Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e39362e302f32302d3230203d3e203533313138.roa
File:                     3137372e31322e39362e302f32302d3230203d3e203533313138.roa (raw, json)
Hash identifier:          WaAv0T9fzH6bzueWdI1Uba+JuD4csqVCuNIUs5Pme/s=
Subject key identifier:   EF:65:C0:E4:42:C2:A4:88:EF:0F:CB:7F:6E:D5:8D:45:CA:8D:D2:36
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       14EADAECF01079E0894E55F3DF9C242AD5D6369C
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e39362e302f32302d3230203d3e203533313138.roa
Signing time:             Tue 08 Aug 2023 20:00:00 +0000
ROA not before:           Tue 08 Aug 2023 19:55:00 +0000
ROA not after:            Tue 06 Aug 2024 20:00:00 +0000
asID:                     53118
IP address blocks:        177.12.96.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ea:da:ec:f0:10:79:e0:89:4e:55:f3:df:9c:24:2a:d5:d6:36:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Aug  8 19:55:00 2023 GMT
            Not After : Aug  6 20:00:00 2024 GMT
        Subject: CN=EF65C0E442C2A488EF0FCB7F6ED58D45CA8DD236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a9:4a:27:07:de:9b:59:06:2b:c3:aa:0f:fd:
                    2c:82:cf:d7:68:4a:74:73:ab:0e:9b:63:bf:51:f7:
                    df:dc:e1:36:e4:79:0b:8f:00:0f:4d:5d:54:7b:e6:
                    9e:23:61:d6:2d:0a:c2:62:39:55:74:a3:71:61:cb:
                    97:fa:47:c6:e1:5e:9e:37:8c:ed:48:2f:36:26:dc:
                    20:3e:8a:5f:5b:44:b3:75:6b:42:76:61:b8:17:7e:
                    f4:37:d2:9b:0c:b0:1e:a9:5f:37:2b:ad:f1:86:ad:
                    7d:fb:90:5c:78:90:b9:2b:56:69:00:d3:8a:5e:58:
                    0e:ea:74:5c:65:4a:03:76:0e:63:99:1b:ef:ac:b0:
                    70:c1:3b:4e:3f:a8:17:47:c9:18:93:b6:5f:34:72:
                    34:02:a8:50:2b:6c:0f:5f:fe:3e:e2:5c:53:40:62:
                    5d:65:17:1b:b5:55:f0:5b:9c:5f:6d:13:f6:2c:77:
                    00:b8:ba:de:e9:e5:9b:cd:a9:4f:25:a4:a8:5d:a9:
                    6f:7b:d0:d0:2e:62:dc:2f:42:30:7f:89:0b:da:57:
                    0d:38:94:63:50:6b:fb:fc:f9:bd:8d:6a:cd:be:21:
                    02:14:8f:ea:b0:69:a0:b3:be:6e:75:2c:60:b7:a2:
                    40:4b:e9:50:ae:11:19:63:b5:c7:1d:4d:18:4a:b9:
                    92:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:65:C0:E4:42:C2:A4:88:EF:0F:CB:7F:6E:D5:8D:45:CA:8D:D2:36
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e39362e302f32302d3230203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         20:07:b3:a2:47:57:32:5c:82:48:5b:73:7a:af:f9:a0:d7:f3:
         ad:90:5d:e7:69:70:c0:93:a2:96:c3:e9:89:3c:f7:8a:3a:4c:
