Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e39372e302f32342d3234203d3e203533313138.roa
File:                     3137372e31322e39372e302f32342d3234203d3e203533313138.roa (raw, json)
Hash identifier:          JlDp0GN8qjG3zK7dUAXpEpn6/RT25kTkPfUHwV82il8=
Subject key identifier:   73:B2:1E:F3:60:E6:51:C7:74:CF:80:80:50:AD:B1:F2:D1:4C:F7:98
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       07080C69010768118C3CD98AC9FB976AF9EEC26B
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e39372e302f32342d3234203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 13:41:43 +0000
ROA not before:           Thu 27 Jul 2023 13:36:43 +0000
ROA not after:            Thu 25 Jul 2024 13:41:43 +0000
asID:                     53118
IP address blocks:        177.12.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:08:0c:69:01:07:68:11:8c:3c:d9:8a:c9:fb:97:6a:f9:ee:c2:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 13:36:43 2023 GMT
            Not After : Jul 25 13:41:43 2024 GMT
        Subject: CN=73B21EF360E651C774CF808050ADB1F2D14CF798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1b:bf:dd:a3:44:6c:a9:c5:ed:11:5d:ce:bc:
                    28:8c:36:13:c0:94:25:97:23:5c:af:1f:0d:42:62:
                    4b:2a:b4:9f:4b:09:eb:48:cb:8c:3b:c6:a2:19:db:
                    ef:47:37:f6:c6:71:00:30:00:b5:ec:5e:f2:eb:cd:
                    f2:57:82:c0:07:cc:82:d3:b0:15:23:9d:1b:10:91:
                    6f:c4:0d:cf:ad:d7:72:62:b9:2a:2c:a2:58:2c:5c:
                    7b:ac:f3:fd:72:21:b8:3e:bd:85:39:61:e6:b8:0b:
                    58:e7:ed:0a:3e:57:14:a1:3c:11:88:9d:b7:25:f5:
                    51:ff:ba:1b:35:51:8a:34:35:4e:96:1e:32:49:50:
                    4f:9e:a7:d0:2d:e3:f7:a7:8e:27:78:17:80:c7:25:
                    52:85:d7:64:11:60:b8:b5:b0:9d:b2:72:54:dd:39:
                    44:48:5b:a2:80:a1:7c:16:4b:b2:03:a4:d5:06:35:
                    e2:a5:22:96:d9:90:e7:ac:05:bd:1e:18:54:16:1f:
                    69:6d:88:27:e3:aa:7e:44:c9:16:b7:e2:d4:89:06:
                    42:dd:bd:5f:6f:19:c7:7f:7a:d7:3b:7d:de:77:f2:
                    d9:23:25:0a:b7:d4:62:1f:bd:7a:0a:30:6f:25:32:
                    d9:09:37:9f:2a:bf:26:4d:87:41:da:b5:69:d3:b7:
                    8c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B2:1E:F3:60:E6:51:C7:74:CF:80:80:50:AD:B1:F2:D1:4C:F7:98
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e39372e302f32342d3234203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:a0:ce:bd:d4:6d:68:88:fc:23:83:94:d2:aa:f8:91:ec:3d:
         14:c4:c7:5a:16:5d:aa:60:9c:d6:bb:5d:ad:f6:61:4f:39:ce:
         54:9d:ca:72:70:22:5f:8e:c3:01:e0:51:9c:16:08:dd:33:2a:
         57:86:a5:e6:32:bd:d3:35:38:24:d3:ec:b6:bf:8f:c5:b9:78:
         b7:29:07:15:0d:ae:a3:3a:93:8a:30:ff:a7:3c:3d:89:a6:8d:
         c8:d3:e9:7f:4f:21:e1:7c:39:4b:9c:f1:47:e6:2f:cf:6d:06:
         0a:87:8d:f7:10:11:10:b3:5e:23:d9:d4:e3:18:d1:5a:21:1a:
         6e:80:ed:de:48:9c:18:02:5f:3e:55:4f:75:45:85:67:51:1b:
         4b:ef:a1:88:13:af:77:20:8e:40:dd:a5:a7:85:7d:88:2f:8d:
         52:ab:30:9f:98:fe:e5:22:1a:ff:13:d3:26:17:1f:ec:6e:5b:
         42:a1:dc:4b:00:fe:23:bb:40:61:e1:f2:18:8f:f7:ca:53:01:
         6c:ac:2c:2c:ed:14:44:f4:c2:6f:d1:cd:ff:17:e8:75:0a:d4:
         d8:e3:69:2f:65:50:38:5d:ce:b9:db:5a:34:fc:ee:c8:88:5a:
         0e:3a:ab:8e:11:95:d0:53:10:46:0e:95:67:ae:b3:6c:10:52:
         bd:fc:b9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org