Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3132322e302f32342d3234203d3e203533313138.roa
File:                     3137372e31322e3132322e302f32342d3234203d3e203533313138.roa (raw, json)
Hash identifier:          Q6YI9dBaRw3gjibtgHQ2w0HwlZzh0q1AfM6NKsnzmOg=
Subject key identifier:   EE:37:F7:34:9E:ED:54:42:11:5D:66:F8:DC:A3:35:F5:91:87:A5:EC
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       4BD0792156A456F4F2EAAA30F6D1C1D9A7D87D7B
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3132322e302f32342d3234203d3e203533313138.roa
Signing time:             Tue 08 Aug 2023 20:00:02 +0000
ROA not before:           Tue 08 Aug 2023 19:55:02 +0000
ROA not after:            Tue 06 Aug 2024 20:00:02 +0000
asID:                     53118
IP address blocks:        177.12.122.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:d0:79:21:56:a4:56:f4:f2:ea:aa:30:f6:d1:c1:d9:a7:d8:7d:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Aug  8 19:55:02 2023 GMT
            Not After : Aug  6 20:00:02 2024 GMT
        Subject: CN=EE37F7349EED5442115D66F8DCA335F59187A5EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:28:6f:78:67:10:40:28:58:f4:85:1a:b9:b1:
                    af:d7:48:fe:79:1c:a3:94:d3:1b:5a:e8:5b:53:d5:
                    a4:07:12:4c:bb:34:1d:e6:0b:a6:e2:9e:a7:3c:0b:
                    da:8d:d7:64:59:14:29:a8:64:d0:57:fc:6b:1e:7f:
                    45:2e:37:90:5e:8a:4a:7b:fa:6c:13:03:20:c2:93:
                    17:70:f0:56:8b:e5:95:08:74:16:b6:67:b5:6a:19:
                    28:70:f1:71:cf:35:36:e0:71:61:3c:8b:8b:29:ff:
                    a1:79:f4:98:eb:04:76:38:a8:0e:f0:e2:d7:39:50:
                    e3:87:ad:03:bb:85:cd:dc:de:00:f0:66:a4:e8:3d:
                    2c:af:2b:63:21:7c:b8:16:cb:e9:99:12:33:1e:78:
                    bf:c5:67:fa:34:68:85:17:3c:9c:23:48:e7:b0:45:
                    80:8a:9e:b7:1a:53:12:43:2d:94:4d:21:be:7a:d2:
                    04:b4:6a:3a:d9:1e:7f:f8:61:16:99:e6:dd:30:27:
                    9a:08:98:fc:b7:6b:cd:bb:7c:9b:ba:67:58:ca:fa:
                    26:d1:1d:c5:41:62:87:fb:c7:e1:89:28:7f:cf:b6:
                    3c:58:d6:75:1f:29:8f:a3:03:70:10:93:4c:68:9c:
                    be:51:ef:49:92:2d:82:2b:b5:8d:c7:7a:9c:15:ef:
                    5a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:37:F7:34:9E:ED:54:42:11:5D:66:F8:DC:A3:35:F5:91:87:A5:EC
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3132322e302f32342d3234203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:a8:ac:26:14:30:6a:64:87:5a:5c:9a:ca:2c:da:75:ee:24:
         9a:d9:0f:73:00:ae:10:a7:31:ea:ed:4b:fc:53:47:c2:e7:3f:
         4e:09:db:2e:28:a0:39:08:6d:d1:57:b5:ae:99:0a:31:cf:fe:
         fe:84:eb:d6:45:75:2a:db:a7:8e:8d:94:f8:fe:7d:fa:09:c8:
         29:34:49:f4:ac:98:90:e6:b8:a1:d6:a4:c5:38:28:32:28:e2:
         b6:8a:f5:60:c8:38:b1:bf:90:dd:22:fd:55:0e:08:79:24:8b:
         de:31:91:05:0c:61:30:fc:d5:09:01:59:37:0c:89:69:c0:c2:
         1e:57:90:d8:7b:02:f6:ab:fe:5c:42:12:f2:49:e2:5b:4e:da:
         0b:d9:f0:f7:df:49:82:d1:1f:80:7e:44:6f:8c:f5:1a:b4:49:
         29:79:73:c1:cb:64:84:a1:da:20:b0:05:7a:2b:e4:18:ed:41:
         6d:4a:19:cc:3c:9c:b8:6b:ef:e7:35:83:fe:0c:45:4a:40:1b:
         ae:91:a3:36:a7:c5:94:f4:74:57:76:47:af:fa:bb:f9:7f:f9:
         2c:15:32:6d:5c:19:43:1f:d3:71:8a:92:40:18:e1:bc:e1:b7:
         fb:7f:0a:7f:9a:45:a6:2f:90:4c:b6:cd:dc:66:27:ed:45:18:
         e6:57:c7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org