Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3230312e3134392e3132362e302f32342d3234203d3e203631383531.roa
File: 3230312e3134392e3132362e302f32342d3234203d3e203631383531.roa (raw, json)
Hash identifier: eKDUAJGAnTLVy8HiIsTZ1VBPQeaS45ggzx+fkNYARsY=
Subject key identifier: 96:88:A0:0A:72:FF:A4:2D:FB:4D:27:55:E0:DA:F8:72:BC:94:29:DE
Certificate issuer: /CN=AFA55E041FA0E5D394A1480902275296B12C222A
Certificate serial: 3127A5A4DFB9F2A7B45C76BC8D26D7FAABBFCB65
Authority key identifier: AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3230312e3134392e3132362e302f32342d3234203d3e203631383531.roa
Signing time: Wed 26 Feb 2025 19:36:21 +0000
ROA not before: Wed 26 Feb 2025 19:31:21 +0000
ROA not after: Wed 25 Feb 2026 19:36:21 +0000
asID: 61851
IP address blocks: 201.149.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:27:a5:a4:df:b9:f2:a7:b4:5c:76:bc:8d:26:d7:fa:ab:bf:cb:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFA55E041FA0E5D394A1480902275296B12C222A
Validity
Not Before: Feb 26 19:31:21 2025 GMT
Not After : Feb 25 19:36:21 2026 GMT
Subject: CN=9688A00A72FFA42DFB4D2755E0DAF872BC9429DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:85:36:40:4d:90:cc:f7:02:82:d4:63:54:e3:
ea:5d:53:21:11:94:6d:f3:61:79:e0:cf:05:a1:0e:
70:3d:04:46:2b:b0:63:3a:c9:48:c7:c1:ac:bf:fa:
8f:41:b6:6b:d2:21:60:ac:bd:ef:06:1e:37:1b:ab:
6f:84:87:33:55:3f:3c:b4:38:d9:e4:d8:8e:f3:91:
5c:87:91:b4:44:3b:cf:ff:c0:91:6f:0d:62:ce:6d:
d1:8b:ed:b9:eb:ec:62:66:e9:68:d4:48:77:4c:d8:
22:6c:0f:26:85:5f:c9:9e:f2:e0:ed:70:ad:5c:df:
50:96:c9:e9:65:78:eb:31:65:92:dc:0a:ac:95:e0:
51:92:1c:80:3e:fb:a7:b0:a9:d0:48:65:8a:56:53:
3e:f4:10:e6:db:24:09:d1:dc:57:d9:fd:1a:7f:0c:
10:c7:4b:ea:11:ad:86:7d:6f:7e:65:63:5b:20:65:
f6:16:fe:56:23:9e:b4:d3:6f:d3:a1:70:95:d3:a2:
9d:5b:f8:88:f7:40:c9:c4:3d:21:b1:2f:23:2f:f7:
82:0f:7f:4a:c3:76:d2:38:80:6f:8b:bc:05:e3:4b:
30:ee:cd:9e:63:2e:49:73:de:1b:12:24:8b:b8:7d:
49:ba:03:67:8b:42:48:5a:0b:c8:3b:65:61:c6:ab:
30:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:88:A0:0A:72:FF:A4:2D:FB:4D:27:55:E0:DA:F8:72:BC:94:29:DE
X509v3 Authority Key Identifier:
keyid:AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/AFA55E041FA0E5D394A1480902275296B12C222A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3230312e3134392e3132362e302f32342d3234203d3e203631383531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.149.126.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:5d:72:18:a2:86:41:60:6a:e6:1a:b6:be:27:76:89:6c:35:
89:0b:2d:49:77:a8:56:1e:dc:61:15:fd:1c:ed:f6:4a:50:3b:
b8:ed:2f:e5:9c:fa:71:9f:43:e7:46:61:52:54:44:b4:b6:14:
81:0e:cb:3d:bd:55:a3:36:6d:a6:c9:37:b0:dd:89:98:e8:72:
17:35:4e:5e:5f:24:d5:87:6e:93:c1:82:f1:61:05:fd:fe:6c:
14:87:f2:d3:fb:dc:be:a2:de:0e:a8:4b:9d:17:ab:20:3c:bc:
a6:f3:78:3f:4a:45:c5:68:f3:38:c4:09:6f:3f:0a:1b:5f:c8:
51:7d:a3:55:33:92:df:6c:db:dd:43:39:30:e4:22:d0:e5:f1:
2f:15:41:13:07:ff:3b:05:bf:25:1b:5c:3c:5d:49:19:b8:16:
dd:29:b0:df:79:39:67:6c:d4:7c:24:f8:b7:57:39:7d:3f:c8:
14:dd:c5:4b:6c:88:5e:4d:09:a1:ca:a3:b4:da:a1:d2:f2:03:
65:d1:03:03:d5:8b:d2:7d:90:cc:34:0d:1f:82:ce:1b:38:dd:
bf:3e:c5:6b:b9:6a:bf:cc:5b:9a:38:8f:9f:f2:f1:e3:00:bb:
5e:f4:5a:fd:e6:67:ea:a2:4d:a2:44:45:cf:f0:02:14:d7:ab:
96:3a:a9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:07:41 2025 by rpki-client