Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3137372e3132392e3233362e302f32322d3234203d3e203238353834.roa
File: 3137372e3132392e3233362e302f32322d3234203d3e203238353834.roa (raw, json)
Hash identifier: GAYFdkNDUtufp3vHe4SLhfntMfeSuTWuF/900NObEko=
Subject key identifier: D5:FA:92:B8:FE:3E:6A:55:E6:38:E6:7F:4F:7E:F0:D5:4C:A4:5A:B6
Certificate issuer: /CN=B3EC7F5F7D6B690F3B724BC2B063C17F2D5419B9
Certificate serial: 078FCDFB2F06DDBB397180609A7A00C0120BD814
Authority key identifier: B3:EC:7F:5F:7D:6B:69:0F:3B:72:4B:C2:B0:63:C1:7F:2D:54:19:B9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3EC7F5F7D6B690F3B724BC2B063C17F2D5419B9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3137372e3132392e3233362e302f32322d3234203d3e203238353834.roa
Signing time: Sat 04 Apr 2026 17:27:12 +0000
ROA not before: Sat 04 Apr 2026 17:22:12 +0000
ROA not after: Sat 03 Apr 2027 17:27:12 +0000
asID: 28584
IP address blocks: 177.129.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:8f:cd:fb:2f:06:dd:bb:39:71:80:60:9a:7a:00:c0:12:0b:d8:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3EC7F5F7D6B690F3B724BC2B063C17F2D5419B9
Validity
Not Before: Apr 4 17:22:12 2026 GMT
Not After : Apr 3 17:27:12 2027 GMT
Subject: CN=D5FA92B8FE3E6A55E638E67F4F7EF0D54CA45AB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:03:6d:c4:8a:82:13:fc:7e:4c:64:1c:53:2c:
41:4d:f0:b1:70:1e:11:70:4f:5a:35:d7:90:d4:7b:
92:42:96:32:13:83:50:5b:cc:f7:46:74:40:5c:89:
e4:83:23:32:e4:3c:d0:62:87:cb:b3:d9:f5:9c:dd:
2b:ca:12:05:39:1e:1d:7c:cd:b2:70:bb:71:f3:41:
22:93:a5:4e:08:32:5f:e2:70:50:63:41:24:89:6c:
4b:b2:2b:ee:ae:19:a6:5b:54:a6:ca:95:c6:55:f0:
3e:d4:20:39:64:7d:c7:d9:30:20:d4:a5:62:4b:e3:
16:3b:8d:de:76:10:7b:14:c9:8d:6a:a9:7b:88:1c:
ed:8b:b7:8c:b2:bb:5d:7d:2d:04:9a:ef:b6:55:5c:
f6:6b:ce:d9:18:5a:0e:99:ef:55:e2:2e:90:81:5b:
08:1c:cd:cb:64:5d:0b:1f:f8:e7:9e:21:43:5c:46:
83:1f:bd:6e:fd:c8:2d:6c:38:ac:bc:cb:8d:b0:85:
64:94:22:6c:e5:e6:67:5c:49:27:b5:9d:c3:d3:b7:
43:ce:ea:08:18:43:35:13:8e:a6:7c:78:2a:c8:06:
f7:88:99:a7:ff:23:10:73:e0:69:08:75:11:85:40:
f4:02:89:8e:43:d3:e9:ab:1c:b1:47:73:1b:ed:95:
25:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FA:92:B8:FE:3E:6A:55:E6:38:E6:7F:4F:7E:F0:D5:4C:A4:5A:B6
X509v3 Authority Key Identifier:
keyid:B3:EC:7F:5F:7D:6B:69:0F:3B:72:4B:C2:B0:63:C1:7F:2D:54:19:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/B3EC7F5F7D6B690F3B724BC2B063C17F2D5419B9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3EC7F5F7D6B690F3B724BC2B063C17F2D5419B9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3137372e3132392e3233362e302f32322d3234203d3e203238353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.129.236.0/22
Signature Algorithm: sha256WithRSAEncryption
68:3a:38:c4:4c:a1:e2:27:1f:d1:97:62:7a:51:8e:2e:68:a2:
d7:f4:50:0e:71:42:b8:4f:c9:cd:62:e0:30:0b:2b:ae:78:f8:
f0:92:b9:8b:11:27:7d:b1:6e:73:8e:ad:e1:b4:59:90:e3:e4:
10:44:a9:7e:b4:50:e8:a4:42:60:12:a4:3a:27:6e:34:d0:e9:
8b:f4:84:f1:f9:b7:fc:ee:4f:75:12:0a:ed:4d:91:4d:87:ac:
64:c5:01:cd:93:ba:e2:24:d8:94:04:f6:db:cd:52:1b:6e:03:
b8:a7:c9:dc:fe:ef:97:68:b9:af:ff:91:40:ca:db:d9:f1:55:
50:4f:3f:0d:04:ae:3f:03:a8:5e:f4:68:8e:e7:09:66:1c:d7:
30:46:3b:d6:02:77:f9:d3:36:24:bd:97:00:31:29:aa:8e:0a:
82:1d:2b:91:36:fe:1a:8a:0a:75:31:f0:b5:51:34:6a:5e:dc:
4d:56:04:7b:d6:ca:ec:07:1b:0a:2f:9e:de:f5:65:d9:5d:26:
70:19:78:db:8d:22:20:09:8a:9e:b1:37:da:90:67:3b:cf:a6:
6f:41:79:2d:b6:9a:d9:61:e6:25:18:0f:76:0e:49:fd:70:3c:
8d:ed:38:f8:e1:66:bf:5d:fc:c6:a1:af:99:6a:d9:1b:97:30:
5d:b9:8b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:37:08 2026 by rpki-client