Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e39382e302f32342d3234203d3e203533313138.roa
File:                     3137372e31322e39382e302f32342d3234203d3e203533313138.roa (raw, json)
Hash identifier:          Ctz/SRrehR9zdqha7M/lBPjAVjZ2KygxVn5uskr4mNE=
Subject key identifier:   07:E8:BF:73:D4:57:5E:48:FE:C7:1F:9A:72:00:27:61:11:4A:96:83
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       3C04576CE933BDB7FE011B8000F4B11B91ADFD41
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e39382e302f32342d3234203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 13:41:53 +0000
ROA not before:           Thu 27 Jul 2023 13:36:53 +0000
ROA not after:            Thu 25 Jul 2024 13:41:53 +0000
asID:                     53118
IP address blocks:        177.12.98.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:04:57:6c:e9:33:bd:b7:fe:01:1b:80:00:f4:b1:1b:91:ad:fd:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 13:36:53 2023 GMT
            Not After : Jul 25 13:41:53 2024 GMT
        Subject: CN=07E8BF73D4575E48FEC71F9A72002761114A9683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:61:f3:7e:15:90:f5:3a:a3:79:d9:11:ee:ea:
                    e8:24:0c:06:f2:98:8f:f4:4e:c0:9c:35:92:9f:6e:
                    ca:76:22:ca:bc:80:b4:80:04:8d:a5:e1:b0:38:08:
                    61:d0:4b:90:62:a7:b4:d9:a8:c0:98:d6:de:4a:78:
                    28:ff:96:33:8b:aa:68:98:be:87:52:54:21:62:9f:
                    72:05:d7:c9:39:35:bd:57:8c:d0:70:82:b6:02:78:
                    cb:eb:26:d9:d2:64:56:f2:67:95:21:56:74:90:ed:
                    69:fc:55:c9:f1:a2:16:1a:a1:81:26:cc:96:ed:4d:
                    36:76:7f:cf:10:f5:49:96:8a:1b:00:60:f7:d4:61:
                    e0:e2:06:23:06:09:6d:09:35:cf:8f:59:06:0e:61:
                    07:7a:02:04:00:32:6b:1d:bc:3e:e4:7c:70:aa:6d:
                    71:fe:51:ad:dc:b4:55:a2:56:a1:c3:1d:1c:a5:ab:
                    5f:9e:3b:72:34:87:67:62:95:61:17:a7:0b:41:7d:
                    b5:40:06:5a:3d:84:ed:d3:11:e1:f2:40:50:d5:07:
                    bd:13:89:47:4c:13:0a:7e:e8:2b:3e:36:2c:30:0a:
                    6c:bb:1e:17:bc:02:b9:85:73:77:41:a3:c8:61:39:
                    9d:21:8e:6a:38:9a:c6:2b:e1:fb:5e:bc:22:d9:9a:
                    8e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E8:BF:73:D4:57:5E:48:FE:C7:1F:9A:72:00:27:61:11:4A:96:83
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/3137372e31322e39382e302f32342d3234203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:7e:c3:64:be:66:b9:82:89:a2:ea:ec:9e:67:29:66:77:db:
         1f:2e:12:0b:04:ab:57:69:27:57:f3:f4:64:bf:18:60:bc:2f:
