Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/34352e372e3132382e302f32322d3234203d3e203533303632.roa
File: 34352e372e3132382e302f32322d3234203d3e203533303632.roa (raw, json)
Hash identifier: 7EcuEFg1m3kWnNuYzyacDsTr2QI8djlpga/mhDbaBz4=
Subject key identifier: 9E:AC:59:92:D6:EC:63:01:6A:7B:78:2F:32:CE:09:8E:05:28:78:BF
Certificate issuer: /CN=8B01CB8245E03ABF597867F21C1F5766BE6B6ED0
Certificate serial: 32CB518AA252C928EFE29B1F5ABB91CB6DF10BF9
Authority key identifier: 8B:01:CB:82:45:E0:3A:BF:59:78:67:F2:1C:1F:57:66:BE:6B:6E:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B01CB8245E03ABF597867F21C1F5766BE6B6ED0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/34352e372e3132382e302f32322d3234203d3e203533303632.roa
Signing time: Fri 16 Jan 2026 17:23:57 +0000
ROA not before: Fri 16 Jan 2026 17:18:57 +0000
ROA not after: Fri 15 Jan 2027 17:23:57 +0000
asID: 53062
IP address blocks: 45.7.128.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:cb:51:8a:a2:52:c9:28:ef:e2:9b:1f:5a:bb:91:cb:6d:f1:0b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B01CB8245E03ABF597867F21C1F5766BE6B6ED0
Validity
Not Before: Jan 16 17:18:57 2026 GMT
Not After : Jan 15 17:23:57 2027 GMT
Subject: CN=9EAC5992D6EC63016A7B782F32CE098E052878BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:01:88:b0:57:cb:7e:95:8a:ad:aa:44:36:a5:
39:c7:11:68:84:de:9e:12:9a:b6:7b:e2:e4:c5:2e:
d5:17:df:7b:dc:0b:13:32:23:82:6e:56:fb:78:58:
af:e0:4b:c7:74:be:42:4c:c0:5b:9a:78:09:d4:6a:
e5:50:bb:2f:31:62:e6:3c:4d:61:d5:27:03:d0:1c:
36:60:db:ff:a5:6e:dc:71:60:44:3d:bd:c3:07:d4:
55:97:21:ec:34:dc:e6:9a:ff:95:f1:a4:6f:61:7e:
cb:07:70:83:d4:91:91:5f:03:be:e7:37:18:2e:77:
08:79:d0:27:c6:f7:18:d8:29:d9:e0:a9:4c:ab:46:
34:34:21:8d:2f:06:76:55:0e:4d:90:df:8b:a0:4d:
45:33:69:97:3b:89:01:84:c0:53:8e:39:94:8d:10:
00:27:4d:6a:21:22:28:a3:58:b7:4b:db:82:f5:45:
10:4c:9d:a8:05:a2:b2:c9:3d:d5:27:5b:c0:c0:36:
90:fd:54:aa:03:85:b0:a2:06:da:9c:03:1a:11:8c:
2b:0c:88:8c:e7:11:95:d2:eb:1f:c7:bb:97:f5:06:
39:01:ce:8d:4e:d4:7c:cf:cf:f6:21:e2:42:f1:b8:
17:de:f7:10:61:e8:51:fe:f6:9a:fa:15:27:18:e1:
f5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AC:59:92:D6:EC:63:01:6A:7B:78:2F:32:CE:09:8E:05:28:78:BF
X509v3 Authority Key Identifier:
keyid:8B:01:CB:82:45:E0:3A:BF:59:78:67:F2:1C:1F:57:66:BE:6B:6E:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/8B01CB8245E03ABF597867F21C1F5766BE6B6ED0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B01CB8245E03ABF597867F21C1F5766BE6B6ED0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/34352e372e3132382e302f32322d3234203d3e203533303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.128.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:28:46:df:d8:17:c3:7a:e0:e2:95:3e:09:51:2e:97:74:9d:
