Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e39362e302f32312d3231203d3e203533313138.roa
File:                     3137372e31322e39362e302f32312d3231203d3e203533313138.roa (raw, json)
Hash identifier:          CgNIHVvIdyGzVGhrgPOLKleZ+vkT6ZlhQ0LaNCP+MyU=
Subject key identifier:   98:27:8B:32:C8:E4:5B:7E:F4:A6:44:6C:1C:19:D5:4D:EE:4F:8F:B0
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       4ACC37E88FEDD7631AF067137806A0E1B46A7209
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e39362e302f32312d3231203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 13:14:06 +0000
ROA not before:           Thu 27 Jul 2023 13:09:06 +0000
ROA not after:            Thu 25 Jul 2024 13:14:06 +0000
asID:                     53118
IP address blocks:        177.12.96.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:cc:37:e8:8f:ed:d7:63:1a:f0:67:13:78:06:a0:e1:b4:6a:72:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 13:09:06 2023 GMT
            Not After : Jul 25 13:14:06 2024 GMT
        Subject: CN=98278B32C8E45B7EF4A6446C1C19D54DEE4F8FB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:35:b2:8e:2a:6f:b3:c4:18:cc:76:8f:46:ea:
                    ee:fa:a4:d3:8a:f6:bb:25:42:ff:f0:2d:5b:30:0a:
                    4f:15:13:97:70:22:98:73:b8:13:56:5e:5c:7a:17:
                    d8:a6:35:05:dc:83:5c:15:62:23:a3:13:71:b2:5c:
                    74:56:4a:66:09:ee:f2:0a:e9:bb:ca:62:d0:4d:30:
                    38:9f:7c:52:11:c9:9c:05:9e:f4:c7:22:45:30:03:
                    f0:45:cf:d9:7c:ce:45:f8:29:4a:a6:52:ed:f9:b9:
                    3b:33:52:62:8c:64:a0:cb:ab:06:51:76:d2:95:65:
                    22:32:dd:bd:0a:97:29:21:3d:e3:b6:2e:74:17:f5:
                    6b:79:d2:8b:4a:8d:87:5d:e2:97:c5:56:ca:fc:a1:
                    d1:4f:bc:e5:0a:bb:6e:9d:05:9a:93:53:3d:c6:ea:
                    88:7d:e9:43:16:9a:84:87:ba:9d:7a:a4:c2:ae:6e:
                    f4:f4:99:0b:a8:4e:6c:e5:2b:4b:3b:58:5a:cc:e7:
                    e9:37:4c:88:6b:4a:8c:7a:20:aa:90:13:e6:94:27:
                    38:ea:1a:81:86:89:37:36:f1:f0:1c:3b:e0:f7:fd:
                    86:e4:d2:68:4c:f5:68:76:b6:9f:7e:5a:2b:2e:cc:
                    9c:ba:09:ba:23:25:fd:b4:b1:38:dd:c6:ca:f2:f0:
                    21:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:27:8B:32:C8:E4:5B:7E:F4:A6:44:6C:1C:19:D5:4D:EE:4F:8F:B0
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e39362e302f32312d3231203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bc:4b:d4:fd:d7:25:fe:2e:bf:cb:2c:15:48:19:3f:b1:0b:f9:
         3e:5a:38:72:f8:a4:dc:ce:84:b1:f0:e9:bb:e6:21:17:a0:78:
