Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3132352e302f32342d3234203d3e203533313138.roa
File:                     3137372e31322e3132352e302f32342d3234203d3e203533313138.roa (raw, json)
Hash identifier:          ynyNz5tT0FQDPwRoiYyA2wkewEZ0KgQViShDr1MSBXY=
Subject key identifier:   E2:E1:6C:F1:4B:BF:5B:7D:FF:41:8A:2F:AF:DC:CB:EC:D9:B1:13:C6
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       521C5B6C9ABDA64E61D45279AD2E68875D8763E5
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3132352e302f32342d3234203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 13:59:07 +0000
ROA not before:           Thu 27 Jul 2023 13:54:07 +0000
ROA not after:            Thu 25 Jul 2024 13:59:07 +0000
asID:                     53118
IP address blocks:        177.12.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:1c:5b:6c:9a:bd:a6:4e:61:d4:52:79:ad:2e:68:87:5d:87:63:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 13:54:07 2023 GMT
            Not After : Jul 25 13:59:07 2024 GMT
        Subject: CN=E2E16CF14BBF5B7DFF418A2FAFDCCBECD9B113C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:50:04:6d:f0:4a:bd:e1:9b:50:73:f2:8d:45:
                    8d:4e:70:72:cb:4f:a6:19:0e:81:ff:40:fe:47:fc:
                    5a:49:26:bb:56:d5:0f:c5:cc:cd:de:d8:1e:e2:01:
                    9b:c3:79:b0:a3:54:f7:2e:cd:f6:6f:45:9d:d8:ad:
                    7c:a3:fa:03:f1:85:3f:84:96:f4:85:e4:ae:cf:53:
                    ae:9b:b0:e4:f0:ea:1b:68:01:75:d5:82:08:26:08:
                    b2:90:48:b8:0e:8c:38:c9:a5:64:4d:53:61:ba:81:
                    98:f6:f7:87:fe:5a:cc:aa:7f:4e:f0:b9:d9:0f:41:
                    47:46:28:23:f6:f3:61:d8:5e:ee:02:11:84:88:26:
                    51:ed:45:a8:85:36:a4:1e:93:b1:ab:c6:ec:df:39:
                    e9:5d:4f:3e:15:a3:dc:d2:0c:26:5d:98:93:67:42:
                    7e:8f:4c:7f:49:1e:0c:62:95:08:91:a4:fb:8c:70:
                    1a:b4:63:78:bd:51:6e:e4:57:6d:08:37:0e:e3:50:
                    f1:05:09:28:31:03:ad:3d:15:86:0f:44:38:b2:0f:
                    91:d9:80:4d:f6:79:2e:7a:39:18:a2:43:18:84:46:
                    2d:83:ab:ed:b7:8f:39:07:2f:da:dc:4d:ad:cb:f4:
                    62:99:1f:be:d9:36:49:46:83:be:d8:8d:20:91:b5:
                    fd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E1:6C:F1:4B:BF:5B:7D:FF:41:8A:2F:AF:DC:CB:EC:D9:B1:13:C6
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3132352e302f32342d3234203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:a1:da:0a:48:1a:8d:7d:7b:d0:7e:25:68:ce:48:8d:c4:91:
         6f:c3:23:f3:64:7a:7e:b8:e8:c2:ff:7f:ec:88:29:ff:89:da:
         52:c1:ac:c4:2f:a0:54:1f:b7:56:49:c2:ba:db:9c:04:f6:64:
         b2:f3:19:a3:64:5d:5e:ca:2c:49:c5:62:4a:be:f0:8d:fc:2f:
         29:cd:26:a2:04:2b:28:61:39:ba:f7:aa:8f:e2:1c:96:f8:42:
         75:87:aa:b6:14:62:08:0d:ed:27:80:7b:94:33:3e:fa:aa:7e:
         c3:9b:91:40:83:04:7d:cb:77:b8:e4:5f:a5:73:ae:d1:65:7b:
         90:96:b1:3e:6a:1f:4e:e6:3f:80:b8:85:ec:a7:c3:b7:c5:7d:
         90:a4:c8:b0:aa:9d:30:d6:02:4f:6f:9d:d0:9e:13:27:e8:ab:
         a7:d3:30:ad:34:1b:b0:59:00:d3:7d:6e:d3:78:9c:aa:5f:b8:
         61:c8:5a:9e:66:7a:35:1c:69:1a:c2:b9:75:02:09:a2:73:43:
         2d:da:24:5a:ae:5e:a4:8b:63:a4:43:1f:9c:8f:5c:a2:27:6d:
         2d:c7:1b:0a:c6:0b:98:69:5e:af:11:67:d7:81:3f:5a:bb:7d:
         dc:8b:d8:ff:52:15:67:f6:8b:d6:22:92:41:87:4a:2d:e6:f1:
         29:4c:6c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org