Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3132362e302f32332d3233203d3e203533313138.roa
File:                     3137372e31322e3132362e302f32332d3233203d3e203533313138.roa (raw, json)
Hash identifier:          VUv94uJCClx2aB2YUKAo2oS+9/Pk7rfbc9ulPWfhoTM=
Subject key identifier:   8A:82:CA:3A:2B:60:90:3B:DC:0F:2B:45:05:54:B6:24:B8:51:56:34
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       37C70DF40A117B9499932AA5E02E31A4F5F405A8
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3132362e302f32332d3233203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 13:40:57 +0000
ROA not before:           Thu 27 Jul 2023 13:35:57 +0000
ROA not after:            Thu 25 Jul 2024 13:40:57 +0000
asID:                     53118
IP address blocks:        177.12.126.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c7:0d:f4:0a:11:7b:94:99:93:2a:a5:e0:2e:31:a4:f5:f4:05:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 13:35:57 2023 GMT
            Not After : Jul 25 13:40:57 2024 GMT
        Subject: CN=8A82CA3A2B60903BDC0F2B450554B624B8515634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:11:70:c6:56:ce:48:21:84:2e:41:b0:ba:cd:
                    21:d8:c1:62:f2:53:a4:a9:90:46:c7:ef:3d:a2:35:
                    9a:3a:79:24:d9:e5:d5:61:84:c7:5e:8b:51:7c:d9:
                    08:c1:a6:b5:0e:1e:cd:8e:73:94:37:c8:4f:3b:da:
                    34:3d:f5:0b:59:30:56:d9:dc:3e:7a:bf:84:76:b1:
                    40:63:71:c7:96:38:3f:91:11:35:18:91:51:49:ef:
                    0b:e3:0a:33:22:f6:13:5d:02:3e:ab:a8:40:18:9e:
                    c1:bf:7f:25:26:f2:f4:1b:f4:f0:f8:47:e5:81:cd:
                    db:e1:be:5d:39:38:30:23:8d:e0:e8:ce:37:ef:0e:
                    df:66:8b:e8:d1:6f:55:72:17:0e:03:18:06:73:79:
                    dc:b6:ea:ed:b1:bc:dc:4d:dc:7f:d0:1d:b1:6d:65:
                    ea:59:e1:fa:ce:81:ad:81:21:d1:f8:9c:1a:36:e7:
                    99:48:47:1b:f4:83:25:e8:b0:a7:b0:61:96:9f:1f:
                    55:2b:8b:6e:de:1f:05:cc:25:3f:ce:be:97:fc:24:
                    8e:5c:0d:57:00:96:1e:1f:c9:a5:46:3b:e2:82:f3:
                    d4:65:69:cf:45:d3:39:43:9f:13:66:ff:df:db:60:
                    44:da:66:f3:1e:4c:98:79:42:9c:cd:43:98:36:fe:
                    10:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:82:CA:3A:2B:60:90:3B:DC:0F:2B:45:05:54:B6:24:B8:51:56:34
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3132362e302f32332d3233203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:1f:88:48:38:5f:7e:26:a5:3e:79:37:3e:0c:3c:3e:e1:f6:
         95:78:02:d8:9a:0d:14:a7:21:e9:a0:a4:98:71:35:47:70:7a:
         62:b0:b7:fa:7b:8d:fe:49:b4:78:5f:85:24:ad:d8:5a:80:79:
         da:fa:75:85:4c:88:47:a7:ba:09:10:39:0f:30:bc:16:12:bc:
         b3:a1:23:f7:53:5d:e8:5c:fe:08:9f:03:09:85:e4:33:4a:ee:
         78:53:5f:25:5e:14:a2:84:e8:9f:f4:4b:5d:96:be:cc:1b:2e:
         d3:ce:ad:e0:91:15:e8:c0:c7:8c:da:1d:1d:d1:a3:e2:a8:75:
         38:2b:5d:6d:e9:b7:60:a3:2a:b5:27:ac:a6:b2:7b:7a:23:8f:
         44:f0:94:f2:cc:6d:6c:75:bf:7a:e9:83:a2:5f:4f:08:c5:74:
         37:9a:e9:15:d5:7f:af:36:08:f4:97:b9:ff:ba:a5:f8:07:32:
         49:bc:02:a6:67:f1:38:fd:b8:70:13:02:f0:82:b7:e4:2d:25:
         ff:5f:f6:77:56:be:77:d2:07:32:e1:16:64:50:85:11:4b:6f:
         83:e6:80:ff:70:c1:da:3f:00:ae:37:cf:e5:f4:a3:4e:4b:12:
         89:ff:6a:f8:4e:7f:a6:3b:aa:64:89:35:74:e5:a1:b5:03:8e:
         f4:45:21:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org