Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3132342e302f32332d3233203d3e203533313138.roa
File:                     3137372e31322e3132342e302f32332d3233203d3e203533313138.roa (raw, json)
Hash identifier:          PEYAtvk+vTXsy50rDp37ZiZi7QEszfTO78MFfvVgncw=
Subject key identifier:   CF:44:BE:16:E6:3F:62:A1:8E:DF:A3:D3:E3:06:03:6A:EF:B5:35:EE
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       134CBDD27CB8CC30FB4C41F6FB06A427FA0719F7
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3132342e302f32332d3233203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 13:40:50 +0000
ROA not before:           Thu 27 Jul 2023 13:35:50 +0000
ROA not after:            Thu 25 Jul 2024 13:40:50 +0000
asID:                     53118
IP address blocks:        177.12.124.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:4c:bd:d2:7c:b8:cc:30:fb:4c:41:f6:fb:06:a4:27:fa:07:19:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 13:35:50 2023 GMT
            Not After : Jul 25 13:40:50 2024 GMT
        Subject: CN=CF44BE16E63F62A18EDFA3D3E306036AEFB535EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e5:bb:64:cd:bd:d0:6e:f0:3a:e5:be:11:4c:
                    6a:23:b0:dc:b4:64:6b:82:0b:ce:ed:46:ee:cc:07:
                    18:9a:d4:b6:95:ed:79:41:46:a5:fd:1e:d5:18:7e:
                    46:11:26:c9:55:dc:f4:b8:48:0f:04:fd:24:4d:a0:
                    bb:a9:4d:d5:44:c5:c6:cd:77:d4:d5:15:e9:fe:d5:
                    3e:26:27:90:ce:9d:d6:2f:19:cf:f2:53:b2:de:ae:
                    95:35:58:44:64:40:98:23:70:0e:a1:43:ff:32:fa:
                    ee:d7:75:d6:f4:7b:88:52:70:0c:2d:8c:9b:ac:2f:
                    0f:ac:f1:8a:5d:96:24:b6:ca:0c:9f:45:12:e5:7e:
                    f9:22:c5:dc:f7:b4:c6:e8:7a:4b:da:d8:59:d7:74:
                    33:98:ef:38:50:76:1c:96:14:3d:be:76:e5:ee:1c:
                    e7:d9:96:d4:98:ba:7b:9e:12:73:83:8d:5d:d4:ce:
                    b2:9b:09:d7:b9:bc:30:88:4e:38:4d:9b:94:30:bf:
                    b3:3d:50:f4:12:a0:45:56:8d:aa:44:52:0c:e5:b8:
                    d3:6e:f7:b6:98:e4:cb:cc:c8:82:48:c5:7c:58:29:
                    23:0d:72:88:77:34:96:a4:71:cf:e3:fa:92:07:b0:
                    d0:38:ad:5b:90:b6:60:84:9b:79:84:40:cf:bf:a7:
                    7e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:44:BE:16:E6:3F:62:A1:8E:DF:A3:D3:E3:06:03:6A:EF:B5:35:EE
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3132342e302f32332d3233203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:93:a1:8f:5a:e6:b5:bf:b8:42:dd:1b:ad:48:6b:69:e4:89:
         54:26:c1:8d:2d:5c:05:a1:11:1e:05:86:ce:5c:8b:ee:fb:66:
         56:b0:fe:39:15:0d:34:5a:73:d4:b8:cc:4e:1c:d2:71:52:4b:
         6a:e9:32:e9:c1:d7:76:d7:f0:79:4b:87:32:3c:df:f5:2f:b9:
         5c:ae:f7:77:87:a0:1c:e3:f0:77:eb:da:01:f4:ae:88:28:14:
         30:bf:1a:7b:de:2e:a8:aa:8f:dc:04:c1:e9:55:02:91:5d:d1:
         3d:d8:81:63:eb:8d:8b:02:28:1f:7b:75:bd:2c:3c:84:fa:01:
         87:50:17:ed:96:97:41:1f:c3:db:a4:19:c2:1d:b4:6d:b1:54:
         fc:4a:fc:3a:74:25:b9:0b:35:5c:3b:fb:9b:9f:b1:6b:15:29:
         82:46:ee:d2:8c:fb:48:a7:73:d2:65:c0:54:53:9d:0f:73:64:
         2d:9f:43:f4:f1:a5:22:6a:3d:5a:51:65:63:a9:bb:42:14:90:
         1d:52:f3:33:95:41:d1:24:1b:32:3f:d2:3c:a8:c7:e8:42:6f:
         0b:4c:54:59:18:96:93:10:5e:d8:02:8c:39:4e:12:93:6c:1b:
         5e:21:38:bb:93:6c:d6:90:52:de:7f:1a:ad:f4:19:7a:c9:a6:
         87:e6:01:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org