Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/3136342e3136332e32372e302f32342d3234203d3e20323635393336.roa
File:                     3136342e3136332e32372e302f32342d3234203d3e20323635393336.roa (raw, json)
Hash identifier:          p96a8jT5gRa7BxWGBSXFmAj2ekcB2UyxUJjSX2kouTo=
Subject key identifier:   DE:D7:3E:81:53:40:77:77:DB:D9:D0:8E:C0:86:2D:44:17:82:2E:79
Certificate issuer:       /CN=BABE217A352A9C190E5C0DA6541119FAA849CCE8
Certificate serial:       62BE4609F703CE6DAC5BA9FD8C8927C51D4A2F40
Authority key identifier: BA:BE:21:7A:35:2A:9C:19:0E:5C:0D:A6:54:11:19:FA:A8:49:CC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BABE217A352A9C190E5C0DA6541119FAA849CCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/3136342e3136332e32372e302f32342d3234203d3e20323635393336.roa
Signing time:             Tue 04 Feb 2025 19:52:02 +0000
ROA not before:           Tue 04 Feb 2025 19:47:02 +0000
ROA not after:            Tue 03 Feb 2026 19:52:02 +0000
asID:                     265936
IP address blocks:        164.163.27.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:be:46:09:f7:03:ce:6d:ac:5b:a9:fd:8c:89:27:c5:1d:4a:2f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BABE217A352A9C190E5C0DA6541119FAA849CCE8
        Validity
            Not Before: Feb  4 19:47:02 2025 GMT
            Not After : Feb  3 19:52:02 2026 GMT
        Subject: CN=DED73E8153407777DBD9D08EC0862D4417822E79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0a:c9:cc:f5:05:aa:ce:8b:9d:36:70:0d:9e:
                    ee:f9:97:0c:3e:b8:ef:ef:50:00:04:28:54:0e:e1:
                    9f:0e:b1:0d:49:9a:f6:44:2d:27:d5:cc:9a:c3:63:
                    57:87:c9:88:ec:b4:46:62:d9:01:48:c6:f5:fb:91:
                    cb:bb:5f:fb:59:34:15:47:ae:90:4c:f9:48:ca:bc:
                    66:09:32:db:17:36:0d:b0:30:b4:91:bb:5b:d5:da:
                    e3:fd:e0:18:ba:e8:90:1f:8d:b1:be:03:81:6a:76:
                    34:dc:e3:ff:45:12:43:e5:63:6f:f3:b5:c4:4c:2e:
                    77:40:29:32:f2:76:0a:ef:b3:ae:28:5d:e5:eb:bb:
                    c6:2c:42:9c:71:24:d1:b7:44:ac:33:88:2a:10:69:
                    38:98:e4:8f:92:ae:af:dc:7e:7f:fc:cd:c5:3c:a1:
                    f4:88:7e:5f:76:d5:7c:67:b2:e8:00:e7:24:a8:c1:
                    42:39:25:14:ab:98:e9:fb:ab:9d:4a:24:11:6a:f4:
                    4e:77:59:43:d3:38:70:69:5d:0a:31:30:33:74:58:
                    94:b0:7b:3e:20:2f:0e:c5:d1:f9:51:2d:f8:fa:72:
                    96:09:1a:3b:c8:da:89:7b:f9:eb:a5:9b:37:44:52:
                    d4:f8:cc:d1:47:33:b7:45:66:6b:cf:f7:52:f6:e5:
                    37:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D7:3E:81:53:40:77:77:DB:D9:D0:8E:C0:86:2D:44:17:82:2E:79
            X509v3 Authority Key Identifier:
