Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e39382e302f32332d3233203d3e203533313138.roa
File:                     3137372e31322e39382e302f32332d3233203d3e203533313138.roa (raw, json)
Hash identifier:          5d4TCQgFVQf7RGHRiOSbjVPMJd80VTT2WnP5LVq90dA=
Subject key identifier:   E6:77:2A:E1:04:5B:BA:23:D2:F4:B1:D3:55:41:B2:F2:80:41:0A:45
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       0FA30A275D85185B3D9E03E3CAE0F87F0C37E895
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e39382e302f32332d3233203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 13:25:07 +0000
ROA not before:           Thu 27 Jul 2023 13:20:07 +0000
ROA not after:            Thu 25 Jul 2024 13:25:07 +0000
asID:                     53118
IP address blocks:        177.12.98.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a3:0a:27:5d:85:18:5b:3d:9e:03:e3:ca:e0:f8:7f:0c:37:e8:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 13:20:07 2023 GMT
            Not After : Jul 25 13:25:07 2024 GMT
        Subject: CN=E6772AE1045BBA23D2F4B1D35541B2F280410A45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:be:fc:95:e4:58:be:8a:9d:c0:fc:8f:9a:09:
                    b2:5e:47:d9:b3:f0:92:25:df:65:f5:c3:bd:c6:ca:
                    97:0d:1e:37:66:c9:c0:8f:e0:70:00:82:56:45:fe:
                    1d:21:5b:1f:bc:1e:cd:90:22:8a:45:e9:22:88:35:
                    ce:23:e3:cd:36:e0:d6:c4:83:05:f8:c2:ba:ea:0d:
                    a9:51:7a:53:34:45:10:b1:e6:63:11:34:15:2a:fb:
                    66:5d:8b:a8:74:b8:9d:10:a2:d4:51:d4:8f:99:a6:
                    d1:10:9e:0a:b2:29:80:9a:8e:60:4e:96:dd:80:bc:
                    ce:72:e2:b4:95:00:4b:7a:33:82:93:56:1d:3f:d4:
                    83:62:84:89:ce:0c:b8:1a:2f:5e:08:e3:da:94:00:
                    2a:38:32:21:5e:f4:45:57:65:19:fb:47:39:06:a3:
                    80:2d:83:6e:1c:88:69:e0:3c:da:1c:4c:94:e7:d5:
                    69:b3:6f:c3:1e:d8:e7:ec:fb:f1:2f:48:a9:43:1d:
                    f7:42:75:7b:02:a1:33:81:02:60:f6:08:8f:58:2d:
                    d2:97:15:1f:99:0a:0c:23:23:84:0e:f3:54:fa:74:
                    e9:cc:09:6c:9e:84:4d:73:67:ed:86:f1:3f:7d:9a:
                    08:96:47:64:90:0e:94:e6:05:b1:3b:b0:26:c8:79:
                    88:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:77:2A:E1:04:5B:BA:23:D2:F4:B1:D3:55:41:B2:F2:80:41:0A:45
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e39382e302f32332d3233203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:b8:ad:d3:b7:06:8c:bf:93:13:44:ba:8d:8e:78:79:b2:a8:
         11:93:7d:0e:61:d5:7b:e3:71:96:ed:24:b9:3b:17:8b:0c:cf:
         cb:58:e1:53:ea:2f:dd:d6:1a:b2:01:13:6a:e9:c0:c5:05:fc:
         17:a9:75:70:c3:eb:01:2c:20:d1:cd:83:f2:f4:c9:3b:e4:84:
         9b:03:c2:35:5b:bb:a5:0a:2d:c7:39:e8:d3:f2:a1:9f:ee:9e:
         89:30:5c:a8:27:b7:44:8d:d3:6e:c4:6f:81:ce:90:2d:45:0c:
         86:9a:a6:2b:ae:7a:2b:2b:20:75:a7:28:ef:c8:36:e9:6b:f2:
         c1:69:87:03:48:15:53:06:a7:2d:04:ca:5e:21:0a:51:a6:32:
         bd:cd:bc:2b:5f:59:13:1c:ba:db:1a:15:83:0e:13:84:ba:57:
         26:5e:e9:6a:18:4e:ed:2a:42:fd:b4:c5:99:b0:86:29:de:ef:
         53:53:4c:44:a4:8c:e5:91:21:36:cc:01:dc:06:11:66:24:30:
         6e:07:d4:a0:d7:fa:3d:98:08:b7:68:05:93:ee:f9:53:cb:4d:
         65:23:81:17:7c:ff:d0:1d:9d:92:e6:26:23:69:46:b9:9a:b9:
         3f:00:1e:6f:38:21:3e:b3:0b:4e:38:ad:3a:55:58:ca:cb:f4:
         40:50:91:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org