Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3230302e3135392e3137362e302f32302d3234203d3e203238353834.roa
File: 3230302e3135392e3137362e302f32302d3234203d3e203238353834.roa (raw, json)
Hash identifier: TNKz1FV49hVyjMUCMPsQgfCwYSOIuTelyNaMvD0D/l8=
Subject key identifier: 5C:E2:8E:5C:B1:70:67:C4:72:D3:FB:08:00:93:BA:B6:92:46:BF:33
Certificate issuer: /CN=B3EC7F5F7D6B690F3B724BC2B063C17F2D5419B9
Certificate serial: 1C261B82C3EC8D8B98B9E29FEA48B6E2E24BBDCA
Authority key identifier: B3:EC:7F:5F:7D:6B:69:0F:3B:72:4B:C2:B0:63:C1:7F:2D:54:19:B9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3EC7F5F7D6B690F3B724BC2B063C17F2D5419B9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3230302e3135392e3137362e302f32302d3234203d3e203238353834.roa
Signing time: Sat 04 Apr 2026 17:26:54 +0000
ROA not before: Sat 04 Apr 2026 17:21:54 +0000
ROA not after: Sat 03 Apr 2027 17:26:54 +0000
asID: 28584
IP address blocks: 200.159.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:26:1b:82:c3:ec:8d:8b:98:b9:e2:9f:ea:48:b6:e2:e2:4b:bd:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3EC7F5F7D6B690F3B724BC2B063C17F2D5419B9
Validity
Not Before: Apr 4 17:21:54 2026 GMT
Not After : Apr 3 17:26:54 2027 GMT
Subject: CN=5CE28E5CB17067C472D3FB080093BAB69246BF33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ba:00:8b:37:b1:b0:bb:f9:cc:7e:c6:51:2f:
bf:ea:68:6d:5b:11:81:be:4a:8d:f5:41:70:1d:6d:
80:d3:ac:08:87:50:a3:ba:f6:da:8f:10:2d:b3:b2:
01:d1:b1:1e:56:77:d4:b6:64:e3:2a:f7:17:a1:7b:
c9:e7:9a:88:f4:48:aa:e4:b2:29:33:4c:f7:08:26:
90:f2:ae:bd:e0:5d:87:37:5a:6e:19:74:8d:cc:00:
a5:3d:ee:e2:84:77:90:6f:8e:e2:bd:7c:0b:a1:1b:
2d:a8:ba:30:a9:a4:ea:9f:69:ad:49:c2:52:ac:2c:
a0:eb:4d:dc:69:a4:e7:c2:74:eb:a0:2d:e3:33:98:
61:30:3a:1e:83:92:07:d3:1b:d0:52:20:8b:da:d1:
7f:5f:4c:e3:d2:bd:4c:eb:cf:70:4f:1e:02:b4:93:
a0:51:66:c4:a4:2a:95:87:1a:2d:6f:a7:45:77:3d:
70:e7:45:3a:a3:cf:8a:24:2f:f8:b0:d6:51:3e:45:
09:18:70:51:81:50:9f:a0:00:d4:de:f4:f5:49:ac:
30:58:7a:5a:d0:57:df:73:8e:73:5c:29:db:5f:9c:
e3:38:ac:7c:e5:fa:13:6e:3b:7a:d4:56:c4:05:b2:
65:1a:fe:47:03:59:82:30:ae:7a:93:4b:2a:9c:bc:
21:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E2:8E:5C:B1:70:67:C4:72:D3:FB:08:00:93:BA:B6:92:46:BF:33
X509v3 Authority Key Identifier:
keyid:B3:EC:7F:5F:7D:6B:69:0F:3B:72:4B:C2:B0:63:C1:7F:2D:54:19:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/B3EC7F5F7D6B690F3B724BC2B063C17F2D5419B9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3EC7F5F7D6B690F3B724BC2B063C17F2D5419B9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3230302e3135392e3137362e302f32302d3234203d3e203238353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.159.176.0/20
