Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e39362e302f32332d3233203d3e203533313138.roa
File:                     3137372e31322e39362e302f32332d3233203d3e203533313138.roa (raw, json)
Hash identifier:          88eSVfWP7+lSraDHTvxVJ1kufwAjrrGZjk6kg8k3DVo=
Subject key identifier:   2F:14:E1:83:2D:FF:F1:C9:CB:9E:F4:22:01:F7:BE:BE:06:34:32:09
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       7890862C4816AEE019F6EA346098D1FFE0045CFD
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e39362e302f32332d3233203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 13:24:57 +0000
ROA not before:           Thu 27 Jul 2023 13:19:57 +0000
ROA not after:            Thu 25 Jul 2024 13:24:57 +0000
asID:                     53118
IP address blocks:        177.12.96.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:90:86:2c:48:16:ae:e0:19:f6:ea:34:60:98:d1:ff:e0:04:5c:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 13:19:57 2023 GMT
            Not After : Jul 25 13:24:57 2024 GMT
        Subject: CN=2F14E1832DFFF1C9CB9EF42201F7BEBE06343209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e9:ba:60:48:cc:c9:23:f3:c4:cd:72:f6:a7:
                    83:54:34:02:9c:c2:4a:49:9d:c7:ea:f0:16:af:80:
                    76:a8:93:4e:0d:1c:04:fd:44:d5:5c:b2:88:ad:3b:
                    8a:09:1b:a1:40:91:c6:5b:0f:5a:85:aa:2d:fe:50:
                    c0:e0:dc:4d:c4:bc:55:21:27:d2:31:84:24:3f:1d:
                    58:31:2a:72:ef:05:a6:2a:df:57:00:16:be:9a:e7:
                    95:f9:93:e2:42:30:dc:2c:a4:68:cc:08:bb:af:87:
                    c8:6d:b6:5d:66:33:7c:70:d1:bb:65:d0:7b:85:cf:
                    0b:62:5e:63:41:b6:bb:5c:ac:04:c0:ad:40:f9:d4:
                    99:ee:2c:65:45:8d:0b:ba:f4:c7:0a:98:90:f0:c7:
                    8f:bc:21:e7:f3:19:57:48:a5:6d:93:11:b1:17:cf:
                    eb:30:cd:1b:87:04:43:45:49:1c:05:2d:ae:65:d9:
                    2a:64:5a:bd:33:3f:ce:93:4a:04:bc:d0:cb:be:7c:
                    22:43:8c:06:83:a7:5b:0b:5f:ba:69:7b:57:a6:e5:
                    0e:58:b5:22:e4:8e:db:f8:b6:4c:f6:5d:a0:60:de:
                    66:f9:8d:3f:01:b1:2d:11:3c:23:8a:6b:0b:46:88:
                    20:93:ec:df:40:ec:9f:bc:20:fc:76:aa:07:1a:4f:
                    49:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:14:E1:83:2D:FF:F1:C9:CB:9E:F4:22:01:F7:BE:BE:06:34:32:09
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e39362e302f32332d3233203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:c0:b6:15:49:3c:d6:27:21:43:ef:87:8d:28:d5:68:61:52:
         b9:ea:39:39:26:b0:43:7b:a6:d2:a4:a7:19:7f:cd:75:d5:35:
         01:e0:d6:e8:7f:f7:35:f4:ab:ac:9e:60:6c:f8:df:f8:fc:49:
         ef:39:94:26:6f:29:c0:07:11:47:f0:e2:18:23:ed:49:b8:f0:
         27:e6:e7:b0:dc:96:0f:1a:0f:1c:ac:a9:63:e0:ce:2c:fb:fa:
         f1:35:93:eb:0d:8f:08:03:3d:37:75:98:c0:99:1d:e7:93:31:
         5c:cd:fa:10:3f:5f:34:1c:a4:06:e2:dc:6d:f1:59:02:be:81:
         3c:0b:d4:cf:54:74:32:10:a1:a7:34:ed:51:fb:b8:30:c1:e6:
         80:ba:1c:30:f7:61:8e:17:65:90:c8:04:93:0c:27:d8:d3:9f:
         e0:3a:00:57:0c:73:92:e6:80:19:31:48:1e:97:9a:43:82:c6:
         92:ff:e5:82:f7:e4:df:39:e2:8a:bb:f4:e5:03:97:3a:c3:b4:
         be:bd:29:c6:a6:06:d8:f8:d6:6f:a1:9f:0c:6d:bf:aa:6f:1b:
         5b:6d:28:51:2e:72:74:73:9f:ee:7d:1b:8a:e4:e3:2b:a1:35:
         dd:4d:5b:3f:5e:38:97:5b:2b:46:20:9c:a3:eb:90:a4:2c:15:
         4e:a8:6e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org