         8e:6a:92:b2:11:6f:20:d5:57:c0:0b:4a:9f:04:2d:b7:73:5b:
         d2:2a:b1:57:8b:16:3f:9a:cd:a8:ec:8a:ed:d8:66:58:4f:43:
         1d:02:23:0b:fd:f6:b7:68:42:1d:50:ce:24:29:bc:7e:4e:69:
         54:5f:10:e9:33:4b:3b:95:27:a4:63:37:56:cc:40:c5:27:1e:
         a9:83:45:43:89:4d:bb:00:1b:0f:a9:7d:b5:b5:0f:f5:84:41:
         66:35:f2:2c:c3:90:fd:11:1b:09:ce:0b:22:d0:8e:60:ae:83:
         3c:93:94:15:b9:3e:df:52:dd:83:48:7d:bc:f1:f9:f8:a6:15:
         cb:3a:b1:14:61:08:12:a2:d4:d2:83:1b:32:61:9c:bc:af:01:
         4b:00:1c:08:d9:3e:62:a8:c5:0c:10:60:84:09:7f:ff:be:22:
         af:f4:75:8c:ab:0b:51:90:c7:95:7a:23:59:68:98:88:42:b9:
         b5:1d:f9:fd:36:3c:3b:79:f3:19:fd:88:8e:c3:19:70:1d:21:
         9c:01:08:3a:45:65:72:b5:eb:46:70:29:46:93:83:3c:71:f6:
         3d:35:5a:49
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUPARXbOkzvbf+ARuAAPSxG5Gt/UEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTVFRDFEQUMxNjZGNzFEQzQ2Rjk3QzYxNUU5Mjg3RDdE
NkY5RUE5MTAeFw0yMzA3MjcxMzM2NTNaFw0yNDA3MjUxMzQxNTNaMDMxMTAvBgNV
BAMTKDA3RThCRjczRDQ1NzVFNDhGRUM3MUY5QTcyMDAyNzYxMTE0QTk2ODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuYfN+FZD1OqN52RHu6ugkDAby
mI/0TsCcNZKfbsp2Isq8gLSABI2l4bA4CGHQS5Bip7TZqMCY1t5KeCj/ljOLqmiY
vodSVCFin3IF18k5Nb1XjNBwgrYCeMvrJtnSZFbyZ5UhVnSQ7Wn8VcnxohYaoYEm
zJbtTTZ2f88Q9UmWihsAYPfUYeDiBiMGCW0JNc+PWQYOYQd6AgQAMmsdvD7kfHCq
bXH+Ua3ctFWiVqHDHRylq1+eO3I0h2dilWEXpwtBfbVABlo9hO3TEeHyQFDVB70T
iUdMEwp+6Cs+NiwwCmy7Hhe8ArmFc3dBo8hhOZ0hjmo4msYr4ftevCLZmo4FAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUB+i/c9RXXkj+xx+acgAnYRFKloMwHwYDVR0j
BBgwFoAUle0drBZvcdxG+XxhXpKH19b56pEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVRHMXNMOXJEWDZoalhSMzdheHNYblNockVRaHVqWmdWd0JTSmFpYUpQ
Y2ovMC85NUVEMURBQzE2NkY3MURDNDZGOTdDNjE1RTkyODdEN0Q2RjlFQTkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk1RUQxREFDMTY2RjcxREM0
NkY5N0M2MTVFOTI4N0Q3RDZGOUVBOTEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FURzFzTDlyRFg2aGpYUjM3YXhzWG5TaHJFUWh1alpnVndCU0phaWFKUGNqLzAv
MzEzNzM3MmUzMTMyMmUzOTM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMzMx
MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALEMYjANBgkqhkiG9w0BAQsFAAOCAQEAXn7DZL5muYKJ
oursnmcpZnfbHy4SCwSrV2knV/P0ZL8YYLwvjmqSshFvINVXwAtKnwQtt3Nb0iqx
V4sWP5rNqOyK7dhmWE9DHQIjC/32t2hCHVDOJCm8fk5pVF8Q6TNLO5UnpGM3VsxA
xSceqYNFQ4lNuwAbD6l9tbUP9YRBZjXyLMOQ/REbCc4LItCOYK6DPJOUFbk+31Ld
g0h9vPH5+KYVyzqxFGEIEqLU0oMbMmGcvK8BSwAcCNk+YqjFDBBghAl//74ir/R1
jKsLUZDHlXojWWiYiEK5tR35/TY8O3nzGf2IjsMZcB0hnAEIOkVlcrXrRnApRpOD
PHH2PTVaSQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org