Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/3137372e3132392e33362e302f32322d3332203d3e20323730353838.roa
File:                     3137372e3132392e33362e302f32322d3332203d3e20323730353838.roa (raw, json)
Hash identifier:          odKMT946Xiy79Chbv3/x+r0iZCLcr+4yKHHP329vhqE=
Subject key identifier:   F2:C6:8F:98:2B:A0:70:F9:DD:7D:30:50:06:C0:4D:1B:48:3E:4B:BC
Certificate issuer:       /CN=158AEF27B3C63D34A7E29654EDFCAF891E750A77
Certificate serial:       5B89FCA04A6DC15428F0AA6DBD7AD5A0BDC5724D
Authority key identifier: 15:8A:EF:27:B3:C6:3D:34:A7:E2:96:54:ED:FC:AF:89:1E:75:0A:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/158AEF27B3C63D34A7E29654EDFCAF891E750A77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/3137372e3132392e33362e302f32322d3332203d3e20323730353838.roa
Signing time:             Fri 04 Aug 2023 03:42:55 +0000
ROA not before:           Fri 04 Aug 2023 03:37:55 +0000
ROA not after:            Fri 02 Aug 2024 03:42:55 +0000
asID:                     270588
IP address blocks:        177.129.36.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:89:fc:a0:4a:6d:c1:54:28:f0:aa:6d:bd:7a:d5:a0:bd:c5:72:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=158AEF27B3C63D34A7E29654EDFCAF891E750A77
        Validity
            Not Before: Aug  4 03:37:55 2023 GMT
            Not After : Aug  2 03:42:55 2024 GMT
        Subject: CN=F2C68F982BA070F9DD7D305006C04D1B483E4BBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7b:64:47:c9:30:58:60:f8:9a:0c:76:58:a9:
                    72:c4:90:89:69:ae:02:6c:e5:0f:ee:7e:d6:94:ed:
                    5b:e7:2a:1b:12:48:9a:43:31:0c:3e:90:97:45:cc:
                    b7:1f:81:d1:91:31:f6:83:24:8b:35:2b:3e:93:95:
                    e4:c6:29:ed:4f:1f:aa:3f:47:58:1c:03:d7:9e:dd:
                    c2:04:81:f6:b0:70:65:f1:a4:3e:fd:70:86:c3:e1:
                    46:be:77:35:19:1b:f2:13:13:02:17:2f:a2:6e:8a:
                    26:60:23:29:d4:18:dc:b8:93:c2:20:96:ee:ad:c1:
                    6d:64:02:fb:e6:33:42:b5:df:5c:3d:ac:f0:18:0f:
                    4d:14:e7:25:ed:b4:b2:3c:0c:33:61:04:d4:f5:9d:
                    fa:0e:64:da:a4:61:81:ec:9c:8a:9e:d1:01:19:26:
                    0e:05:5a:03:82:94:c4:30:58:37:b7:02:20:b0:6a:
                    ae:94:ef:c4:bc:b5:83:3c:1f:bf:d4:71:12:4f:56:
                    1e:91:d8:c7:34:57:2a:27:69:15:34:ce:02:20:3a:
                    a1:33:c3:cb:2a:b5:de:44:ab:77:72:e9:15:b3:29:
                    5c:a0:4b:a1:51:51:cb:a2:3b:55:bd:4a:4b:ab:b3:
                    18:29:bc:42:2a:7e:fe:c1:30:33:f2:5d:11:ed:37:
                    4b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C6:8F:98:2B:A0:70:F9:DD:7D:30:50:06:C0:4D:1B:48:3E:4B:BC
            X509v3 Authority Key Identifier:
                keyid:15:8A:EF:27:B3:C6:3D:34:A7:E2:96:54:ED:FC:AF:89:1E:75:0A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/158AEF27B3C63D34A7E29654EDFCAF891E750A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/158AEF27B3C63D34A7E29654EDFCAF891E750A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/3137372e3132392e33362e302f32322d3332203d3e20323730353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:5d:3f:62:59:51:07:ed:6e:18:46:9f:18:d4:7a:8a:bf:d0:
         2b:77:23:40:cf:f5:9e:7c:7e:79:49:9e:a4:5d:bc:4c:d4:ed:
         1d:5d:10:da:9b:5e:93:a2:93:54:bb:26:00:d2:ff:0c:f2:fa:
         48:24:93:8c:60:83:de:66:e0:1d:a1:7c:57:58:16:5e:b6:a8:
         67:9c:52:4f:98:f7:6f:07:e3:b4:87:ab:29:9c:fc:85:86:89:
         66:f8:61:e4:76:e4:18:de:c9:be:45:b3:c8:8d:80:9d:33:79:
         3b:93:de:8b:a2:12:d5:8b:bf:db:9c:56:51:1a:10:d7:44:05:
         e1:94:9a:fa:65:79:f2:88:b2:37:92:f9:f9:83:d0:ca:9e:f4:
         11:fa:6e:60:be:0b:77:8e:df:8d:21:d6:3e:f9:09:6f:51:6d:
         d1:6e:ce:39:23:37:34:7b:dd:b9:5c:92:78:39:71:39:3f:0b:
         e5:97:ed:cf:c9:3f:e7:20:ac:25:3e:d3:b3:9c:5e:d5:89:34:
         d5:8f:50:15:f7:18:b7:14:eb:20:bf:48:68:9b:57:7d:c1:f9:
         b4:2c:f5:95:b7:1d:38:64:0a:0b:30:26:89:75:74:08:2c:b1:
         11:bb:fb:80:50:f5:87:9e:a0:bb:27:64:95:9c:80:b6:15:dc:
         68:3a:f4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org