Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233342e302f32342d3234203d3e203631383531.roa
File: 3137372e37352e3233342e302f32342d3234203d3e203631383531.roa (raw, json)
Hash identifier: 294lIyNTnmRM4I+hKv6I71dEpWK7TDAlZr+i7fs2KqU=
Subject key identifier: BD:C0:48:0B:E7:03:75:74:6F:15:F1:16:25:1C:46:EC:FF:0A:A9:CE
Certificate issuer: /CN=AFA55E041FA0E5D394A1480902275296B12C222A
Certificate serial: 4C14FC1D0150F6FDA24087A3ECFC021603619F19
Authority key identifier: AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233342e302f32342d3234203d3e203631383531.roa
Signing time: Wed 26 Feb 2025 19:36:21 +0000
ROA not before: Wed 26 Feb 2025 19:31:21 +0000
ROA not after: Wed 25 Feb 2026 19:36:21 +0000
asID: 61851
IP address blocks: 177.75.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:14:fc:1d:01:50:f6:fd:a2:40:87:a3:ec:fc:02:16:03:61:9f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFA55E041FA0E5D394A1480902275296B12C222A
Validity
Not Before: Feb 26 19:31:21 2025 GMT
Not After : Feb 25 19:36:21 2026 GMT
Subject: CN=BDC0480BE70375746F15F116251C46ECFF0AA9CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:76:9d:50:29:22:e8:bf:80:65:ca:c9:1f:71:
e7:5e:c0:35:34:f7:87:3a:6e:57:78:55:2d:cb:ac:
dd:c2:d1:bd:1e:66:a8:3b:34:4f:46:75:42:5a:e4:
51:83:e5:c7:9c:02:ca:9d:0b:cb:78:59:bc:af:eb:
3e:11:f5:80:30:da:76:81:60:9e:af:ff:c1:ae:54:
52:84:25:66:2c:e8:7e:e3:47:18:2d:9f:b4:aa:7d:
28:27:a2:c4:bf:e3:ca:1f:75:dd:0a:f0:9f:f7:78:
fb:8f:a1:08:6b:92:dd:4a:4e:21:6f:6d:a8:12:d2:
de:2c:19:22:2a:5c:66:d6:d0:96:fd:f5:b5:65:c6:
bc:90:f8:e8:35:79:6f:a6:d3:ce:16:e1:73:a0:6b:
64:a6:f0:6b:a0:2a:28:12:2c:d1:55:86:8d:74:03:
ab:e4:56:2a:09:4c:70:1e:6d:41:5c:f6:79:73:b5:
53:76:a2:64:49:41:8e:3f:a8:56:31:7c:9d:d0:6a:
d5:8f:a7:42:9c:8c:6e:4c:f3:ce:83:50:1d:e2:68:
76:bd:16:96:51:59:f6:2c:4d:db:41:53:b4:3d:f7:
f9:10:08:8d:0c:6d:1f:8f:6d:54:48:5b:b3:d7:fd:
b6:ac:99:69:ed:1d:7b:6a:2c:29:20:19:40:09:e4:
7d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C0:48:0B:E7:03:75:74:6F:15:F1:16:25:1C:46:EC:FF:0A:A9:CE
X509v3 Authority Key Identifier:
keyid:AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/AFA55E041FA0E5D394A1480902275296B12C222A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233342e302f32342d3234203d3e203631383531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.75.234.0/24
Signature Algorithm: sha256WithRSAEncryption
87:86:49:c9:bd:1f:60:c6:21:c0:de:3a:e2:51:39:4e:ed:e8:
a9:58:fa:77:d7:48:1f:a8:5a:0f:84:81:aa:60:79:d1:4b:8b:
01:e8:e9:7e:6e:3a:da:bb:74:13:fd:af:d2:9c:f3:6a:c1:61:
9d:d2:dd:ec:80:d5:fb:28:b5:e7:4e:50:a6:3c:ca:e0:f3:77:
a3:ee:db:3c:01:a0:1b:7e:04:fd:29:0e:7e:ef:29:f1:aa:fb:
1b:a5:77:56:db:d2:9f:ca:de:8d:0d:8c:68:5f:a3:eb:3c:6f:
ab:c8:04:1b:fc:5e:cc:d1:b4:ab:08:94:b9:c2:d7:c8:ce:2f:
f6:33:67:7b:d2:9a:f0:89:71:0b:82:8c:32:4e:9a:1f:45:8d:
80:d1:92:75:a2:4a:0f:05:dd:a9:db:e3:aa:8a:64:9c:cf:74:
92:bc:77:b3:88:7c:cc:49:70:f3:e4:54:8f:7e:af:94:f0:b1:
f7:64:82:bd:db:a0:a6:52:2a:44:14:e1:7c:f2:47:49:2b:64:
2a:f8:9b:21:fa:e1:c7:1c:76:c4:b1:51:74:db:4f:4c:7b:4b:
f3:e1:33:59:ee:df:24:c9:d2:9c:c7:16:2c:2d:5f:8c:0b:8e:
52:c7:59:1b:eb:45:5f:27:31:af:6e:ed:7c:ae:ff:8a:82:1a:
ab:dd:81:73
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTBT8HQFQ9v2iQIej7PwCFgNhnxkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUZBNTVFMDQxRkEwRTVEMzk0QTE0ODA5MDIyNzUyOTZC
MTJDMjIyQTAeFw0yNTAyMjYxOTMxMjFaFw0yNjAyMjUxOTM2MjFaMDMxMTAvBgNV
BAMTKEJEQzA0ODBCRTcwMzc1NzQ2RjE1RjExNjI1MUM0NkVDRkYwQUE5Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDndp1QKSLov4BlyskfcedewDU0
94c6bld4VS3LrN3C0b0eZqg7NE9GdUJa5FGD5cecAsqdC8t4Wbyv6z4R9YAw2naB
YJ6v/8GuVFKEJWYs6H7jRxgtn7SqfSgnosS/48ofdd0K8J/3ePuPoQhrkt1KTiFv
bagS0t4sGSIqXGbW0Jb99bVlxryQ+Og1eW+m084W4XOga2Sm8GugKigSLNFVho10
A6vkVioJTHAebUFc9nlztVN2omRJQY4/qFYxfJ3QatWPp0KcjG5M886DUB3iaHa9
FpZRWfYsTdtBU7Q99/kQCI0MbR+PbVRIW7PX/basmWntHXtqLCkgGUAJ5H3DAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUvcBIC+cDdXRvFfEWJRxG7P8Kqc4wHwYDVR0j
BBgwFoAUr6VeBB+g5dOUoUgJAidSlrEsIiowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU1lNzgyWWFacUV3V0YzdVBFSzlrR0g3b0E4a0FzRjlSa2lxdDZUZGpR
QjkvMC9BRkE1NUUwNDFGQTBFNUQzOTRBMTQ4MDkwMjI3NTI5NkIxMkMyMjJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGQTU1RTA0MUZBMEU1RDM5
NEExNDgwOTAyMjc1Mjk2QjEyQzIyMkEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlNZTc4MllhWnFFd1dGM3VQRUs5a0dIN29BOGtBc0Y5UmtpcXQ2VGRqUUI5LzAv
MzEzNzM3MmUzNzM1MmUzMjMzMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzgzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsUvqMA0GCSqGSIb3DQEBCwUAA4IBAQCHhknJvR9g
xiHA3jriUTlO7eipWPp310gfqFoPhIGqYHnRS4sB6Ol+bjrau3QT/a/SnPNqwWGd
0t3sgNX7KLXnTlCmPMrg83ej7ts8AaAbfgT9KQ5+7ynxqvsbpXdW29Kfyt6NDYxo
X6PrPG+ryAQb/F7M0bSrCJS5wtfIzi/2M2d70prwiXELgowyTpofRY2A0ZJ1okoP
Bd2p2+OqimScz3SSvHeziHzMSXDz5FSPfq+U8LH3ZIK926CmUipEFOF88kdJK2Qq
+Jsh+uHHHHbEsVF0209Me0vz4TNZ7t8kydKcxxYsLV+MC45Sx1kb60VfJzGvbu18
rv+Kghqr3YFz
-----END CERTIFICATE-----
Generated at Wed Apr 9 20:05:22 2025 by rpki-client