Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e39362e302f32342d3234203d3e203533313138.roa
File:                     3137372e31322e39362e302f32342d3234203d3e203533313138.roa (raw, json)
Hash identifier:          gmB0dkyjeNGTG/0ohltoxe4f0RveQFnDYr8uRVKNdTc=
Subject key identifier:   A1:8A:FA:5F:3B:ED:86:C7:33:71:15:53:78:2C:54:0C:C7:3A:F6:9E
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       2AF2A1BF1337A7D9F4C6126766AD77B8C5898D56
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e39362e302f32342d3234203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 13:41:32 +0000
ROA not before:           Thu 27 Jul 2023 13:36:32 +0000
ROA not after:            Thu 25 Jul 2024 13:41:32 +0000
asID:                     53118
IP address blocks:        177.12.96.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f2:a1:bf:13:37:a7:d9:f4:c6:12:67:66:ad:77:b8:c5:89:8d:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 13:36:32 2023 GMT
            Not After : Jul 25 13:41:32 2024 GMT
        Subject: CN=A18AFA5F3BED86C733711553782C540CC73AF69E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3f:15:0a:0d:56:e9:e3:65:79:8f:cf:1b:dc:
                    c1:86:d0:38:e8:8b:be:c0:65:1b:d6:94:d4:63:ea:
                    1a:3f:07:ac:38:27:af:a6:5f:fc:b0:8d:7a:18:37:
                    bb:5a:02:7b:87:9a:d8:9a:91:67:64:61:94:00:12:
                    96:c4:d7:36:04:65:87:56:fa:f0:a6:7c:25:3e:15:
                    9a:15:34:d0:a3:ef:49:56:6f:b5:5e:d5:e1:e5:c9:
                    2a:7f:3f:5e:35:e6:e8:65:60:fb:49:8d:f4:57:35:
                    30:2a:b2:bf:a1:13:f0:6e:39:c2:b6:38:dc:b8:1f:
                    36:e6:a1:ba:b2:9d:99:f1:1b:d2:f7:fc:92:be:b0:
                    8c:71:8c:dd:3d:72:10:21:f3:ae:0f:77:8b:25:8a:
                    74:dc:7d:b2:fc:4e:8c:60:1c:6a:d9:a5:ba:83:2e:
                    ba:bc:e2:dd:56:99:18:74:40:ca:21:f4:7b:4f:48:
                    4f:09:b6:dd:87:93:70:f7:bb:3c:84:af:b3:24:de:
                    e8:ce:6a:08:38:7a:78:47:38:3a:5d:1f:e1:06:18:
                    44:cf:8b:d0:c7:f6:8a:4e:b6:41:98:21:06:b1:90:
                    85:0b:6b:5f:d5:48:48:66:cc:88:38:e8:d1:bc:ee:
                    c9:8a:d4:43:cc:1e:82:64:c3:c8:67:61:24:a4:eb:
                    78:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8A:FA:5F:3B:ED:86:C7:33:71:15:53:78:2C:54:0C:C7:3A:F6:9E
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e39362e302f32342d3234203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:57:93:1f:93:d1:e7:93:cd:47:2e:3b:f2:79:23:46:1e:1b:
         e6:c1:da:89:df:a4:90:1b:58:88:5f:4d:26:16:ef:a0:40:5e:
         fe:25:24:f6:f7:03:f0:be:79:ad:8f:0a:bf:9f:86:f6:7a:a5:
         c0:e5:18:af:cd:6c:d0:27:8f:58:47:33:0a:d6:a0:a4:e7:51:
         4b:f0:52:e9:34:f9:f8:de:d2:ce:1b:23:f1:ab:96:53:5d:eb:
         9a:5a:10:fc:2c:87:b1:ad:85:86:ed:d8:94:60:6e:a3:c1:56:
         8a:b0:f7:6d:a0:07:5c:0d:ff:ca:93:c6:13:bc:ed:c9:d8:59:
         93:e7:cf:4b:c1:30:b2:24:b6:32:c1:67:55:b3:f0:58:4d:3b:
         88:2f:dd:9e:92:a5:d6:3d:f9:45:e0:0e:62:7f:b8:6a:d7:4a:
         e3:e8:4f:81:17:d5:9e:54:e7:bf:49:f7:66:cb:5c:a0:5f:f9:
         13:2c:47:af:b6:e8:88:0d:5d:58:83:d1:6b:bc:47:de:80:93:
         ec:05:61:a2:15:2a:84:12:96:da:27:03:85:70:0f:72:fa:4a:
         bb:f5:02:31:ca:6d:9f:39:dc:e0:3c:20:82:0a:ac:9d:26:b4:
         ff:d8:2c:a6:66:79:bf:7b:e8:38:cb:d6:83:e6:f9:ff:08:b5:
         03:07:37:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org