Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3132372e302f32342d3234203d3e203533313138.roa
File:                     3137372e31322e3132372e302f32342d3234203d3e203533313138.roa (raw, json)
Hash identifier:          t1xP0581QrPu1yHWQB7MNXRxf5OjS0Lx8RSDbtS5N3g=
Subject key identifier:   75:73:11:EA:83:30:08:C8:00:62:46:32:55:7B:64:4E:BE:9D:FB:06
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       5CDAAA64FE219FC6BDE402EFA3F2A005E32684E8
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3132372e302f32342d3234203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 13:59:36 +0000
ROA not before:           Thu 27 Jul 2023 13:54:36 +0000
ROA not after:            Thu 25 Jul 2024 13:59:36 +0000
asID:                     53118
IP address blocks:        177.12.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:da:aa:64:fe:21:9f:c6:bd:e4:02:ef:a3:f2:a0:05:e3:26:84:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 13:54:36 2023 GMT
            Not After : Jul 25 13:59:36 2024 GMT
        Subject: CN=757311EA833008C800624632557B644EBE9DFB06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1e:fb:1d:f3:8b:6f:27:92:a3:fe:b6:ed:bd:
                    53:a5:66:d2:43:a0:5a:01:2d:32:08:78:cf:0e:82:
                    bd:c7:6f:41:de:48:9d:69:e1:9c:68:8b:c6:75:df:
                    81:b3:45:d7:3c:2e:5f:67:9c:20:70:80:74:c0:f3:
                    4a:15:8c:5d:38:fe:c4:f5:5b:20:ee:36:60:44:f1:
                    5f:d7:ed:87:a0:8c:08:96:9f:61:85:1b:bf:1d:99:
                    cc:36:27:b9:da:f8:0a:8b:8c:7f:a2:6c:14:13:9b:
                    6a:b9:ad:e0:8f:e9:b3:20:b7:e0:a8:9a:85:ba:36:
                    23:c5:bd:f9:62:7f:8e:e3:ac:45:47:01:db:ae:55:
                    64:55:0c:55:fa:53:2d:b6:81:d6:d2:98:6a:70:a6:
                    b3:ab:10:90:41:16:79:14:66:4a:0f:1b:05:bc:1c:
                    5f:87:1d:39:96:ba:e6:b3:d7:f6:80:8f:40:71:67:
                    af:ee:0a:f0:60:89:b7:b6:8a:d8:71:9e:aa:25:97:
                    23:13:28:eb:65:76:25:de:07:8f:0f:c7:7d:ff:7f:
                    4c:60:ec:80:6c:d1:74:71:47:91:c6:5e:81:42:82:
                    d2:ee:76:fb:6d:0d:95:0e:19:d8:c1:2c:04:75:ff:
                    00:7d:f2:15:b4:36:4b:6d:14:d3:b1:f3:9a:51:b8:
                    23:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:73:11:EA:83:30:08:C8:00:62:46:32:55:7B:64:4E:BE:9D:FB:06
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e3132372e302f32342d3234203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:0f:1e:dc:09:c4:4f:a7:e1:d7:a9:27:95:b7:6c:7d:88:f0:
         e6:9e:61:c8:18:e3:e2:f1:1b:a6:df:b0:9c:78:c0:cf:2a:3f:
         e1:21:1f:df:73:63:3f:50:7a:a2:67:c5:3e:aa:a3:3f:fe:3b:
         78:4b:96:1b:36:b8:de:b1:24:da:90:da:48:cc:d9:e1:37:b5:
         8c:24:91:f8:a5:ba:eb:25:71:85:af:6f:03:c6:e1:c0:7a:db:
         03:ce:2f:55:a8:c0:3d:1f:08:27:95:f0:61:8e:de:93:92:a0:
         1a:09:c1:6c:fd:60:11:64:98:c4:8b:68:a2:bc:b3:48:33:cd:
         7e:ed:09:41:bc:ef:76:41:bf:81:89:83:2f:08:0d:2f:2c:59:
         5f:8d:81:9d:43:68:19:96:35:be:a4:23:b2:54:06:db:f6:d7:
         b9:33:75:0f:5c:32:f1:1a:45:d1:d6:ea:7f:64:5c:52:b1:64:
         b9:e2:b3:c2:04:8d:27:1c:dc:a2:6b:82:a2:26:d6:00:d7:e8:
         f3:b9:bf:f1:75:f3:e2:19:46:0d:44:9c:cb:c8:bb:b7:4c:bf:
         c9:c1:49:3a:b0:af:72:e7:db:fe:e1:4e:2e:24:56:0e:2a:08:
         59:70:a5:37:fd:b7:34:f0:55:ec:ed:12:10:9c:26:16:ac:73:
         dc:38:ce:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org