Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3132302e302f32342d3234203d3e203533313138.roa
File:                     3137372e31322e3132302e302f32342d3234203d3e203533313138.roa (raw, json)
Hash identifier:          f4AiRZAu159etS3G5mJIxI2eNhYDBMsD5IDJL7jw2ZE=
Subject key identifier:   97:F1:B8:E8:EF:44:F8:B4:C3:71:8A:B6:A4:50:FF:B2:5C:39:26:8A
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       4FE6889E1F1815650E1804781E9F5B9C2DBF5421
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3132302e302f32342d3234203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 13:58:16 +0000
ROA not before:           Thu 27 Jul 2023 13:53:16 +0000
ROA not after:            Thu 25 Jul 2024 13:58:16 +0000
asID:                     53118
IP address blocks:        177.12.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:e6:88:9e:1f:18:15:65:0e:18:04:78:1e:9f:5b:9c:2d:bf:54:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 13:53:16 2023 GMT
            Not After : Jul 25 13:58:16 2024 GMT
        Subject: CN=97F1B8E8EF44F8B4C3718AB6A450FFB25C39268A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:19:43:c2:d6:7b:9a:c6:b4:2d:4e:45:63:e3:
                    07:b8:30:b4:7c:5b:00:e6:19:06:84:b1:63:d4:94:
                    bd:bc:44:5d:a2:71:89:7d:39:76:1c:bc:3a:0b:0c:
                    6b:14:b1:a5:d2:96:8a:6d:8f:f4:00:8a:b1:78:9a:
                    52:ca:c7:49:1f:a7:1f:0d:90:d1:6d:45:7f:a3:5b:
                    93:b1:ca:b5:f7:69:7f:d2:dc:ed:ca:8a:07:51:e6:
                    11:d8:82:d2:a5:c2:1b:89:85:c7:e0:51:8d:05:4e:
                    c6:d6:53:e6:07:73:a1:e2:a6:64:8b:97:e2:84:f6:
                    6a:f8:2a:78:e1:6c:b0:a3:c8:d6:11:56:ab:45:fc:
                    4b:00:03:5b:0d:bb:0e:34:28:25:19:66:20:c8:df:
                    2d:4a:9e:23:f6:4e:ac:df:66:89:43:b0:7d:49:37:
                    79:ec:02:17:57:11:6a:c8:af:e2:3b:8b:0c:42:9c:
                    6a:24:b1:4e:b3:4f:d9:62:47:49:a2:55:a1:15:ba:
                    10:a7:4c:a2:5d:b0:6c:c5:c6:e5:94:8c:02:31:f3:
                    4e:f3:dd:67:6b:aa:92:8f:44:89:15:9b:f6:94:95:
                    47:47:cf:87:8e:0c:ca:55:72:42:11:9f:b8:2a:86:
                    99:8b:6c:8e:28:ab:9f:3a:e4:b7:06:1c:24:e4:53:
                    da:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F1:B8:E8:EF:44:F8:B4:C3:71:8A:B6:A4:50:FF:B2:5C:39:26:8A
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3132302e302f32342d3234203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:f7:73:9f:b8:c3:13:ce:63:91:42:59:42:7b:44:48:b7:44:
         40:32:58:c1:00:e5:15:e0:ae:d3:ec:67:15:20:4e:f2:8d:13:
         8e:a3:a0:4b:bb:c6:18:62:b3:c7:79:cd:af:c9:a6:06:5f:13:
         b8:ca:04:2d:c1:a9:d2:69:75:a2:29:6a:72:9a:4a:75:fe:6c:
         21:00:26:58:4f:d4:b2:5d:b0:b7:43:58:46:96:27:7b:75:b8:
         40:ff:cf:53:db:e1:09:0d:31:b8:0f:aa:32:64:de:81:3f:03:
         ec:8f:74:35:c7:53:45:95:5f:95:b4:75:bd:5c:a2:b7:26:b0:
         62:e5:34:d2:ef:d7:e9:f1:96:eb:de:3f:1e:d2:f4:ca:fa:0d:
         67:09:7a:31:3f:ff:83:a6:39:3b:91:f6:08:bf:36:ac:b8:4e:
         b2:13:c7:72:55:e5:a4:77:1c:a5:e8:5a:b5:6a:85:aa:28:14:
         34:38:b1:a6:e5:e2:84:75:a7:2e:25:75:7d:cd:0a:41:f1:23:
         f6:5c:9f:84:c0:60:45:1a:29:5c:6e:82:ff:23:21:0d:53:fd:
         89:fb:a6:f1:23:64:c3:26:d2:4c:74:c0:bc:72:f0:45:25:70:
         6c:e8:a8:57:ab:32:db:4d:11:bd:f6:b3:43:9f:d4:19:04:42:
         d8:f8:3b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org