Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3132342e302f32322d3232203d3e203533313138.roa
File:                     3137372e31322e3132342e302f32322d3232203d3e203533313138.roa (raw, json)
Hash identifier:          q+LSLDI6qZ39MfxehJB+FDj08RRlQy5qeBmcU9mK/Ag=
Subject key identifier:   24:5B:67:C6:F9:84:AF:CC:DD:28:AD:F5:47:5C:1C:58:7F:5B:52:01
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       7B5F109B5F5804597480048B20880F527BDE7188
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3132342e302f32322d3232203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 13:19:22 +0000
ROA not before:           Thu 27 Jul 2023 13:14:22 +0000
ROA not after:            Thu 25 Jul 2024 13:19:22 +0000
asID:                     53118
IP address blocks:        177.12.124.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:5f:10:9b:5f:58:04:59:74:80:04:8b:20:88:0f:52:7b:de:71:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 13:14:22 2023 GMT
            Not After : Jul 25 13:19:22 2024 GMT
        Subject: CN=245B67C6F984AFCCDD28ADF5475C1C587F5B5201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7f:90:ea:82:c0:99:06:2c:cc:3b:2b:68:a5:
                    1b:0f:49:6c:14:30:9e:e0:fe:27:5d:91:ac:4b:ac:
                    dd:a9:fa:61:71:3d:ef:47:97:9d:d4:36:b5:92:87:
                    52:d4:78:00:e5:ef:07:59:1f:88:99:80:5d:79:8f:
                    e8:58:b0:97:ec:bf:72:31:5b:04:92:fe:16:ec:26:
                    c0:fc:8e:85:3e:be:d9:56:2b:d3:fb:5f:89:e2:52:
                    7e:d8:d8:fe:30:54:03:89:57:8e:e6:97:54:df:57:
                    6a:87:82:3e:07:ff:47:99:7e:85:71:43:2c:a9:cf:
                    9e:d2:7e:0d:91:31:45:a9:f0:04:7d:a5:f0:e9:2e:
                    b3:af:e7:9b:29:c1:79:f0:33:e6:4f:6d:cf:49:58:
                    b0:d3:a4:52:e5:ec:04:40:61:6f:58:ba:c9:67:2b:
                    59:1f:7f:5f:b5:91:d6:0b:30:35:08:f6:28:3f:4e:
                    6f:2e:c4:e9:7b:b6:3f:e8:35:b2:1c:ff:d2:6a:83:
                    b9:25:32:d0:90:b0:be:02:e8:39:59:7d:a2:c4:d6:
                    c8:d6:8a:d8:6d:c9:cb:52:92:3d:b5:cf:9a:dd:b1:
                    21:f6:47:f1:a3:b1:c3:52:11:d1:b2:de:9b:a3:df:
                    7f:8f:d0:49:e3:0b:bf:28:c7:05:ac:60:c2:c2:1f:
                    84:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:5B:67:C6:F9:84:AF:CC:DD:28:AD:F5:47:5C:1C:58:7F:5B:52:01
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3132342e302f32322d3232203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:73:61:37:e6:56:48:24:27:cb:ac:d4:e3:9a:5c:03:99:7b:
         68:a0:d8:f2:bb:13:34:16:12:a7:ab:13:7c:94:24:22:f8:ed:
         c6:1e:71:e4:21:2e:f8:54:82:07:1c:a2:ce:4f:eb:b3:77:f9:
         96:e4:19:ed:0a:60:5b:0f:83:2d:9f:5d:7b:2b:3d:26:32:18:
         08:72:f0:e4:38:d5:b3:b6:82:34:5a:02:e3:ab:91:6a:97:37:
         ab:20:9a:96:ef:2e:d7:d5:7b:c6:51:46:e6:ba:03:be:1d:fd:
         bc:2c:d6:07:d6:ad:fa:b6:ae:4a:6c:14:73:31:11:bc:4f:78:
         0c:2d:53:ce:b9:49:d6:48:65:c5:c9:80:b6:68:eb:ce:b4:dd:
         cb:3e:ad:1e:45:f4:dd:c4:33:df:a8:a5:29:f0:d7:e4:99:11:
         49:e5:26:83:04:0a:ef:39:41:5d:41:a9:01:d6:ed:4d:c5:2c:
         1d:7d:7a:30:ad:e0:c1:05:20:3e:dd:5f:cd:b4:ca:eb:b5:86:
         62:0e:51:b0:c1:1a:28:87:b1:98:7b:eb:e6:30:a8:76:f0:b3:
         97:db:64:23:c7:ca:31:78:5e:3f:b1:b7:48:dd:05:1a:f1:09:
         b0:fb:ae:c9:25:59:fb:8b:1c:8c:2d:20:b9:e7:a2:cb:3a:7d:
         54:bc:e4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org