Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3230312e3134392e3132342e302f32342d3234203d3e203631383531.roa
File: 3230312e3134392e3132342e302f32342d3234203d3e203631383531.roa (raw, json)
Hash identifier: X3Wm6KzWh+QqGC2Zr2NdJq2oVBt52beQGr/srIsVhq0=
Subject key identifier: 6B:76:B7:52:3D:7E:D7:5E:8E:9B:FC:F2:B6:54:EF:D5:24:D5:0C:24
Certificate issuer: /CN=AFA55E041FA0E5D394A1480902275296B12C222A
Certificate serial: 3B50E9A65434549371910606C5B508D1C3164CCB
Authority key identifier: AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3230312e3134392e3132342e302f32342d3234203d3e203631383531.roa
Signing time: Wed 26 Feb 2025 19:36:19 +0000
ROA not before: Wed 26 Feb 2025 19:31:19 +0000
ROA not after: Wed 25 Feb 2026 19:36:19 +0000
asID: 61851
IP address blocks: 201.149.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:50:e9:a6:54:34:54:93:71:91:06:06:c5:b5:08:d1:c3:16:4c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFA55E041FA0E5D394A1480902275296B12C222A
Validity
Not Before: Feb 26 19:31:19 2025 GMT
Not After : Feb 25 19:36:19 2026 GMT
Subject: CN=6B76B7523D7ED75E8E9BFCF2B654EFD524D50C24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3c:f2:86:c0:22:7e:0d:3f:41:8f:59:dd:17:
c3:6c:c2:f6:58:9d:da:fe:e0:e1:25:e9:16:86:a4:
62:25:00:06:d6:7f:2b:7c:5d:4d:c0:57:02:b0:97:
c0:f5:77:3f:a7:97:a7:67:85:83:3c:97:1d:ec:99:
f9:24:2f:53:20:6b:eb:cf:77:00:39:fb:aa:43:dd:
e5:c8:22:6c:d6:51:9b:d3:58:00:f2:8a:f4:49:5d:
f9:13:19:f8:c6:ba:8e:cd:be:fb:42:93:32:40:93:
b3:94:2c:d5:96:c8:f6:11:1d:77:d8:99:dd:25:11:
54:27:9b:0f:31:33:b9:9e:8a:38:98:86:5e:b8:e4:
fb:92:0c:91:6c:9d:e9:d4:b9:c0:0f:e9:9f:c1:a2:
20:05:61:f7:68:fc:e1:9f:c4:4c:f4:79:fe:49:fc:
0f:a3:95:3c:44:42:30:28:4b:b5:6f:eb:4c:8e:9f:
53:f9:af:32:07:01:de:0c:ed:a3:a1:53:15:30:bd:
8f:dc:c5:d1:13:ab:11:0d:b5:c4:de:29:c8:df:80:
ac:0c:b7:18:82:51:73:9d:2b:73:fc:49:11:1c:85:
ea:03:74:a6:90:51:f9:8b:4d:34:c4:64:44:5a:4b:
ae:0a:33:6d:ca:bf:e2:71:27:68:c0:fb:20:3c:8d:
5b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:76:B7:52:3D:7E:D7:5E:8E:9B:FC:F2:B6:54:EF:D5:24:D5:0C:24
X509v3 Authority Key Identifier:
keyid:AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/AFA55E041FA0E5D394A1480902275296B12C222A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3230312e3134392e3132342e302f32342d3234203d3e203631383531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.149.124.0/24
Signature Algorithm: sha256WithRSAEncryption
72:09:40:5e:fd:e7:c2:e0:61:6f:f7:d1:14:59:4f:62:cf:5b:
88:8d:db:0b:ff:8a:9e:bf:e0:1f:af:55:44:42:ba:d8:4d:ac:
