Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BgEY67vY2vWjEbKCn7LMosJ2Lu6wzYqeZ1TMkD628r5C/0/3230312e34392e3234302e302f32322d3332203d3e20323730393534.roa
File: 3230312e34392e3234302e302f32322d3332203d3e20323730393534.roa (raw, json)
Hash identifier: vHpn9hv/OJW1ZEXIK5KT5x1EJ0E7q4jliOwTTmC+Los=
Subject key identifier: 14:4F:6B:09:A0:F6:6E:E0:98:48:23:B8:71:CD:29:6F:83:B3:79:3E
Certificate issuer: /CN=53AE4C1D924B860BE87CF0663D8D38DF05783F7D
Certificate serial: 23FA4E8B1180AD6DF47C6EC66017907CB8970840
Authority key identifier: 53:AE:4C:1D:92:4B:86:0B:E8:7C:F0:66:3D:8D:38:DF:05:78:3F:7D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53AE4C1D924B860BE87CF0663D8D38DF05783F7D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BgEY67vY2vWjEbKCn7LMosJ2Lu6wzYqeZ1TMkD628r5C/0/3230312e34392e3234302e302f32322d3332203d3e20323730393534.roa
Signing time: Tue 14 Jan 2025 20:10:42 +0000
ROA not before: Tue 14 Jan 2025 20:05:42 +0000
ROA not after: Tue 13 Jan 2026 20:10:42 +0000
asID: 270954
IP address blocks: 201.49.240.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:fa:4e:8b:11:80:ad:6d:f4:7c:6e:c6:60:17:90:7c:b8:97:08:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53AE4C1D924B860BE87CF0663D8D38DF05783F7D
Validity
Not Before: Jan 14 20:05:42 2025 GMT
Not After : Jan 13 20:10:42 2026 GMT
Subject: CN=144F6B09A0F66EE0984823B871CD296F83B3793E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:21:66:6e:b2:80:d6:f7:04:f7:58:62:6a:28:
4b:90:0f:3b:b4:fa:4f:ae:5d:bd:0c:ce:1d:d0:86:
7e:22:fb:dc:80:b2:47:97:9c:06:0e:04:1f:21:f8:
21:75:1a:b1:00:04:fa:3c:a2:43:d5:18:6e:d9:65:
d0:3d:41:04:80:bb:8c:8c:f8:07:f1:cd:b5:cd:c5:
fe:75:79:57:5d:f9:b9:30:a8:e5:37:42:e3:26:d7:
ab:e9:07:09:0a:9c:15:b3:24:54:50:14:2c:1c:c7:
c0:bc:2c:7a:01:6b:40:49:e2:2f:b0:59:e2:5f:49:
ad:b7:a8:fc:e9:71:1f:12:b1:6b:e2:47:08:64:18:
df:ae:ba:c5:ca:24:34:8b:e7:e6:d7:c7:56:c2:3f:
c4:cf:01:9c:cc:d9:59:4b:ae:0a:66:1d:3c:fe:12:
be:3d:47:b8:2e:b2:b9:bb:77:2b:dd:d8:bc:a1:f0:
f2:65:74:25:20:c1:f0:d2:8b:a4:75:bf:5c:6d:7e:
75:d1:7b:08:92:5f:94:9b:90:95:4a:49:28:d4:f3:
5b:79:9b:d0:48:27:8e:1e:52:eb:e6:33:77:20:30:
3f:ee:54:b3:6e:ec:33:a4:7a:08:fb:57:32:25:25:
36:f2:26:d5:5f:34:b1:3b:91:0f:34:3e:ff:55:e2:
e1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4F:6B:09:A0:F6:6E:E0:98:48:23:B8:71:CD:29:6F:83:B3:79:3E
X509v3 Authority Key Identifier:
keyid:53:AE:4C:1D:92:4B:86:0B:E8:7C:F0:66:3D:8D:38:DF:05:78:3F:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BgEY67vY2vWjEbKCn7LMosJ2Lu6wzYqeZ1TMkD628r5C/0/53AE4C1D924B860BE87CF0663D8D38DF05783F7D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53AE4C1D924B860BE87CF0663D8D38DF05783F7D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BgEY67vY2vWjEbKCn7LMosJ2Lu6wzYqeZ1TMkD628r5C/0/3230312e34392e3234302e302f32322d3332203d3e20323730393534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.49.240.0/22
