Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/3136342e3136332e32352e302f32342d3234203d3e20323635393336.roa
File:                     3136342e3136332e32352e302f32342d3234203d3e20323635393336.roa (raw, json)
Hash identifier:          12J4phbtZEL3YlAS9Z+maO2ga6SeQcGvMj52u1Jj7po=
Subject key identifier:   66:51:F7:59:C4:A0:04:6A:08:8D:93:9F:FD:3E:6D:78:12:45:59:14
Certificate issuer:       /CN=BABE217A352A9C190E5C0DA6541119FAA849CCE8
Certificate serial:       44AD23EDD52F19E08B70EAD5AE13E5D7BF37E524
Authority key identifier: BA:BE:21:7A:35:2A:9C:19:0E:5C:0D:A6:54:11:19:FA:A8:49:CC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BABE217A352A9C190E5C0DA6541119FAA849CCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/3136342e3136332e32352e302f32342d3234203d3e20323635393336.roa
Signing time:             Tue 04 Feb 2025 19:52:02 +0000
ROA not before:           Tue 04 Feb 2025 19:47:02 +0000
ROA not after:            Tue 03 Feb 2026 19:52:02 +0000
asID:                     265936
IP address blocks:        164.163.25.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ad:23:ed:d5:2f:19:e0:8b:70:ea:d5:ae:13:e5:d7:bf:37:e5:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BABE217A352A9C190E5C0DA6541119FAA849CCE8
        Validity
            Not Before: Feb  4 19:47:02 2025 GMT
            Not After : Feb  3 19:52:02 2026 GMT
        Subject: CN=6651F759C4A0046A088D939FFD3E6D7812455914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:66:c7:49:10:92:2e:17:d7:f2:8d:f1:8b:be:
                    60:b0:2f:f5:6e:8e:54:57:c0:ca:f7:88:ad:1e:98:
                    e9:65:d9:4e:b4:f4:7f:e1:35:e1:fe:78:79:dc:f3:
                    1d:cb:67:d0:45:6b:19:cb:35:b2:74:f0:6b:04:22:
                    9f:d2:d3:97:81:11:37:5a:d6:71:79:1d:5f:28:06:
                    ea:bc:4f:7f:60:0a:cc:a8:a4:c4:77:4d:30:cf:3b:
                    60:40:5f:fe:5f:ec:f7:89:87:d0:1d:7b:a3:b6:0a:
                    f0:c0:65:c7:25:96:85:c0:4a:34:b5:98:09:9c:d2:
                    f4:e9:d5:9b:df:d3:8f:c8:2e:17:d9:cb:77:13:8d:
                    78:4a:72:98:f1:09:fd:99:55:08:e9:41:e4:f5:43:
                    40:8d:1d:14:b5:23:37:e4:e4:34:27:31:ae:29:d8:
                    a8:a5:2a:f8:35:70:28:a0:c8:13:c2:39:56:53:e9:
                    c3:6b:06:e2:8d:c2:e5:56:ae:5b:68:39:c1:7a:7f:
                    73:0d:2d:4d:83:52:49:7c:c8:7c:52:2a:12:6c:5b:
                    58:ed:22:da:ac:8c:33:3e:9e:42:92:a1:58:da:7b:
                    6c:ef:97:a9:46:24:cf:92:ac:17:19:e0:f4:cf:d4:
                    b8:53:bc:bb:61:1a:5a:79:45:6a:f9:59:a7:c8:76:
                    fc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:51:F7:59:C4:A0:04:6A:08:8D:93:9F:FD:3E:6D:78:12:45:59:14
            X509v3 Authority Key Identifier:
                keyid:BA:BE:21:7A:35:2A:9C:19:0E:5C:0D:A6:54:11:19:FA:A8:49:CC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BABE217A352A9C190E5C0DA6541119FAA849CCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/3136342e3136332e32352e302f32342d3234203d3e20323635393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:54:8a:0e:1e:62:2d:36:02:be:e8:b8:5e:7e:36:d2:10:90:
         12:a0:1c:cf:8b:ea:2f:58:1a:aa:15:d4:52:74:2b:b5:0f:5a:
         ea:ea:3d:a4:70:c9:b2:f0:23:da:94:57:55:c2:1d:f6:9b:00:
         08:f9:99:09:07:3b:ba:1e:66:6c:f4:c8:35:74:35:78:b1:37:
         f6:eb:a5:93:4f:22:f4:83:ab:fb:33:e1:ba:8f:ed:ff:1b:12:
         6c:a2:a8:dc:7a:21:06:c9:28:88:8e:0b:9b:ce:c7:10:0f:af:
         74:fe:b7:8d:7f:75:ae:ae:ad:c6:52:e9:14:9e:22:29:83:f6:
         d1:eb:d2:c4:b3:ca:3b:bd:fc:f6:21:81:6c:4d:34:ad:0a:07:
         14:2b:09:f6:95:fa:32:5a:d7:2d:92:e9:14:67:fc:b8:30:d8:
         49:8b:4b:6a:bf:20:be:a0:8c:1d:82:64:6a:28:76:2b:a2:b1:
         ec:94:f9:15:30:21:05:e4:db:7f:5d:07:d5:ed:9c:15:db:0b:
         f7:46:be:84:36:68:51:52:29:5e:74:d5:38:3a:2c:45:ab:98:
         19:a9:88:c9:57:e1:dd:34:b5:73:eb:e1:66:d1:3f:94:b8:15:
         40:6e:e8:cd:51:98:49:9a:78:47:b2:e0:2d:ab:9b:e4:1a:6f:
         6a:c3:dc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:35 2025 by rpki-client