                keyid:BA:BE:21:7A:35:2A:9C:19:0E:5C:0D:A6:54:11:19:FA:A8:49:CC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BABE217A352A9C190E5C0DA6541119FAA849CCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/3136342e3136332e32372e302f32342d3234203d3e20323635393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:6f:72:4a:78:0f:c1:f3:f5:44:4e:38:17:22:96:ee:49:f0:
         4e:6a:60:01:5e:77:8e:45:e7:d6:f2:c3:71:ab:5b:83:5f:b4:
         1e:20:e1:3d:71:c5:e9:5b:ed:31:8f:8a:89:4b:d5:c0:e2:47:
         7b:a3:a6:7b:99:6b:a6:98:d1:89:eb:6b:41:15:b4:18:e5:16:
         29:9f:4a:c9:93:01:d5:ee:c1:54:12:4f:5a:f6:87:ac:76:3a:
         e8:ad:0c:91:6c:e6:fc:ac:ba:c9:e4:30:b6:48:14:32:34:17:
         1f:e3:fd:ca:a9:c9:4e:86:a4:b9:ac:7d:c0:aa:2b:fa:43:07:
         67:81:0f:12:b3:58:f5:c9:bf:76:2b:6f:92:da:fc:fc:c4:fc:
         4f:43:e2:07:5c:90:a6:cd:45:77:0b:2a:25:57:90:20:f9:42:
         b6:a4:63:83:c6:ae:b3:b5:44:9f:c5:ed:ba:54:84:b0:f6:71:
         29:d4:1f:5e:0d:6f:f4:13:94:58:4a:f9:27:cf:d0:73:0b:a0:
         c1:be:53:89:1f:f2:e4:de:f0:c4:81:cb:17:ee:b1:e0:d5:d5:
         e1:90:4a:8b:7a:71:f7:53:a7:df:11:44:29:e4:d0:66:44:59:
         fb:dd:c5:91:58:06:a7:d3:e9:ec:82:bb:eb:6e:fa:4d:15:9f:
         76:6d:06:87
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUYr5GCfcDzm2sW6n9jIknxR1KL0AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFCRTIxN0EzNTJBOUMxOTBFNUMwREE2NTQxMTE5RkFB
ODQ5Q0NFODAeFw0yNTAyMDQxOTQ3MDJaFw0yNjAyMDMxOTUyMDJaMDMxMTAvBgNV
BAMTKERFRDczRTgxNTM0MDc3NzdEQkQ5RDA4RUMwODYyRDQ0MTc4MjJFNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjCsnM9QWqzoudNnANnu75lww+
uO/vUAAEKFQO4Z8OsQ1JmvZELSfVzJrDY1eHyYjstEZi2QFIxvX7kcu7X/tZNBVH
rpBM+UjKvGYJMtsXNg2wMLSRu1vV2uP94Bi66JAfjbG+A4FqdjTc4/9FEkPlY2/z
tcRMLndAKTLydgrvs64oXeXru8YsQpxxJNG3RKwziCoQaTiY5I+Srq/cfn/8zcU8
ofSIfl921XxnsugA5ySowUI5JRSrmOn7q51KJBFq9E53WUPTOHBpXQoxMDN0WJSw
ez4gLw7F0flRLfj6cpYJGjvI2ol7+eulmzdEUtT4zNFHM7dFZmvP91L25TefAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU3tc+gVNAd3fb2dCOwIYtRBeCLnkwHwYDVR0j
BBgwFoAUur4hejUqnBkOXA2mVBEZ+qhJzOgwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby91a1pIWmUyVkNhUGtvZUNROUF3eDJwOGRZNExwWnZqTVJpUERxUUN4Y3d3
LzAvQkFCRTIxN0EzNTJBOUMxOTBFNUMwREE2NTQxMTE5RkFBODQ5Q0NFOC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CQUJFMjE3QTM1MkE5QzE5MEU1
QzBEQTY1NDExMTlGQUE4NDlDQ0U4LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby91
a1pIWmUyVkNhUGtvZUNROUF3eDJwOGRZNExwWnZqTVJpUERxUUN4Y3d3LzAvMzEz
NjM0MmUzMTM2MzMyZTMyMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzUz
OTMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBACkoxswDQYJKoZIhvcNAQELBQADggEBAIpvckp4D8Hz
9UROOBcilu5J8E5qYAFed45F59byw3GrW4NftB4g4T1xxelb7TGPiolL1cDiR3uj
pnuZa6aY0Ynra0EVtBjlFimfSsmTAdXuwVQST1r2h6x2OuitDJFs5vysusnkMLZI
FDI0Fx/j/cqpyU6GpLmsfcCqK/pDB2eBDxKzWPXJv3Yrb5La/PzE/E9D4gdckKbN
RXcLKiVXkCD5QrakY4PGrrO1RJ/F7bpUhLD2cSnUH14Nb/QTlFhK+SfP0HMLoMG+
U4kf8uTe8MSByxfuseDV1eGQSot6cfdTp98RRCnk0GZEWfvdxZFYBqfT6eyCu+tu
+k0Vn3ZtBoc=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:41 2025 by rpki-client