         b0:32:94:af:a4:57:07:a3:0b:c1:26:39:bf:6d:06:dc:ed:fc:
         0c:6d:ca:e1:f9:7f:6e:34:29:3f:26:44:1a:8a:1e:cc:6a:81:
         c7:f4:b3:5e:36:f9:6a:1d:07:7a:2d:12:eb:0c:59:69:85:83:
         05:e5:e9:10:f9:51:94:2a:fb:d4:98:74:5a:e5:6a:cc:65:fe:
         d1:9c:a7:d8:f5:e9:97:32:f1:0c:85:c5:93:87:30:99:b5:8b:
         d6:28:7e:af:c9:49:60:e9:48:6f:d0:6e:03:28:32:a4:e6:4a:
         46:ec:54:06:62:e8:f9:ae:b9:38:91:92:16:c9:f1:e2:fe:47:
         cc:72:2c:e8:24:26:fb:b4:e8:dd:c8:98:28:02:dc:51:60:13:
         dc:12:f9:86:aa:34:5a:a9:19:6e:75:81:98:15:6e:eb:bb:ed:
         27:d0:0b:af:28:c0:38:a2:cf:7e:41:07:11:05:57:b5:d2:03:
         97:4a:95:ed:b2:5e:ed:eb:5b:a6:c0:85:fd:e2:f8:d6:00:3a:
         9b:50:c7:c8:54:f5:fc:d9:93:30:1e:a5:a9:a2:dd:52:eb:af:
         64:07:cb:b9
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUFOra7PAQeeCJTlXz35wkKtXWNpwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTVFRDFEQUMxNjZGNzFEQzQ2Rjk3QzYxNUU5Mjg3RDdE
NkY5RUE5MTAeFw0yMzA4MDgxOTU1MDBaFw0yNDA4MDYyMDAwMDBaMDMxMTAvBgNV
BAMTKEVGNjVDMEU0NDJDMkE0ODhFRjBGQ0I3RjZFRDU4RDQ1Q0E4REQyMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmqUonB96bWQYrw6oP/SyCz9do
SnRzqw6bY79R99/c4TbkeQuPAA9NXVR75p4jYdYtCsJiOVV0o3Fhy5f6R8bhXp43
jO1ILzYm3CA+il9bRLN1a0J2YbgXfvQ30psMsB6pXzcrrfGGrX37kFx4kLkrVmkA
04peWA7qdFxlSgN2DmOZG++ssHDBO04/qBdHyRiTtl80cjQCqFArbA9f/j7iXFNA
Yl1lFxu1VfBbnF9tE/YsdwC4ut7p5ZvNqU8lpKhdqW970NAuYtwvQjB/iQvaVw04
lGNQa/v8+b2Nas2+IQIUj+qwaaCzvm51LGC3okBL6VCuERljtccdTRhKuZLtAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU72XA5ELCpIjvD8t/btWNRcqN0jYwHwYDVR0j
BBgwFoAUle0drBZvcdxG+XxhXpKH19b56pEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVRHMXNMOXJEWDZoalhSMzdheHNYblNockVRaHVqWmdWd0JTSmFpYUpQ
Y2ovMC85NUVEMURBQzE2NkY3MURDNDZGOTdDNjE1RTkyODdEN0Q2RjlFQTkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk1RUQxREFDMTY2RjcxREM0
NkY5N0M2MTVFOTI4N0Q3RDZGOUVBOTEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FURzFzTDlyRFg2aGpYUjM3YXhzWG5TaHJFUWh1alpnVndCU0phaWFKUGNqLzAv
MzEzNzM3MmUzMTMyMmUzOTM2MmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzUzMzMx
MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBLEMYDANBgkqhkiG9w0BAQsFAAOCAQEAIAezokdXMlyC
SFtzeq/5oNfzrZBd52lwwJOilsPpiTz3ijpMsDKUr6RXB6MLwSY5v20G3O38DG3K
4fl/bjQpPyZEGooezGqBx/SzXjb5ah0Hei0S6wxZaYWDBeXpEPlRlCr71Jh0WuVq
zGX+0Zyn2PXplzLxDIXFk4cwmbWL1ih+r8lJYOlIb9BuAygypOZKRuxUBmLo+a65
OJGSFsnx4v5HzHIs6CQm+7To3ciYKALcUWAT3BL5hqo0WqkZbnWBmBVu67vtJ9AL
ryjAOKLPfkEHEQVXtdIDl0qV7bJe7etbpsCF/eL41gA6m1DHyFT1/NmTMB6lqaLd
UuuvZAfLuQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org