Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/3139302e38392e37322e302f32322d3234203d3e20323730333538.roa
File: 3139302e38392e37322e302f32322d3234203d3e20323730333538.roa (raw, json)
Hash identifier: YKt/MKHjrCWYIeH+VOCJwXgd8WaacuGk+hLpT6CGSKE=
Subject key identifier: 26:90:F7:22:C4:EA:DC:6D:09:38:9D:E5:43:C7:4D:80:E0:47:E9:7A
Certificate issuer: /CN=495F7F203409375C760F0961F1FD82C2C89541CC
Certificate serial: 2E6D62F34B374D1D1A166CFBFE24ACD2771AC64B
Authority key identifier: 49:5F:7F:20:34:09:37:5C:76:0F:09:61:F1:FD:82:C2:C8:95:41:CC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/495F7F203409375C760F0961F1FD82C2C89541CC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/3139302e38392e37322e302f32322d3234203d3e20323730333538.roa
Signing time: Wed 04 Mar 2026 14:53:24 +0000
ROA not before: Wed 04 Mar 2026 14:48:24 +0000
ROA not after: Wed 03 Mar 2027 14:53:24 +0000
asID: 270358
IP address blocks: 190.89.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:6d:62:f3:4b:37:4d:1d:1a:16:6c:fb:fe:24:ac:d2:77:1a:c6:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=495F7F203409375C760F0961F1FD82C2C89541CC
Validity
Not Before: Mar 4 14:48:24 2026 GMT
Not After : Mar 3 14:53:24 2027 GMT
Subject: CN=2690F722C4EADC6D09389DE543C74D80E047E97A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:78:a2:5c:0c:7e:97:2f:91:15:06:78:dd:02:
4b:c4:8e:6c:fa:e1:d6:24:80:5d:ca:6b:ed:44:06:
be:97:a2:b9:af:17:fd:97:79:4f:f2:bc:07:1b:d5:
00:27:71:72:c0:05:22:d2:64:06:07:e5:b4:61:16:
e5:f9:b5:ce:36:c3:0e:c5:a0:93:a1:2b:49:42:a7:
c9:ce:75:4a:9e:4d:35:13:12:f5:33:e2:ce:1c:a7:
59:f1:3b:c2:57:5c:ce:c6:28:45:6f:29:1b:4c:0c:
1d:46:2a:ad:0d:a4:ce:4d:ad:9e:82:7d:20:b6:26:
5a:3d:23:e5:cc:0f:cf:3c:a1:c9:0a:6b:2b:00:55:
6f:b3:08:f1:af:2b:85:eb:78:c3:20:14:f4:e0:41:
70:03:39:8d:ac:5f:2f:4a:d2:2f:dc:8d:5c:d6:45:
b0:89:8f:ed:7d:67:a0:ee:b0:f1:99:d3:53:29:e3:
aa:f1:4c:a7:6f:7b:19:01:54:a4:69:a3:3c:06:bd:
72:ff:ee:c1:e9:67:c3:e0:bb:61:c9:25:a3:60:b1:
cc:dd:40:54:2e:c4:99:aa:6d:62:64:11:bb:97:d2:
7e:f6:5d:d2:dc:2f:6c:db:14:5f:bf:f5:13:c8:62:
e4:01:99:5e:ea:80:e4:c4:7c:08:b9:90:d2:5b:3a:
bc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:90:F7:22:C4:EA:DC:6D:09:38:9D:E5:43:C7:4D:80:E0:47:E9:7A
X509v3 Authority Key Identifier:
keyid:49:5F:7F:20:34:09:37:5C:76:0F:09:61:F1:FD:82:C2:C8:95:41:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/495F7F203409375C760F0961F1FD82C2C89541CC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/495F7F203409375C760F0961F1FD82C2C89541CC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/3139302e38392e37322e302f32322d3234203d3e20323730333538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.89.72.0/22
Signature Algorithm: sha256WithRSAEncryption
56:bc:75:b0:a1:7b:1e:01:17:15:e8:82:f3:27:26:7f:fd:0b:
f0:22:00:e6:6b:50:0f:28:c5:bf:22:8f:c4:41:95:dc:d7:82:
53:ed:6f:6e:14:d9:8a:84:50:26:39:03:e1:2d:d6:d9:a9:7f:
a7:c8:f4:54:43:f1:ab:8b:ed:98:72:8f:21:8d:7a:82:53:2d:
67:fc:6c:da:05:5d:83:a9:f4:e7:42:58:a8:38:b1:91:94:c7:
e9:e7:f3:b3:1a:63:af:48:f2:c0:61:a3:6b:60:f9:9f:22:12:
14:c9:35:46:41:31:1e:28:b6:d5:99:14:98:f3:62:1e:52:0f:
ec:07:3e:85:92:e2:64:b5:e4:b0:6f:76:ed:41:b1:1b:8a:cc:
b8:94:5a:79:bc:19:66:7d:6c:0a:fc:35:bf:a4:7d:85:18:28:
e2:08:c3:4d:7d:f6:7f:88:d2:d7:5d:4d:c1:fc:86:dd:ab:c4:
3c:81:8f:1b:e6:15:27:58:3e:c2:73:22:04:f7:c0:ad:cb:dd:
38:01:a4:15:90:b8:13:a9:f1:9c:72:4c:8c:42:eb:07:bb:86:
25:f1:84:73:7c:cf:2e:96:fa:f6:8f:55:50:48:9f:89:c5:1a:
74:07:47:4c:27:e3:28:47:fe:0c:6e:f0:b7:d1:ce:b0:f4:15:
91:ea:03:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 09:28:31 2026 by rpki-client