Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3132322e302f32332d3233203d3e203533313138.roa
File:                     3137372e31322e3132322e302f32332d3233203d3e203533313138.roa (raw, json)
Hash identifier:          6HVg/gyghpGC0Rbj9DnMnwQrxleoPUy4Tc/QhXtKxuY=
Subject key identifier:   3C:F6:CA:D5:D5:03:9F:46:44:77:F3:22:AC:8C:85:67:FE:5D:4C:30
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       08A3FC8B030F6A47BA3FF386C162432B231ACBAB
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3132322e302f32332d3233203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 13:40:29 +0000
ROA not before:           Thu 27 Jul 2023 13:35:29 +0000
ROA not after:            Thu 25 Jul 2024 13:40:29 +0000
asID:                     53118
IP address blocks:        177.12.122.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:a3:fc:8b:03:0f:6a:47:ba:3f:f3:86:c1:62:43:2b:23:1a:cb:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 13:35:29 2023 GMT
            Not After : Jul 25 13:40:29 2024 GMT
        Subject: CN=3CF6CAD5D5039F464477F322AC8C8567FE5D4C30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:23:88:6b:d8:bd:87:4c:ae:57:76:cf:7a:db:
                    1a:0e:43:f8:c9:1f:50:2b:57:43:34:db:da:21:40:
                    41:51:1b:db:c0:37:74:3d:7b:3c:85:b9:44:f1:52:
                    35:a7:97:9f:b1:75:ad:c1:9b:71:08:44:4d:5e:66:
                    4a:04:f8:22:82:05:75:98:41:2b:f5:de:98:a0:10:
                    01:58:3a:39:9f:c3:87:ad:99:45:0a:5b:c1:3b:09:
                    ad:ba:c8:a4:ce:1f:d4:fa:7c:48:ba:c4:30:12:64:
                    3e:a6:4e:48:61:fd:21:be:e0:d8:87:06:9f:66:1f:
                    3c:f8:ed:0d:63:0a:50:71:b5:d1:88:b9:03:92:9c:
                    63:b5:a6:bb:58:f0:b8:ff:c7:4e:8e:e7:0a:5e:ff:
                    84:d1:31:e7:ed:ab:1e:a9:47:65:47:70:3d:50:35:
                    8c:ab:9a:46:4e:0a:d6:a2:ea:21:dc:df:ec:b6:d2:
                    5e:ce:6a:3c:aa:63:06:67:a1:02:91:3c:ce:e8:24:
                    9e:3d:55:27:f4:58:ec:a8:75:92:a4:e6:d4:41:09:
                    37:4c:df:db:82:12:4c:7a:36:41:22:9e:57:96:4e:
                    fa:40:6d:eb:26:5d:12:2a:72:07:cc:f1:cc:1d:91:
                    f2:e5:b6:c0:e0:d6:4e:96:a1:d5:9c:4f:a1:fd:4f:
                    0b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F6:CA:D5:D5:03:9F:46:44:77:F3:22:AC:8C:85:67:FE:5D:4C:30
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3132322e302f32332d3233203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:95:52:2c:d0:5b:bc:18:61:c6:24:39:64:55:f3:25:1e:62:
         4d:1b:fe:29:41:4e:bc:59:c1:2c:9d:9a:9f:74:10:ac:0c:32:
         af:e3:82:69:a3:79:be:fd:12:48:5e:db:6e:00:27:e6:75:eb:
         ac:66:95:0c:11:7b:73:aa:b8:2c:7a:a3:d9:c1:d2:f9:ba:95:
         80:9d:b1:37:e8:18:12:8d:cf:e6:d4:33:5c:9f:13:5c:4f:6c:
         3d:8b:c5:b7:27:c0:04:e8:6f:64:42:8e:93:76:43:08:db:55:
         d8:b9:2f:e2:e6:07:1d:4c:32:f0:8b:46:6a:58:8a:f6:e1:58:
         28:91:00:96:18:9b:2e:4f:f6:57:64:cc:00:b6:3d:e0:aa:78:
         f3:51:85:f4:c8:30:2e:36:7e:05:ab:8e:fd:24:91:75:09:b9:
         3b:2b:4c:2e:f3:38:fd:19:55:85:7e:de:a4:9e:3f:9d:de:da:
         d2:6a:f4:19:83:a7:4c:f4:d5:f0:44:86:64:5a:7f:9d:9b:43:
         3e:78:ee:4d:3b:c9:64:a2:d7:e7:c1:bc:f8:3f:d9:d5:d7:18:
         c8:53:21:71:cd:cb:94:d0:51:76:6b:a3:08:dc:a1:48:01:f1:
         ee:32:23:05:d8:78:80:e0:3b:12:71:fc:54:c6:a9:05:44:f3:
         3e:20:a1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org