Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3132332e302f32342d3234203d3e203533313138.roa
File:                     3137372e31322e3132332e302f32342d3234203d3e203533313138.roa (raw, json)
Hash identifier:          3qf1b/I0npY168Hxi/92dnTJwzJVV85vXaXxbCjlvBY=
Subject key identifier:   3D:9F:B7:CF:58:E1:D7:9F:E5:58:6C:BD:D6:CB:9C:A0:5A:ED:3C:B2
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       1FA6BBCAEBD985C68D72D0CA92A22EFB6902BE45
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3132332e302f32342d3234203d3e203533313138.roa
Signing time:             Tue 08 Aug 2023 20:00:01 +0000
ROA not before:           Tue 08 Aug 2023 19:55:01 +0000
ROA not after:            Tue 06 Aug 2024 20:00:01 +0000
asID:                     53118
IP address blocks:        177.12.123.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a6:bb:ca:eb:d9:85:c6:8d:72:d0:ca:92:a2:2e:fb:69:02:be:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Aug  8 19:55:01 2023 GMT
            Not After : Aug  6 20:00:01 2024 GMT
        Subject: CN=3D9FB7CF58E1D79FE5586CBDD6CB9CA05AED3CB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:3a:60:46:d8:ad:cb:56:9d:b9:b6:43:fa:71:
                    c4:6b:d9:27:cd:fb:f0:a0:1d:4d:4d:bb:dc:d6:c4:
                    6d:9e:5c:4f:73:1f:e4:fe:26:98:06:be:60:26:42:
                    55:af:36:6c:45:56:c9:66:4b:1b:41:83:61:35:22:
                    9a:c3:bc:00:1a:b1:2d:e1:bb:bb:31:7f:12:e7:d5:
                    7a:92:16:fe:aa:90:6d:92:b3:77:b9:4c:aa:5e:54:
                    f3:a4:ac:1c:40:3c:80:43:ea:b0:a4:31:86:f4:fd:
                    fd:7e:9b:49:df:2c:9b:03:d5:b9:73:88:03:3e:05:
                    e2:2a:af:97:a4:b2:fc:1d:7e:7e:1c:be:b7:9e:32:
                    9c:23:e9:11:ef:3c:cb:6f:c4:86:9c:bd:85:c4:8b:
                    c5:41:dc:f3:23:dd:97:58:50:9e:9b:9d:46:e3:7b:
                    a5:46:82:b6:e5:bb:20:b0:b0:83:f4:29:39:c5:27:
                    a5:c3:98:a1:f2:db:bb:c8:5b:23:75:28:c2:df:cd:
                    90:dc:bf:75:ae:a7:52:06:c2:1b:82:0b:aa:67:9e:
                    1e:60:4b:68:84:a2:37:2d:10:da:45:bd:f7:31:64:
                    22:a9:b9:ea:ac:e4:d3:06:bc:24:72:1e:9f:b2:f8:
                    43:fc:8c:98:1d:50:c1:6a:33:2e:6f:d7:33:11:22:
                    ca:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:9F:B7:CF:58:E1:D7:9F:E5:58:6C:BD:D6:CB:9C:A0:5A:ED:3C:B2
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3132332e302f32342d3234203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:ff:11:31:72:6a:05:3a:69:54:ec:19:67:a5:f5:14:ec:01:
         35:78:22:b9:fd:bb:06:73:e7:54:73:5a:47:fb:7d:b6:75:8f:
         55:68:9f:3a:d6:7f:be:7c:06:c1:5b:e4:79:7d:8f:76:bc:ab:
         16:2e:8e:ed:59:21:48:0b:d6:ee:f4:70:6a:e1:bb:cf:49:e9:
         d3:b4:f4:7b:4e:35:f2:fd:69:85:8c:27:3b:d3:b4:7d:a2:bc:
         39:7d:63:c6:ca:21:82:5f:65:ec:05:61:24:61:46:5e:1c:8b:
         67:b1:fb:ff:87:57:d6:c9:6e:1d:25:5e:97:7f:ee:1d:77:cc:
         5c:1a:58:b2:c0:ea:e0:1b:5c:45:be:97:bd:37:06:9c:c5:d7:
         7b:98:b6:22:58:50:0f:2b:ed:89:db:4f:6d:10:05:87:0e:04:
         3b:20:e2:43:57:80:9e:83:08:4b:eb:6a:0b:42:5a:99:46:f9:
         40:19:a3:c0:3b:53:8c:41:72:fd:fc:bf:5b:e9:9f:d0:50:76:
         4c:a9:65:46:65:cb:8b:86:16:2a:29:d0:83:09:13:70:02:d9:
         52:1e:8e:c8:85:7c:c5:47:81:14:d3:1d:0c:30:5f:3a:3b:c6:
         bc:78:3e:5a:a7:51:fa:c9:98:ee:3d:2a:84:1e:c5:b1:10:0e:
         9d:27:5e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org