8c:62:a9:f5:6e:e5:be:f1:41:25:d7:b3:64:fd:1f:fe:aa:88:
e7:c7:63:8a:6b:e0:09:d7:0b:64:65:46:cb:a7:f8:41:8c:af:
6e:75:5a:8c:a1:2e:bf:49:ec:7a:29:47:7a:34:89:28:a6:07:
e3:fc:71:6c:5a:fc:33:75:51:94:15:12:7b:1e:f4:20:78:19:
4a:9d:43:42:e8:1e:0b:27:61:ba:e7:33:0c:a8:9f:a8:2c:11:
e3:8a:e9:6a:02:29:aa:52:94:19:ea:d8:fa:8d:8e:56:59:31:
54:f8:d1:63:47:3e:aa:bb:37:66:ae:cb:6e:2a:0b:50:6d:b8:
24:4b:7d:ce:85:3e:4f:d7:3c:d3:3f:46:2a:01:e1:be:82:7f:
ce:e3:b1:a6:d9:ad:7d:36:e6:1e:70:ea:e2:5f:c6:e3:ee:b3:
ec:e9:ca:18:32:ae:b2:e4:42:5a:14:bf:52:36:12:ea:ac:c1:
c0:00:43:c2:42:5d:06:15:d2:ed:88:8c:db:f7:58:8c:f6:5b:
89:85:23:6d:ca:fc:bf:d3:e1:37:81:6c:e6:7b:68:2d:0a:04:
b9:eb:3c:1b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUO1DpplQ0VJNxkQYGxbUI0cMWTMswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUZBNTVFMDQxRkEwRTVEMzk0QTE0ODA5MDIyNzUyOTZC
MTJDMjIyQTAeFw0yNTAyMjYxOTMxMTlaFw0yNjAyMjUxOTM2MTlaMDMxMTAvBgNV
BAMTKDZCNzZCNzUyM0Q3RUQ3NUU4RTlCRkNGMkI2NTRFRkQ1MjRENTBDMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpPPKGwCJ+DT9Bj1ndF8NswvZY
ndr+4OEl6RaGpGIlAAbWfyt8XU3AVwKwl8D1dz+nl6dnhYM8lx3smfkkL1Mga+vP
dwA5+6pD3eXIImzWUZvTWADyivRJXfkTGfjGuo7NvvtCkzJAk7OULNWWyPYRHXfY
md0lEVQnmw8xM7meijiYhl645PuSDJFsnenUucAP6Z/BoiAFYfdo/OGfxEz0ef5J
/A+jlTxEQjAoS7Vv60yOn1P5rzIHAd4M7aOhUxUwvY/cxdETqxENtcTeKcjfgKwM
txiCUXOdK3P8SREcheoDdKaQUfmLTTTEZERaS64KM23Kv+JxJ2jA+yA8jVunAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUa3a3Uj1+116Om/zytlTv1STVDCQwHwYDVR0j
BBgwFoAUr6VeBB+g5dOUoUgJAidSlrEsIiowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU1lNzgyWWFacUV3V0YzdVBFSzlrR0g3b0E4a0FzRjlSa2lxdDZUZGpR
QjkvMC9BRkE1NUUwNDFGQTBFNUQzOTRBMTQ4MDkwMjI3NTI5NkIxMkMyMjJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGQTU1RTA0MUZBMEU1RDM5
NEExNDgwOTAyMjc1Mjk2QjEyQzIyMkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlNZTc4MllhWnFFd1dGM3VQRUs5a0dIN29BOGtBc0Y5UmtpcXQ2VGRqUUI5LzAv
MzIzMDMxMmUzMTM0MzkyZTMxMzIzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzEzODM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADJlXwwDQYJKoZIhvcNAQELBQADggEBAHIJQF79
58LgYW/30RRZT2LPW4iN2wv/ip6/4B+vVURCuthNrIxiqfVu5b7xQSXXs2T9H/6q
iOfHY4pr4AnXC2RlRsun+EGMr251WoyhLr9J7HopR3o0iSimB+P8cWxa/DN1UZQV
Ense9CB4GUqdQ0LoHgsnYbrnMwyon6gsEeOK6WoCKapSlBnq2PqNjlZZMVT40WNH
Pqq7N2auy24qC1BtuCRLfc6FPk/XPNM/RioB4b6Cf87jsabZrX025h5w6uJfxuPu
s+zpyhgyrrLkQloUv1I2EuqswcAAQ8JCXQYV0u2IjNv3WIz2W4mFI23K/L/T4TeB
bOZ7aC0KBLnrPBs=
-----END CERTIFICATE-----
Generated at Wed Apr 9 20:10:11 2025 by rpki-client