Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/3136382e39302e3136382e302f32322d3234203d3e203533303632.roa
File: 3136382e39302e3136382e302f32322d3234203d3e203533303632.roa (raw, json)
Hash identifier: z+q/8JIXaTw9CzD2Arwc5f9vL7qTS8cdaHo4BjMOlW4=
Subject key identifier: 49:FA:45:82:68:96:58:84:B4:8B:0E:A6:43:0D:1A:38:16:B3:E1:27
Certificate issuer: /CN=8B01CB8245E03ABF597867F21C1F5766BE6B6ED0
Certificate serial: 455D880D41B6AEDC856994DADE8488A92EF422AF
Authority key identifier: 8B:01:CB:82:45:E0:3A:BF:59:78:67:F2:1C:1F:57:66:BE:6B:6E:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B01CB8245E03ABF597867F21C1F5766BE6B6ED0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/3136382e39302e3136382e302f32322d3234203d3e203533303632.roa
Signing time: Fri 16 Jan 2026 17:23:57 +0000
ROA not before: Fri 16 Jan 2026 17:18:57 +0000
ROA not after: Fri 15 Jan 2027 17:23:57 +0000
asID: 53062
IP address blocks: 168.90.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:5d:88:0d:41:b6:ae:dc:85:69:94:da:de:84:88:a9:2e:f4:22:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B01CB8245E03ABF597867F21C1F5766BE6B6ED0
Validity
Not Before: Jan 16 17:18:57 2026 GMT
Not After : Jan 15 17:23:57 2027 GMT
Subject: CN=49FA458268965884B48B0EA6430D1A3816B3E127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:15:fc:31:37:22:a8:77:7e:4e:b0:de:63:40:
37:51:08:a5:26:40:a2:59:30:c0:4b:34:9d:c4:20:
ef:53:e1:17:16:a6:f2:b9:4b:49:24:0f:6c:0b:60:
9b:3c:99:ec:93:ec:ff:11:46:cb:60:d8:25:11:f5:
60:a9:2e:2d:d5:2a:63:1a:42:71:3e:2f:d1:67:04:
6b:c7:dc:16:e0:d8:98:71:f0:48:d2:d6:68:3f:ff:
e2:11:7b:69:19:19:c4:03:0f:08:66:55:dd:f1:7d:
f4:32:db:79:88:5b:33:d2:0a:78:ca:63:96:33:74:
75:f4:fb:b8:38:78:8c:d8:29:34:cc:62:7e:04:14:
32:4c:1e:a7:a6:76:30:1c:4d:2d:5a:ec:a2:56:ee:
1a:74:1e:d7:e0:73:94:88:0b:14:03:10:2b:5f:03:
65:08:1d:a7:4b:9b:07:18:11:79:bf:96:08:f6:21:
37:51:f9:da:e2:ac:07:78:f4:79:02:b8:12:8d:d5:
60:f9:6b:d7:44:7a:27:36:07:97:d9:c7:38:af:41:
18:78:94:c0:b7:d1:d4:f7:5a:5d:3f:74:b4:5d:73:
2b:93:24:22:b9:61:b4:e3:46:9b:fd:72:cf:6b:b6:
a8:94:16:b2:7e:a1:df:36:d4:fa:5d:4c:d1:23:b8:
ce:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:FA:45:82:68:96:58:84:B4:8B:0E:A6:43:0D:1A:38:16:B3:E1:27
X509v3 Authority Key Identifier:
keyid:8B:01:CB:82:45:E0:3A:BF:59:78:67:F2:1C:1F:57:66:BE:6B:6E:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/8B01CB8245E03ABF597867F21C1F5766BE6B6ED0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B01CB8245E03ABF597867F21C1F5766BE6B6ED0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/3136382e39302e3136382e302f32322d3234203d3e203533303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.90.168.0/22
Signature Algorithm: sha256WithRSAEncryption
29:37:03:c5:fc:fd:f4:4f:54:f1:42:af:79:78:6d:c5:61:74:
d1:f8:67:cb:cc:df:57:83:25:da:ee:a0:a5:3e:fb:ff:22:b9:
5f:b0:60:05:f9:34:37:1a:70:10:75:72:b3:92:3f:1c:c0:c2:
b8:72:9c:bb:3d:7f:d2:7a:51:1f:98:97:54:ad:a1:bb:c6:a0:
50:b4:27:1a:3f:1b:c5:3b:16:91:33:15:1f:10:4b:03:6e:fe:
20:94:00:d2:55:da:6d:14:86:91:75:37:be:ce:c4:39:62:59:
65:d4:b1:73:f0:34:00:8c:25:97:34:ed:b5:36:5b:01:fd:05:
b4:94:ce:3f:9b:a0:1b:7f:47:37:a6:2c:18:9a:54:92:82:c3:
0e:16:11:11:1d:73:4b:bd:d6:82:fa:08:c9:7c:3c:24:e4:c7:
5a:2e:ae:72:a7:03:14:6e:3c:06:b6:60:89:43:42:4b:9e:58:
3e:f6:44:5f:11:0f:b5:20:35:cf:49:72:08:09:cd:24:fc:ec:
f4:b8:6a:d1:d1:ba:97:80:ed:af:ac:12:e8:65:3f:a3:73:86:
2f:47:56:ba:66:97:e3:3e:48:ba:6e:7d:ce:29:50:f8:c9:af:
ad:c0:fa:97:88:92:a4:7a:fc:22:72:e0:43:35:37:37:b7:14:
8a:db:11:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:16:52 2026 by rpki-client