Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e39362e302f31392d3139203d3e203533313138.roa
File:                     3137372e31322e39362e302f31392d3139203d3e203533313138.roa (raw, json)
Hash identifier:          BAB5LOKacTnm+bWW3aBSKm9G1a5AZC7qqSu8rHdz2Ok=
Subject key identifier:   CA:45:23:5B:48:F5:94:7A:13:B0:A4:63:B5:10:3F:A7:F4:8C:DB:4D
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       545905F60CEE3D22DE5D922690D8F3102647CCEE
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e39362e302f31392d3139203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 14:21:09 +0000
ROA not before:           Thu 27 Jul 2023 14:16:09 +0000
ROA not after:            Thu 25 Jul 2024 14:21:09 +0000
asID:                     53118
IP address blocks:        177.12.96.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:59:05:f6:0c:ee:3d:22:de:5d:92:26:90:d8:f3:10:26:47:cc:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 14:16:09 2023 GMT
            Not After : Jul 25 14:21:09 2024 GMT
        Subject: CN=CA45235B48F5947A13B0A463B5103FA7F48CDB4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:43:5c:74:7c:e4:b6:8a:6b:24:0b:6f:c4:44:
                    9c:6a:7e:d5:0f:fa:dc:2e:1f:a5:c4:87:87:99:be:
                    e8:a2:f3:cb:85:9d:e5:a9:56:4a:93:8e:82:66:3d:
                    64:da:b9:4c:da:49:7b:82:67:86:94:74:5e:d1:13:
                    ec:26:aa:f5:4d:d6:9f:61:3a:86:53:fd:e8:d8:0b:
                    45:63:23:a1:76:f7:52:d6:e3:27:a5:e3:9f:a5:be:
                    de:21:81:bd:ff:0e:18:62:05:10:66:0f:4a:17:36:
                    79:f0:dd:f6:4e:11:e5:cc:b2:fe:5e:d5:34:c1:cd:
                    0f:40:3b:12:28:ce:8e:12:9d:ea:32:2b:f1:90:ea:
                    80:70:7c:39:7d:1b:58:23:b9:13:21:a0:e9:37:61:
                    e9:e4:a3:82:29:37:6d:7f:c5:e8:77:94:07:ac:b9:
                    44:ac:62:e1:bb:2f:15:50:fb:ed:d0:2e:d8:3c:29:
                    89:b7:eb:19:21:4b:05:f2:d4:72:0e:5c:86:29:78:
                    85:d7:d2:2a:ba:e7:3a:2c:aa:69:26:3c:49:c5:e0:
                    7a:73:7e:63:64:42:8f:79:e8:93:65:cc:b6:29:86:
                    a6:69:24:bc:0b:d8:c9:3d:29:36:e9:41:fa:c4:1f:
                    49:09:a8:b7:d3:fa:72:d4:bd:0d:da:e7:f0:b0:cc:
                    11:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:45:23:5B:48:F5:94:7A:13:B0:A4:63:B5:10:3F:A7:F4:8C:DB:4D
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e39362e302f31392d3139203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         99:f0:67:6e:8b:f9:2e:a5:06:94:fb:7c:4b:5e:0f:65:22:62:
         0d:e3:d8:0a:67:8d:94:3d:2e:c7:b1:3a:2d:03:f8:b8:b8:66:
         5e:46:bd:87:f9:71:54:27:fd:df:f9:2b:f4:9d:56:3a:9e:81:
         59:be:c0:77:06:dd:24:7f:ad:58:c2:1d:c2:1f:f1:8a:73:73:
         3f:93:bd:ce:28:c8:cc:88:93:4a:f5:e5:32:ec:44:2f:a6:1f:
         ff:4b:8d:66:be:4b:9e:9c:e1:e6:55:2c:12:74:c2:29:0e:1f:
         a0:61:11:27:5a:fd:2d:ac:37:31:ad:a7:9d:33:e7:f7:30:54:
         8d:8f:2d:01:70:cf:d2:39:83:a1:78:ca:5c:f9:05:81:27:d0:
         00:98:67:89:1c:67:eb:83:24:26:57:18:52:c4:e5:05:68:8e:
         18:12:93:ff:b3:a8:70:52:1f:03:70:87:5c:5a:6b:75:cc:92:
         29:91:cc:89:ce:bf:d5:46:3f:ad:6a:cd:24:b9:8e:f5:83:0b:
         8b:72:dd:33:36:68:5c:75:ad:be:1b:10:93:89:cb:78:6a:7b:
         40:38:49:94:0f:f8:04:ad:54:95:f6:a1:ae:85:d2:20:ab:d0:
         1b:21:d0:b6:5a:02:39:75:ee:06:47:5a:e8:e8:a4:25:cc:86:
         fd:73:25:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org