Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3133372e302f32342d3234203d3e20323633353834.roa
File: 3137372e3132392e3133372e302f32342d3234203d3e20323633353834.roa (raw, json)
Hash identifier: to9vDDsnS9Qp5sITa3TUhOgNIT/NLMkyzF7HT3LIFUg=
Subject key identifier: 3A:75:80:69:D5:54:20:82:EA:51:33:18:21:C1:97:39:D1:B6:DF:44
Certificate issuer: /CN=4B3A30BAE843BAF4B139185B582BA682798E126F
Certificate serial: 19918D86A3E247D7A2854E2473202B6588226AC0
Authority key identifier: 4B:3A:30:BA:E8:43:BA:F4:B1:39:18:5B:58:2B:A6:82:79:8E:12:6F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3A30BAE843BAF4B139185B582BA682798E126F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3133372e302f32342d3234203d3e20323633353834.roa
Signing time: Sat 14 Mar 2026 22:28:26 +0000
ROA not before: Sat 14 Mar 2026 22:23:26 +0000
ROA not after: Sat 13 Mar 2027 22:28:26 +0000
asID: 263584
IP address blocks: 177.129.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:91:8d:86:a3:e2:47:d7:a2:85:4e:24:73:20:2b:65:88:22:6a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B3A30BAE843BAF4B139185B582BA682798E126F
Validity
Not Before: Mar 14 22:23:26 2026 GMT
Not After : Mar 13 22:28:26 2027 GMT
Subject: CN=3A758069D5542082EA51331821C19739D1B6DF44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8c:e2:df:1a:5f:35:a5:6a:b3:9e:78:b5:67:
d7:e2:f2:d4:86:d5:4f:98:44:6d:7e:5e:dd:2f:f8:
19:a7:c2:24:7d:a2:ce:cf:13:a0:d8:b2:94:ce:82:
1e:4a:4d:0c:35:87:ae:6a:2d:07:f6:04:60:e4:11:
ea:81:14:07:4f:69:a6:78:80:34:f8:af:77:4c:e7:
94:9b:b9:bd:e6:bf:f9:ec:65:5e:57:78:d1:30:23:
9b:64:4d:f6:af:2e:40:ba:53:c1:0f:c2:0b:d3:a4:
78:b6:91:c0:e6:c9:b7:68:02:3c:05:74:3c:8a:22:
c7:69:da:d9:ae:ca:5b:4c:38:45:96:55:91:79:54:
5b:ff:79:2f:b7:0f:63:40:3f:6e:6c:12:c7:3e:26:
bb:f2:96:cf:c1:ac:18:7d:71:de:bd:66:ab:a9:f5:
5d:22:a5:da:9b:40:5d:3e:36:3a:d5:b0:2f:74:be:
a3:a3:bc:8f:34:9c:69:a4:ab:bc:02:9e:ad:18:aa:
95:12:dc:9d:2e:c9:79:52:3f:6f:64:45:3b:e2:85:
cd:3a:03:70:e5:34:02:15:c2:94:94:4f:21:fa:c1:
00:21:3a:37:35:30:69:7c:99:81:37:c6:6d:4c:5c:
11:7e:4c:b8:71:f5:09:54:e6:6b:b4:8e:dd:87:ef:
61:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:75:80:69:D5:54:20:82:EA:51:33:18:21:C1:97:39:D1:B6:DF:44
X509v3 Authority Key Identifier:
keyid:4B:3A:30:BA:E8:43:BA:F4:B1:39:18:5B:58:2B:A6:82:79:8E:12:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/4B3A30BAE843BAF4B139185B582BA682798E126F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3A30BAE843BAF4B139185B582BA682798E126F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3133372e302f32342d3234203d3e20323633353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.129.137.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:1d:d6:23:51:1c:2a:18:32:73:ad:30:1d:70:42:9d:ff:f4:
99:eb:f5:f0:2a:55:4c:e2:74:51:48:a9:3a:20:81:f5:cd:92:
bd:ab:2f:eb:84:c9:a4:8b:46:ee:a8:64:7e:c7:9f:9b:2e:96:
77:62:62:18:d5:51:5a:61:ac:70:16:54:2f:4b:45:0a:d8:ba:
db:8d:27:95:79:22:f7:ac:03:87:2e:6b:75:86:5c:3a:49:89:
29:c7:15:a6:ab:fc:35:5e:90:c8:c3:6d:51:28:12:2b:52:b8:
f1:f8:d2:4d:f1:ca:47:44:2f:63:8e:34:44:62:53:fa:0a:7d:
19:95:3b:50:d8:cc:dd:e8:e8:a1:ca:bb:8f:f1:0b:78:ac:be:
3f:30:47:d3:11:d6:1f:68:1b:d9:e2:03:7e:e4:d8:de:ac:82:
96:d9:32:74:4c:07:0a:90:85:89:5d:0c:f1:c8:1e:fb:60:39:
68:55:a2:2a:6f:c2:80:ad:61:f4:e1:47:d8:f0:17:62:78:b6:
39:f5:c5:85:9b:fe:88:95:fe:fe:af:23:0f:b7:9e:2a:8d:13:
eb:dc:d9:fc:fd:14:6e:dc:86:ca:06:1c:d4:53:86:3c:c5:ff:
4b:a3:86:b9:04:06:6f:52:d3:74:62:e4:8c:ab:84:0f:9c:3f:
cc:24:71:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 10:42:15 2026 by rpki-client