2b:
         dd:77:ac:eb:f1:19:63:e2:33:a5:b6:1c:16:71:f5:95:fe:4c:
         d7:61:df:08:44:a7:f1:d6:85:05:38:2f:b6:23:d2:c6:6a:be:
         f6:87:d3:a1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEJ+wRUE8LiYpM57u9GDXLesKbXkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTVFRDFEQUMxNjZGNzFEQzQ2Rjk3QzYxNUU5Mjg3RDdE
NkY5RUE5MTAeFw0yMzA3MjcxMzM1MThaFw0yNDA3MjUxMzQwMThaMDMxMTAvBgNV
BAMTKDVGNjg3QTFFMDZCQzM0NDU4RTgwMkM3M0MxMzNBQkJGNkM0OTkwQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUxc/bQB3FRmwGHPnqtuvHnAPo
pNUM90w5pKzIVOEFF/5yiyZUwTh+Rv54cIilckcevoJnCH38M3220/mSFtPgZBBj
TchD3puWMUaDKMKkpO9pLQ0sGftuRj3zALc14ov/yegY1M//6U92ww0nTQsu9+4+
LQxiQCSZvXcg6GC7YcVYT2MkPMMjtTzuPJ19Ut+PUzXQK1gMEiXoVqRgW/7igj1L
xkkfIrODEEUqbLyw8zsfmnuqZ5sq5HuHPe5Dzunm/wAaGklFf0cb/xDcvSlMebHp
5iGu3ik7QiSkr28oarJXR6DwDRxIEGOWuB7sxLTYHkaPqMKEqPpO+RJWgNi7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUX2h6Hga8NEWOgCxzwTOrv2xJkL4wHwYDVR0j
BBgwFoAUle0drBZvcdxG+XxhXpKH19b56pEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVRHMXNMOXJEWDZoalhSMzdheHNYblNockVRaHVqWmdWd0JTSmFpYUpQ
Y2ovMC85NUVEMURBQzE2NkY3MURDNDZGOTdDNjE1RTkyODdEN0Q2RjlFQTkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk1RUQxREFDMTY2RjcxREM0
NkY5N0M2MTVFOTI4N0Q3RDZGOUVBOTEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FURzFzTDlyRFg2aGpYUjM3YXhzWG5TaHJFUWh1alpnVndCU0phaWFKUGNqLzAv
MzEzNzM3MmUzMTMyMmUzMTMyMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMz
MzEzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsQx4MA0GCSqGSIb3DQEBCwUAA4IBAQC19+AGDK+9
/spfD0UrtI1GUbweg96gmf3b6ndzcNi0T/czLX2mreSG9IURrrf9wdd4rcdzrUmz
Wvog33Pgs5OHNGDzPK4eAmYja1L7oqZeIdIIuDOhbVh3Id33A9O9IeKAC72pHTS3
mrgE1/wZPz7HW3CPWjy9735XTreIseDw6q+BHE0kov1rxdK4hWWH8GZeE7lyuiMM
tOVXXcmVXPzUJ40192v98tF6561xaRDoDDk/ttIg1q9mQSBPs0HNTIVETXffpjOy
6avSWaKzqNdQq6CU95PYACvdd6zr8Rlj4jOlthwWcfWV/kzXYd8IRKfx1oUFOC+2
I9LGar72h9Oh
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org