Signature Algorithm: sha256WithRSAEncryption
d0:93:49:4e:6f:e3:a4:85:88:cd:65:10:ab:c4:74:2c:d3:ce:
a2:11:70:80:f2:b2:93:2a:10:8f:21:09:85:c9:e2:7c:15:58:
8e:1b:68:eb:e3:ba:c6:e7:85:a0:91:fe:ce:98:4e:70:3e:c9:
dc:17:ea:53:8b:ff:cc:f2:82:26:5e:ec:a9:ee:e5:06:af:6e:
b0:9f:5d:ca:d4:58:5d:b7:b0:0d:af:7d:6d:64:d1:ac:21:8c:
e7:a9:9a:66:c4:a8:6d:d2:2d:1a:fc:95:7b:57:8b:d5:28:82:
5d:a0:15:c2:bf:cf:f7:73:90:b7:9c:42:23:a8:57:08:d7:e1:
ce:eb:48:e3:2c:5e:01:15:97:5a:65:84:fa:be:16:87:ba:0b:
62:e2:32:ff:f1:a7:cb:06:ea:80:bc:7c:ac:83:8d:c1:f8:0c:
a5:c3:54:dd:4c:db:48:37:d6:b8:54:15:e4:b3:92:72:ea:d9:
80:b0:9b:c0:22:65:88:72:fd:c1:64:ab:8b:6d:3b:d5:3f:bf:
f0:63:78:54:d8:4d:9f:3b:d8:a0:9e:97:1a:a1:22:15:18:9a:
35:98:d0:f3:93:4c:b7:c0:e0:c5:81:6f:6d:cd:20:17:89:cb:
a3:8b:73:4d:37:c9:28:59:98:96:53:57:3b:63:26:f9:50:44:
27:36:f3:f0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHCYbgsPsjYuYueKf6ki24uJLvcowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNFQzdGNUY3RDZCNjkwRjNCNzI0QkMyQjA2M0MxN0Yy
RDU0MTlCOTAeFw0yNjA0MDQxNzIxNTRaFw0yNzA0MDMxNzI2NTRaMDMxMTAvBgNV
BAMTKDVDRTI4RTVDQjE3MDY3QzQ3MkQzRkIwODAwOTNCQUI2OTI0NkJGMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKugCLN7Gwu/nMfsZRL7/qaG1b
EYG+So31QXAdbYDTrAiHUKO69tqPEC2zsgHRsR5Wd9S2ZOMq9xehe8nnmoj0SKrk
sikzTPcIJpDyrr3gXYc3Wm4ZdI3MAKU97uKEd5BvjuK9fAuhGy2oujCppOqfaa1J
wlKsLKDrTdxppOfCdOugLeMzmGEwOh6DkgfTG9BSIIva0X9fTOPSvUzrz3BPHgK0
k6BRZsSkKpWHGi1vp0V3PXDnRTqjz4okL/iw1lE+RQkYcFGBUJ+gANTe9PVJrDBY
elrQV99zjnNcKdtfnOM4rHzl+hNuO3rUVsQFsmUa/kcDWYIwrnqTSyqcvCE1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUXOKOXLFwZ8Ry0/sIAJO6tpJGvzMwHwYDVR0j
BBgwFoAUs+x/X31raQ87ckvCsGPBfy1UGbkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkFtVWMycnQ4RVVTbkRRb1JyWWdnUVJNNExWbW5kM2dmTnRVc2dwMVhR
a1AvMC9CM0VDN0Y1RjdENkI2OTBGM0I3MjRCQzJCMDYzQzE3RjJENTQxOUI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzRUM3RjVGN0Q2QjY5MEYz
QjcyNEJDMkIwNjNDMTdGMkQ1NDE5QjkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJBbVVjMnJ0OEVVU25EUW9ScllnZ1FSTTRMVm1uZDNnZk50VXNncDFYUWtQLzAv
MzIzMDMwMmUzMTM1MzkyZTMxMzczNjJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMy
MzgzNTM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBATIn7AwDQYJKoZIhvcNAQELBQADggEBANCTSU5v
46SFiM1lEKvEdCzTzqIRcIDyspMqEI8hCYXJ4nwVWI4baOvjusbnhaCR/s6YTnA+
ydwX6lOL/8zygiZe7Knu5QavbrCfXcrUWF23sA2vfW1k0awhjOepmmbEqG3SLRr8
lXtXi9Uogl2gFcK/z/dzkLecQiOoVwjX4c7rSOMsXgEVl1plhPq+Foe6C2LiMv/x
p8sG6oC8fKyDjcH4DKXDVN1M20g31rhUFeSzknLq2YCwm8AiZYhy/cFkq4ttO9U/
v/BjeFTYTZ872KCelxqhIhUYmjWY0POTTLfA4MWBb23NIBeJy6OLc003yShZmJZT
VztjJvlQRCc28/A=
-----END CERTIFICATE-----
Generated at Wed Apr 8 13:37:29 2026 by rpki-client