Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3230302e3136302e3134342e302f32302d3234203d3e203232313238.roa
File: 3230302e3136302e3134342e302f32302d3234203d3e203232313238.roa (raw, json)
Hash identifier: 2jph0Nd8CehkgHrNLRIAcj2UcEhl3NhPDq3u8+3qXCk=
Subject key identifier: 6B:8E:3E:55:C6:3C:FA:F9:68:98:A8:A3:E6:3E:FF:7C:C6:7C:4C:3A
Certificate issuer: /CN=B3EC7F5F7D6B690F3B724BC2B063C17F2D5419B9
Certificate serial: 6A8CBBEB6D4334533CDD386B0622E8930C8E29CD
Authority key identifier: B3:EC:7F:5F:7D:6B:69:0F:3B:72:4B:C2:B0:63:C1:7F:2D:54:19:B9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3EC7F5F7D6B690F3B724BC2B063C17F2D5419B9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3230302e3136302e3134342e302f32302d3234203d3e203232313238.roa
Signing time: Sat 04 Apr 2026 17:26:07 +0000
ROA not before: Sat 04 Apr 2026 17:21:07 +0000
ROA not after: Sat 03 Apr 2027 17:26:07 +0000
asID: 22128
IP address blocks: 200.160.144.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:8c:bb:eb:6d:43:34:53:3c:dd:38:6b:06:22:e8:93:0c:8e:29:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3EC7F5F7D6B690F3B724BC2B063C17F2D5419B9
Validity
Not Before: Apr 4 17:21:07 2026 GMT
Not After : Apr 3 17:26:07 2027 GMT
Subject: CN=6B8E3E55C63CFAF96898A8A3E63EFF7CC67C4C3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:04:ed:d3:ac:f3:21:12:db:a0:67:29:4b:e8:
1c:23:19:52:8e:83:0c:8d:e8:9a:fe:29:d2:d9:82:
6b:75:af:ed:3d:84:01:30:e7:bb:c1:19:93:ca:90:
c8:23:c9:7a:94:df:99:45:0d:7a:53:89:d6:cd:e5:
39:09:fb:02:f6:fc:d7:4a:46:37:da:d8:91:41:dc:
46:d1:7f:ac:a6:fa:cf:cc:a8:9e:8a:c5:c4:03:b8:
e6:ae:72:6b:1b:6a:3a:e6:4a:0f:c8:96:56:e3:d1:
cf:fe:d0:56:f7:fc:13:d9:42:e9:81:4f:ba:c3:ae:
b8:06:e8:51:3c:b3:c5:f0:d3:52:3f:d9:69:cb:23:
83:35:63:14:fe:64:e8:1a:3a:64:28:f0:00:70:d1:
75:d1:71:85:28:8e:d2:c9:57:19:8f:57:6e:7e:78:
96:84:f5:f7:11:ac:a9:9f:6f:9a:e1:ca:ca:90:66:
72:dd:21:fe:d2:57:d6:83:22:71:91:f9:d9:40:ac:
48:d1:fa:e9:e4:1e:3a:66:cf:27:81:e0:ce:51:7f:
be:f7:8d:5a:dc:52:58:00:01:e3:d3:36:df:18:06:
72:d4:6e:fd:c0:f6:45:68:09:e3:49:01:ef:5b:61:
51:88:5d:c2:05:63:55:bb:3b:25:14:00:fd:c3:6f:
e0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8E:3E:55:C6:3C:FA:F9:68:98:A8:A3:E6:3E:FF:7C:C6:7C:4C:3A
X509v3 Authority Key Identifier:
keyid:B3:EC:7F:5F:7D:6B:69:0F:3B:72:4B:C2:B0:63:C1:7F:2D:54:19:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/B3EC7F5F7D6B690F3B724BC2B063C17F2D5419B9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3EC7F5F7D6B690F3B724BC2B063C17F2D5419B9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3230302e3136302e3134342e302f32302d3234203d3e203232313238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.160.144.0/20
Signature Algorithm: sha256WithRSAEncryption
e0:7d:aa:b8:5f:0e:ba:82:f6:a1:1c:1f:98:32:e7:0b:44:ea:
02:3a:bd:6f:b1:5b:a9:3e:46:3d:32:d7:f5:ba:4f:40:4f:59:
0d:00:83:3d:d9:a6:a8:9e:a5:de:99:47:c6:73:5a:37:a2:f5:
f7:14:3c:69:e4:07:5c:5e:5f:98:94:77:71:c8:43:72:59:33:
0a:7a:4e:af:b9:23:36:16:1d:6b:99:20:da:27:8d:9d:79:6b:
27:c4:24:ba:0f:7c:bf:99:74:b0:94:47:0e:f5:40:09:f6:73:
49:5e:97:d9:e8:ce:0f:87:ae:d2:db:39:6f:4e:6c:1a:0c:54:
ad:00:e4:14:60:59:fd:00:4c:40:ac:38:18:de:a8:32:b0:77:
43:8d:7d:e2:50:13:29:38:b8:e8:75:3f:02:19:6b:77:a3:32:
f4:19:ce:c8:0b:23:84:fd:fd:c4:9a:4c:0d:88:12:df:a5:4b:
78:35:dc:5b:4e:82:f5:28:97:a5:82:08:cb:52:fd:61:b4:ef:
e4:8b:ce:49:f5:96:46:3c:36:3b:1e:71:1a:ac:41:3b:56:09:
60:6d:1a:e1:32:98:53:f5:22:28:b8:bf:9d:eb:ed:41:58:3c:
27:54:5f:3a:e0:b1:2f:2c:98:6c:34:00:0f:d3:5d:6b:9a:9d:
a3:9e:cf:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 19:28:19 2026 by rpki-client