         4c:26:68:9f:d0:e4:43:37:3f:3a:75:24:b6:46:44:a9:27:dd:
         9d:4b:05:a5:cc:e7:17:05:87:54:2e:b1:b2:7b:51:eb:ea:89:
         5b:15:b8:9d:dc:10:ec:b7:d3:b7:61:93:d9:37:c9:99:ca:6f:
         b1:1b:98:a6:db:4d:ab:05:f6:f9:ad:19:20:34:83:e5:c5:ff:
         a6:89:14:d8:6c:55:b5:50:7c:d1:ef:99:07:22:a0:28:a4:00:
         76:51:4f:75:9c:3a:6f:31:f6:1f:8b:d5:49:bc:ad:b1:84:97:
         07:cf:64:8b:1e:ed:cb:08:e6:64:15:a5:2d:31:56:8d:cd:4d:
         b2:7c:36:71:b0:a1:f7:10:31:62:5e:ed:c6:79:32:ff:c3:13:
         d8:70:c6:61:81:55:22:5e:30:4e:94:52:1a:b3:0d:cb:52:66:
         ca:d2:0e:04:f7:37:6c:bd:49:89:87:00:19:ef:43:8e:7a:83:
         41:b7:43:3d:14:12:1d:a9:dc:fd:f7:75:d3:1a:0c:96:2d:b3:
         6b:6a:ef:e4:cd:36:66:54:16:06:fd:0e:c3:ad:bc:75:3a:fc:
         e3:45:5f:9e
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUSsw36I/t12Ma8GcTeAag4bRqcgkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTVFRDFEQUMxNjZGNzFEQzQ2Rjk3QzYxNUU5Mjg3RDdE
NkY5RUE5MTAeFw0yMzA3MjcxMzA5MDZaFw0yNDA3MjUxMzE0MDZaMDMxMTAvBgNV
BAMTKDk4Mjc4QjMyQzhFNDVCN0VGNEE2NDQ2QzFDMTlENTRERUU0RjhGQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0NbKOKm+zxBjMdo9G6u76pNOK
9rslQv/wLVswCk8VE5dwIphzuBNWXlx6F9imNQXcg1wVYiOjE3GyXHRWSmYJ7vIK
6bvKYtBNMDiffFIRyZwFnvTHIkUwA/BFz9l8zkX4KUqmUu35uTszUmKMZKDLqwZR
dtKVZSIy3b0KlykhPeO2LnQX9Wt50otKjYdd4pfFVsr8odFPvOUKu26dBZqTUz3G
6oh96UMWmoSHup16pMKubvT0mQuoTmzlK0s7WFrM5+k3TIhrSox6IKqQE+aUJzjq
GoGGiTc28fAcO+D3/Ybk0mhM9Wh2tp9+WisuzJy6CbojJf20sTjdxsry8CFJAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUmCeLMsjkW370pkRsHBnVTe5Pj7AwHwYDVR0j
BBgwFoAUle0drBZvcdxG+XxhXpKH19b56pEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVRHMXNMOXJEWDZoalhSMzdheHNYblNockVRaHVqWmdWd0JTSmFpYUpQ
Y2ovMC85NUVEMURBQzE2NkY3MURDNDZGOTdDNjE1RTkyODdEN0Q2RjlFQTkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk1RUQxREFDMTY2RjcxREM0
NkY5N0M2MTVFOTI4N0Q3RDZGOUVBOTEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FURzFzTDlyRFg2aGpYUjM3YXhzWG5TaHJFUWh1alpnVndCU0phaWFKUGNqLzAv
MzEzNzM3MmUzMTMyMmUzOTM2MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzUzMzMx
MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEA7EMYDANBgkqhkiG9w0BAQsFAAOCAQEAvEvU/dcl/i6/
yywVSBk/sQv5Plo4cvik3M6EsfDpu+YhF6B4TCZon9DkQzc/OnUktkZEqSfdnUsF
pcznFwWHVC6xsntR6+qJWxW4ndwQ7LfTt2GT2TfJmcpvsRuYpttNqwX2+a0ZIDSD
5cX/pokU2GxVtVB80e+ZByKgKKQAdlFPdZw6bzH2H4vVSbytsYSXB89kix7tywjm
ZBWlLTFWjc1Nsnw2cbCh9xAxYl7txnky/8MT2HDGYYFVIl4wTpRSGrMNy1JmytIO
BPc3bL1JiYcAGe9DjnqDQbdDPRQSHanc/fd10xoMli2za2rv5M02ZlQWBv0Ow628
dTr840Vfng==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org