Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3232372e34342e302f32332d3233203d3e203238323230.roa
File: 3136382e3232372e34342e302f32332d3233203d3e203238323230.roa (raw, json)
Hash identifier: VeTXYaHVtPBwooBQMcgqEUTZFYWPKtnQP3igPHHijlM=
Subject key identifier: D0:BE:BA:4D:C7:1B:11:C9:22:19:9F:29:DA:23:E1:43:42:57:85:83
Certificate issuer: /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72
Certificate serial: 16FDABFC7A2812EC796B4818F9A11F31848A8AF8
Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3232372e34342e302f32332d3233203d3e203238323230.roa
Signing time: Mon 29 Dec 2025 17:46:58 +0000
ROA not before: Mon 29 Dec 2025 17:41:58 +0000
ROA not after: Mon 28 Dec 2026 17:46:58 +0000
asID: 28220
IP address blocks: 168.227.44.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:fd:ab:fc:7a:28:12:ec:79:6b:48:18:f9:a1:1f:31:84:8a:8a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72
Validity
Not Before: Dec 29 17:41:58 2025 GMT
Not After : Dec 28 17:46:58 2026 GMT
Subject: CN=D0BEBA4DC71B11C922199F29DA23E14342578583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:67:87:be:cc:6c:a7:b4:2a:5d:ae:79:79:ed:
cf:ad:3a:fb:03:c5:9b:24:b0:12:bc:4b:4a:32:67:
a8:26:a3:0c:62:04:29:67:a7:45:fe:a9:55:68:33:
d9:fd:22:92:8c:0d:dd:91:46:40:f3:ff:11:a4:28:
38:47:8a:03:f2:cc:3e:61:b6:9c:b8:24:25:cc:f1:
39:46:90:9b:05:b6:4a:60:1b:27:ce:62:40:f2:41:
e4:cc:f0:5f:e1:18:b7:49:52:7e:79:12:78:70:9c:
42:6a:e4:a6:c2:60:b2:e2:d8:f7:24:9d:f1:73:4f:
3d:cd:c3:65:ec:8e:a2:cb:88:8d:f2:53:06:f1:47:
bc:ab:af:68:96:68:73:47:79:8d:26:0e:62:ba:95:
64:64:29:a3:da:36:19:02:a3:cd:de:7b:04:08:04:
57:5a:b9:5c:9e:21:9b:36:8e:14:7b:73:df:29:3c:
0e:1a:af:86:d2:e8:cc:5c:93:31:87:bb:a4:a2:10:
ee:f1:fa:3f:c8:74:78:b0:a5:86:a2:26:db:55:1e:
2f:c5:c1:33:5f:c2:dc:39:4a:dd:64:2e:f1:d3:a6:
f2:d5:c2:47:b7:28:32:a8:90:18:ca:bb:88:72:f7:
03:52:ca:08:e8:95:70:96:13:50:4c:10:4f:59:0d:
7e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BE:BA:4D:C7:1B:11:C9:22:19:9F:29:DA:23:E1:43:42:57:85:83
X509v3 Authority Key Identifier:
keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3232372e34342e302f32332d3233203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.44.0/23
Signature Algorithm: sha256WithRSAEncryption
06:fc:6f:65:bf:7f:5c:ca:08:0e:41:5b:33:41:16:38:70:1d:
fc:3f:66:8b:0f:89:7d:d1:bc:51:1e:4e:2f:86:94:10:17:ef:
96:d3:ce:fc:41:31:73:7b:10:83:64:1a:3b:73:0b:2d:03:7d:
03:96:23:89:f8:19:76:81:62:ae:c1:a2:e2:56:19:71:05:10:
94:7c:8f:52:08:d8:b9:83:c0:2e:9e:b7:92:33:e9:73:83:42:
20:ad:d6:ae:c0:c3:cb:36:b1:90:de:95:fb:c9:b0:86:04:39:
71:b3:18:f0:83:a7:a5:cb:f4:7e:7b:fa:9c:96:35:7b:c0:a1:
f0:ae:5f:8b:b1:d7:dd:b0:4c:25:ba:3f:8e:04:07:3d:0a:52:
a4:d2:87:7a:2e:be:ca:07:b1:75:bf:7e:23:9a:0d:d6:25:b9:
00:31:b4:27:2f:89:27:95:40:d8:76:0f:91:ad:52:35:ff:18:
67:12:1e:21:60:fc:9b:84:85:14:0c:46:a9:7a:d3:f2:f0:d9:
cc:45:0a:51:14:7c:cc:ba:3a:88:73:e3:ac:8e:bb:2b:5b:34:
fb:79:92:c3:e7:b3:33:ee:25:69:3d:31:4c:72:23:31:e2:7a:
6b:d4:f4:dc:d4:06:5b:84:08:55:3d:e4:74:6b:fb:60:5d:c6:
7d:45:e9:e2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUFv2r/HooEux5a0gY+aEfMYSKivgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREUxRjZGOUZCODQwNjBDMDdBMDlCREQ4RTUyRUJBNTIy
RTg5QUM3MjAeFw0yNTEyMjkxNzQxNThaFw0yNjEyMjgxNzQ2NThaMDMxMTAvBgNV
BAMTKEQwQkVCQTREQzcxQjExQzkyMjE5OUYyOURBMjNFMTQzNDI1Nzg1ODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaZ4e+zGyntCpdrnl57c+tOvsD
xZsksBK8S0oyZ6gmowxiBClnp0X+qVVoM9n9IpKMDd2RRkDz/xGkKDhHigPyzD5h
tpy4JCXM8TlGkJsFtkpgGyfOYkDyQeTM8F/hGLdJUn55EnhwnEJq5KbCYLLi2Pck
nfFzTz3Nw2XsjqLLiI3yUwbxR7yrr2iWaHNHeY0mDmK6lWRkKaPaNhkCo83eewQI
BFdauVyeIZs2jhR7c98pPA4ar4bS6MxckzGHu6SiEO7x+j/IdHiwpYaiJttVHi/F
wTNfwtw5St1kLvHTpvLVwke3KDKokBjKu4hy9wNSygjolXCWE1BMEE9ZDX7vAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU0L66TccbEckiGZ8p2iPhQ0JXhYMwHwYDVR0j
BBgwFoAU3h9vn7hAYMB6Cb3Y5S66Ui6JrHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC9ERTFGNkY5RkI4NDA2MEMwN0EwOUJERDhFNTJFQkE1MjJFODlBQzcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMUY2RjlGQjg0MDYwQzA3
QTA5QkREOEU1MkVCQTUyMkU4OUFDNzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzNjM4MmUzMjMyMzcyZTM0MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM4
MzIzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBqOMsMA0GCSqGSIb3DQEBCwUAA4IBAQAG/G9lv39c
yggOQVszQRY4cB38P2aLD4l90bxRHk4vhpQQF++W0878QTFzexCDZBo7cwstA30D
liOJ+Bl2gWKuwaLiVhlxBRCUfI9SCNi5g8AunreSM+lzg0IgrdauwMPLNrGQ3pX7
ybCGBDlxsxjwg6ely/R+e/qcljV7wKHwrl+LsdfdsEwluj+OBAc9ClKk0od6Lr7K
B7F1v34jmg3WJbkAMbQnL4knlUDYdg+RrVI1/xhnEh4hYPybhIUUDEapetPy8NnM
RQpRFHzMujqIc+OsjrsrWzT7eZLD57Mz7iVpPTFMciMx4npr1PTc1AZbhAhVPeR0
a/tgXcZ9Reni
-----END CERTIFICATE-----
Generated at Thu Feb 19 13:04:13 2026 by rpki-client