Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3132342e302f32342d3234203d3e203533313138.roa
File:                     3137372e31322e3132342e302f32342d3234203d3e203533313138.roa (raw, json)
Hash identifier:          MVG0MJHKG3s242NxTDv7q/ZET59K6roaR/epTftMmiQ=
Subject key identifier:   F1:77:BA:6A:59:98:AA:06:5A:CA:E6:66:C9:29:E7:15:AE:83:D0:BF
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       2375D3280BCFAED70F08D716D09A8C6A46151942
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3132342e302f32342d3234203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 13:58:49 +0000
ROA not before:           Thu 27 Jul 2023 13:53:49 +0000
ROA not after:            Thu 25 Jul 2024 13:58:49 +0000
asID:                     53118
IP address blocks:        177.12.124.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:75:d3:28:0b:cf:ae:d7:0f:08:d7:16:d0:9a:8c:6a:46:15:19:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 13:53:49 2023 GMT
            Not After : Jul 25 13:58:49 2024 GMT
        Subject: CN=F177BA6A5998AA065ACAE666C929E715AE83D0BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e1:9a:a3:19:ca:fa:36:b9:de:83:3a:28:c8:
                    7e:93:38:d6:94:18:ab:ac:5c:94:5e:68:08:98:0f:
                    45:b6:0c:ab:d1:05:5f:db:3f:dd:42:1d:52:e7:fd:
                    e0:7e:f2:a6:89:6c:5a:fd:2b:96:4c:30:a2:ad:6d:
                    f3:64:24:49:bd:c5:96:11:be:7e:c7:04:14:88:fc:
                    74:f3:84:fb:8b:dc:95:9e:c8:6f:43:b2:98:ec:4b:
                    21:8c:f8:e9:07:3a:ba:7e:c6:7f:d9:19:df:cd:8c:
                    86:91:cb:a3:74:1b:14:0b:a1:de:40:06:a1:78:1a:
                    2e:72:4f:45:f8:8b:c7:14:cd:47:65:0c:05:5d:cc:
                    cb:53:ef:f2:21:77:61:4f:b5:1c:02:52:dc:fe:89:
                    48:6d:47:55:6e:cf:79:b6:fb:49:87:3c:ec:0b:8e:
                    88:a9:84:35:94:2a:aa:1e:25:50:94:2c:a3:9c:3c:
                    63:d1:02:4b:61:dd:26:e9:d9:24:74:92:18:1a:bc:
                    e6:d8:ff:d3:97:12:42:66:6a:fb:1c:c3:c3:eb:62:
                    f6:f2:09:15:d4:4e:15:64:1c:85:c4:c5:d9:c8:24:
                    85:b3:8b:bc:f5:b7:93:be:c3:cb:27:b8:d8:4a:3d:
                    16:ee:09:df:72:9a:f4:74:2c:48:a8:c5:f0:71:b2:
                    2a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:77:BA:6A:59:98:AA:06:5A:CA:E6:66:C9:29:E7:15:AE:83:D0:BF
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3132342e302f32342d3234203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:12:8d:57:3d:47:cd:d9:02:ef:f9:c8:60:32:6e:0d:d8:77:
         4e:01:70:31:17:79:62:7c:7e:d2:d7:57:99:f2:a1:6d:93:f9:
         17:c6:88:32:82:b6:c8:92:87:24:1f:0d:02:52:27:3c:f3:8e:
         a3:5b:19:65:da:50:13:c5:fa:dc:39:31:bf:13:3e:62:42:fc:
         58:a2:45:fb:9a:66:c2:bf:23:3d:1f:c4:23:e5:6c:81:33:83:
         16:b1:d5:33:75:26:2c:99:96:12:da:a8:23:80:d4:11:ce:3b:
         64:cd:8a:32:23:89:84:2d:76:42:c0:21:a0:71:d4:3c:7b:9e:
         48:88:11:30:b2:78:be:df:88:8f:cd:ed:5f:ae:d4:5a:81:72:
         a1:ea:fa:63:a4:21:7d:d8:aa:03:39:1a:31:a6:d8:6a:cf:d6:
         8e:f1:7b:6b:95:6f:03:48:3e:4b:e1:58:81:cf:49:50:e5:61:
         f1:3b:ba:35:3c:11:5f:d2:e0:a1:86:ee:73:de:ab:90:ad:82:
         05:ee:7d:b8:dd:10:9e:e3:4e:70:04:e4:c2:45:1b:1c:5c:3e:
         15:1a:4d:66:6d:d0:d0:09:84:c3:f1:20:42:ff:4a:24:95:52:
         ab:7a:90:e6:42:67:c2:43:42:35:5e:b3:64:8f:bc:4c:87:c1:
         5e:52:98:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org