Signature Algorithm: sha256WithRSAEncryption
10:45:fd:9c:f7:24:55:f0:82:03:8b:22:f5:2e:a2:b0:31:df:
fa:98:d3:ca:79:24:50:c7:a6:d8:87:a1:c0:4e:10:2f:f8:2c:
b1:43:9c:38:2e:87:6c:a4:f4:f5:6a:3c:4d:ce:df:12:cc:1d:
d8:b7:c5:3d:fe:ab:d0:f2:69:ef:dc:ce:85:11:3d:0c:52:f9:
21:24:10:54:25:83:01:9c:59:cb:5f:f7:e8:b6:f5:2f:e9:28:
d9:c3:5f:7e:94:7b:66:dc:2e:7e:e5:33:bb:22:73:78:58:17:
7e:6e:3f:51:00:f5:5b:45:4f:eb:a4:63:95:00:4c:fb:48:f5:
e1:12:96:15:51:60:21:52:94:25:15:ea:d0:65:b8:0a:25:79:
84:05:cd:47:3f:25:30:8c:44:b0:a5:ba:5b:7a:92:e8:56:20:
5d:f7:19:d2:2a:e6:7a:5f:23:d6:c1:5c:30:92:f9:ac:76:d6:
1c:08:01:6a:3e:db:f4:0f:99:87:09:e4:95:81:3e:ce:c2:09:
14:05:4f:78:62:8c:f8:99:92:c3:4a:ff:f2:c8:03:00:a0:98:
9d:4a:0b:d0:8a:f6:16:65:13:9f:20:03:9f:45:bd:18:ad:30:
25:4b:e5:a9:2e:de:64:46:7a:e9:a4:94:bc:eb:b1:9a:45:c9:
6b:c5:f9:8f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUI/pOixGArW30fG7GYBeQfLiXCEAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTNBRTRDMUQ5MjRCODYwQkU4N0NGMDY2M0Q4RDM4REYw
NTc4M0Y3RDAeFw0yNTAxMTQyMDA1NDJaFw0yNjAxMTMyMDEwNDJaMDMxMTAvBgNV
BAMTKDE0NEY2QjA5QTBGNjZFRTA5ODQ4MjNCODcxQ0QyOTZGODNCMzc5M0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqIWZusoDW9wT3WGJqKEuQDzu0
+k+uXb0Mzh3Qhn4i+9yAskeXnAYOBB8h+CF1GrEABPo8okPVGG7ZZdA9QQSAu4yM
+AfxzbXNxf51eVdd+bkwqOU3QuMm16vpBwkKnBWzJFRQFCwcx8C8LHoBa0BJ4i+w
WeJfSa23qPzpcR8SsWviRwhkGN+uusXKJDSL5+bXx1bCP8TPAZzM2VlLrgpmHTz+
Er49R7gusrm7dyvd2Lyh8PJldCUgwfDSi6R1v1xtfnXRewiSX5SbkJVKSSjU81t5
m9BIJ44eUuvmM3cgMD/uVLNu7DOkegj7VzIlJTbyJtVfNLE7kQ80Pv9V4uGvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUFE9rCaD2buCYSCO4cc0pb4OzeT4wHwYDVR0j
BBgwFoAUU65MHZJLhgvofPBmPY043wV4P30wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmdFWTY3dlkydldqRWJLQ243TE1vc0oyTHU2d3pZcWVaMVRNa0Q2Mjhy
NUMvMC81M0FFNEMxRDkyNEI4NjBCRTg3Q0YwNjYzRDhEMzhERjA1NzgzRjdELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUzQUU0QzFEOTI0Qjg2MEJF
ODdDRjA2NjNEOEQzOERGMDU3ODNGN0QuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JnRVk2N3ZZMnZXakViS0NuN0xNb3NKMkx1Nnd6WXFlWjFUTWtENjI4cjVDLzAv
MzIzMDMxMmUzNDM5MmUzMjM0MzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM3
MzAzOTM1MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALJMfAwDQYJKoZIhvcNAQELBQADggEBABBF/Zz3
JFXwggOLIvUuorAx3/qY08p5JFDHptiHocBOEC/4LLFDnDguh2yk9PVqPE3O3xLM
Hdi3xT3+q9Dyae/czoURPQxS+SEkEFQlgwGcWctf9+i29S/pKNnDX36Ue2bcLn7l
M7sic3hYF35uP1EA9VtFT+ukY5UATPtI9eESlhVRYCFSlCUV6tBluAoleYQFzUc/
JTCMRLClult6kuhWIF33GdIq5npfI9bBXDCS+ax21hwIAWo+2/QPmYcJ5JWBPs7C
CRQFT3hijPiZksNK//LIAwCgmJ1KC9CK9hZlE58gA59FvRitMCVL5aku3mRGeumk
lLzrsZpFyWvF+Y8=
-----END CERTIFICATE-----
Generated at Wed Apr 9 13:08:35 2025 by rpki-client