Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3132312e302f32342d3234203d3e203533313138.roa
File:                     3137372e31322e3132312e302f32342d3234203d3e203533313138.roa (raw, json)
Hash identifier:          HUwJa2SVNDTlN6tpLi3s+XwIgNX8Bbk4HPdbpXFVyvo=
Subject key identifier:   D6:E8:C9:BB:7D:7E:76:59:8F:13:01:7D:4C:0D:3B:19:3C:86:9E:A5
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       4495D782E5573566E51E0C5B3B7018BE494C9C92
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3132312e302f32342d3234203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 13:58:25 +0000
ROA not before:           Thu 27 Jul 2023 13:53:25 +0000
ROA not after:            Thu 25 Jul 2024 13:58:25 +0000
asID:                     53118
IP address blocks:        177.12.121.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:95:d7:82:e5:57:35:66:e5:1e:0c:5b:3b:70:18:be:49:4c:9c:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 13:53:25 2023 GMT
            Not After : Jul 25 13:58:25 2024 GMT
        Subject: CN=D6E8C9BB7D7E76598F13017D4C0D3B193C869EA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ca:6c:18:a0:f8:6a:df:7b:e8:bf:68:0b:cd:
                    77:62:72:4c:83:61:a5:4b:0a:39:bc:92:46:b0:3f:
                    aa:02:86:8d:b7:49:b2:f9:ed:f7:e7:ed:4b:f0:69:
                    cc:52:47:bc:4b:79:53:3c:d2:49:17:ed:af:29:04:
                    e7:35:a9:2a:d4:7f:0f:a0:8f:a7:ef:13:1a:95:14:
                    24:aa:7d:b3:3e:68:73:15:a2:50:2f:22:69:94:f1:
                    ae:4c:a9:4d:03:fa:ef:89:e6:b3:fa:99:a0:57:40:
                    c5:31:7e:3e:5f:04:d8:28:60:5c:75:df:4f:48:26:
                    2f:78:20:83:5e:3a:ca:34:21:1d:2a:ee:3a:d5:be:
                    b4:01:34:c9:21:eb:ce:9d:8c:31:2d:81:0a:f5:fc:
                    60:b0:55:46:0e:fe:a9:d2:6d:10:b7:50:a8:ed:60:
                    7a:75:ea:ac:6a:f8:1c:23:fc:03:00:ef:a9:33:7f:
                    ba:74:e2:00:3e:90:6b:54:06:f4:95:19:43:f4:16:
                    7c:a2:f4:81:cf:43:8f:b2:8d:ce:7f:43:b3:80:ad:
                    de:cb:a1:aa:37:e0:20:48:a2:c5:8c:61:76:b6:78:
                    ad:da:bf:9a:7a:25:95:84:6e:76:6e:97:9d:0b:59:
                    2a:29:3c:f5:ca:c3:14:43:70:81:62:94:ae:10:72:
                    4f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E8:C9:BB:7D:7E:76:59:8F:13:01:7D:4C:0D:3B:19:3C:86:9E:A5
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3132312e302f32342d3234203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:84:cd:b1:b4:ae:a8:7a:8d:98:e6:05:45:7b:07:ec:34:1c:
         3a:33:d5:08:6b:0a:2b:89:1e:2f:fd:1f:15:08:bf:b3:94:a9:
         d1:00:03:54:c6:0a:9e:44:43:f8:53:7b:73:7f:8b:ba:18:37:
         3b:d2:0b:86:d3:40:68:b9:c4:9b:60:df:1c:f9:eb:e6:5d:a5:
         fa:83:65:8a:d1:b4:f4:b9:c7:22:c9:b8:ff:79:3c:a7:c6:13:
         14:89:2d:83:3d:99:51:f2:07:24:b4:ea:5e:7c:e9:39:ea:b4:
         8c:76:57:d1:66:e8:87:24:51:46:a3:5f:c3:ff:6e:fc:2e:6e:
         36:2b:8a:4e:b5:3a:ec:b9:be:e6:7a:4b:f4:ef:4f:b3:4a:76:
         50:a2:0e:bc:ff:da:47:24:e6:60:f5:ea:9c:ba:00:7e:ab:28:
         76:10:87:f4:45:32:bb:a9:69:ea:31:6f:22:02:d0:c8:66:99:
         c3:b8:8b:76:b7:49:6d:0b:ff:32:ee:29:60:6d:cc:52:b5:04:
         6b:95:99:24:e3:9d:40:4d:7f:54:38:50:8c:d5:53:a6:17:a2:
         54:24:c4:15:0f:07:34:e0:99:b0:96:89:b1:1b:47:1f:0b:ad:
         2c:07:a3:a5:ae:3a:d7:7e:0a:cd:c1:b4:4b:a4:0a:94:e4:83:
         c1:af:e9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org