a8:33:08:64:14:8e:8a:f2:6a:37:24:1c:2e:f1:11:64:a0:20:
e8:0d:4b:7f:fe:ca:cf:2d:d9:87:74:f5:6d:ff:1f:ab:5d:d9:
12:66:a2:89:6a:d7:a0:fc:48:ea:9d:ed:3c:17:0c:10:dc:c7:
61:76:a2:0f:f3:24:15:82:2a:0b:7f:af:05:70:7d:7f:b5:4e:
68:67:5f:1b:f2:84:97:dc:21:2e:14:66:a0:76:06:ab:1b:9e:
e7:5b:a5:8e:88:35:3f:75:1c:3a:b5:45:05:b8:ae:67:53:91:
be:52:6f:1e:4c:4e:83:f6:6b:4d:bf:7c:f6:74:9e:50:9c:e9:
95:73:57:04:ff:6f:93:a2:cb:27:67:46:53:4c:c0:a9:3f:0f:
9f:f8:67:18:2a:bf:02:41:cb:7d:97:0d:43:6e:68:3a:65:b4:
4a:55:db:30:d4:a4:85:3f:6e:cf:d9:76:da:9f:09:3d:26:d5:
9a:2c:20:b0:ac:3a:68:4f:c5:61:01:d7:bf:d3:42:bb:c9:84:
ab:1b:49:3b:0c:f3:c9:0b:42:40:50:e1:84:9c:3c:89:74:79:
3a:8b:cc:2e:02:1a:3c:e3:92:f6:7f:d9:5e:8a:bb:99:4c:42:
bc:bc:93:c3
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUMstRiqJSySjv4psfWruRy23xC/kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEIwMUNCODI0NUUwM0FCRjU5Nzg2N0YyMUMxRjU3NjZC
RTZCNkVEMDAeFw0yNjAxMTYxNzE4NTdaFw0yNzAxMTUxNzIzNTdaMDMxMTAvBgNV
BAMTKDlFQUM1OTkyRDZFQzYzMDE2QTdCNzgyRjMyQ0UwOThFMDUyODc4QkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoAYiwV8t+lYqtqkQ2pTnHEWiE
3p4SmrZ74uTFLtUX33vcCxMyI4JuVvt4WK/gS8d0vkJMwFuaeAnUauVQuy8xYuY8
TWHVJwPQHDZg2/+lbtxxYEQ9vcMH1FWXIew03Oaa/5XxpG9hfssHcIPUkZFfA77n
Nxgudwh50CfG9xjYKdngqUyrRjQ0IY0vBnZVDk2Q34ugTUUzaZc7iQGEwFOOOZSN
EAAnTWohIiijWLdL24L1RRBMnagForLJPdUnW8DANpD9VKoDhbCiBtqcAxoRjCsM
iIznEZXS6x/Hu5f1BjkBzo1O1HzPz/Yh4kLxuBfe9xBh6FH+9pr6FScY4fVJAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUnqxZktbsYwFqe3gvMs4JjgUoeL8wHwYDVR0j
BBgwFoAUiwHLgkXgOr9ZeGfyHB9XZr5rbtAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9FaGdEV0FBWjc0alloMTlMVTZ2N0FScVN4TlY0anZkRWlERlc5Mjl3dXZw
LzMvOEIwMUNCODI0NUUwM0FCRjU5Nzg2N0YyMUMxRjU3NjZCRTZCNkVEMC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84QjAxQ0I4MjQ1RTAzQUJGNTk3
ODY3RjIxQzFGNTc2NkJFNkI2RUQwLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQG
CCsGAQUFBzALhoGHcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F
aGdEV0FBWjc0alloMTlMVTZ2N0FScVN4TlY0anZkRWlERlc5Mjl3dXZwLzMvMzQz
NTJlMzcyZTMxMzIzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM1MzMzMDM2MzIu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAItB4AwDQYJKoZIhvcNAQELBQADggEBAB0oRt/YF8N64OKVPglR
Lpd0nagzCGQUjoryajckHC7xEWSgIOgNS3/+ys8t2Yd09W3/H6td2RJmoolq16D8
SOqd7TwXDBDcx2F2og/zJBWCKgt/rwVwfX+1TmhnXxvyhJfcIS4UZqB2Bqsbnudb
pY6INT91HDq1RQW4rmdTkb5Sbx5MToP2a02/fPZ0nlCc6ZVzVwT/b5OiyydnRlNM
wKk/D5/4ZxgqvwJBy32XDUNuaDpltEpV2zDUpIU/bs/ZdtqfCT0m1ZosILCsOmhP
xWEB17/TQrvJhKsbSTsM88kLQkBQ4YScPIl0eTqLzC4CGjzjkvZ/2V6Ku5lMQry8
k8M=
-----END CERTIFICATE-----
Generated at Thu Feb 19 11:39:16 2026 by rpki-client