Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3133382e302f32342d3234203d3e20323633353834.roa
File: 3137372e3132392e3133382e302f32342d3234203d3e20323633353834.roa (raw, json)
Hash identifier: VW4rLVQbPq7wY3YFsVUqHT0r4MuJi8dGaiDBbfCjeZc=
Subject key identifier: A9:61:37:23:76:F2:C1:6A:1B:2F:33:79:67:10:5C:A7:31:42:48:74
Certificate issuer: /CN=4B3A30BAE843BAF4B139185B582BA682798E126F
Certificate serial: 3F318235B7AD48EC2FE0E3B49DA09583443F4144
Authority key identifier: 4B:3A:30:BA:E8:43:BA:F4:B1:39:18:5B:58:2B:A6:82:79:8E:12:6F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3A30BAE843BAF4B139185B582BA682798E126F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3133382e302f32342d3234203d3e20323633353834.roa
Signing time: Sat 14 Mar 2026 22:28:24 +0000
ROA not before: Sat 14 Mar 2026 22:23:24 +0000
ROA not after: Sat 13 Mar 2027 22:28:24 +0000
asID: 263584
IP address blocks: 177.129.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:31:82:35:b7:ad:48:ec:2f:e0:e3:b4:9d:a0:95:83:44:3f:41:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B3A30BAE843BAF4B139185B582BA682798E126F
Validity
Not Before: Mar 14 22:23:24 2026 GMT
Not After : Mar 13 22:28:24 2027 GMT
Subject: CN=A961372376F2C16A1B2F337967105CA731424874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ff:be:4d:e7:ca:03:4e:69:26:cc:28:fa:a1:
83:52:25:74:40:54:c5:0f:30:33:53:7b:ba:53:50:
2c:56:a9:8b:ca:92:80:9d:53:c5:e7:e7:96:97:df:
7c:01:b9:c1:29:06:15:27:95:2a:63:fb:c8:2b:6a:
77:49:42:4e:f6:df:91:4b:2c:4e:9f:8c:8d:b1:87:
48:7e:7d:1f:44:39:42:d8:d3:64:7a:3a:b6:5f:c4:
3d:32:bc:a5:5b:b7:6b:6c:cf:1a:29:b3:2c:90:b8:
cf:f1:f2:86:89:fa:3a:99:c2:ee:af:2f:e9:c8:7e:
a7:4c:fd:07:b8:d5:2c:50:96:0a:fb:6f:63:6c:84:
8a:51:87:e2:b0:21:2b:72:dd:c8:c9:eb:8d:7b:46:
98:a9:df:74:34:68:61:48:c5:73:bf:ea:38:2f:44:
cb:49:f3:8a:ca:fe:ed:6f:19:60:6b:5a:99:a7:45:
a5:50:80:20:71:71:b2:67:b3:dc:af:4a:d6:ea:4c:
4e:24:7f:9e:5a:8a:99:55:d0:26:80:7d:58:f2:88:
14:5e:d4:8d:27:c9:c1:dd:8c:63:ef:68:a0:f1:5f:
f3:66:ae:05:ef:c2:1d:36:a0:da:f4:a9:e0:19:18:
4c:8e:03:c7:85:dd:4d:cf:fd:a3:b7:12:3d:88:d5:
eb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:61:37:23:76:F2:C1:6A:1B:2F:33:79:67:10:5C:A7:31:42:48:74
X509v3 Authority Key Identifier:
keyid:4B:3A:30:BA:E8:43:BA:F4:B1:39:18:5B:58:2B:A6:82:79:8E:12:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/4B3A30BAE843BAF4B139185B582BA682798E126F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3A30BAE843BAF4B139185B582BA682798E126F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3133382e302f32342d3234203d3e20323633353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.129.138.0/24
Signature Algorithm: sha256WithRSAEncryption
79:c0:0a:c8:25:ed:62:fb:54:48:37:d2:43:4b:08:ef:03:94:
26:ac:f9:57:7c:62:be:44:ef:b0:ab:d0:76:da:ad:c6:9a:7a:
d5:5d:dd:86:3c:41:d7:7b:10:6b:6f:56:e9:8c:4a:14:52:25:
a0:7b:7a:3f:18:bf:81:f5:3a:b0:c6:c0:c9:7e:48:78:f0:7c:
2d:00:c3:81:68:29:c4:d6:da:02:6d:94:2d:0e:16:fd:06:6d:
d6:9f:8b:8c:4c:8d:6c:8b:db:88:7d:a0:27:08:16:87:0a:fe:
9b:2b:64:80:ec:f6:12:9e:b5:60:66:f2:7c:73:70:2c:33:67:
05:c7:f6:ca:07:a7:82:1b:7e:6a:68:ab:1b:dd:ca:9c:17:d4:
c6:05:8f:66:d7:5c:3d:36:e7:03:8f:ce:31:2a:07:e6:04:a9:
24:0a:fe:2d:d4:82:20:09:74:1d:a8:3e:fc:74:74:09:30:05:
61:5e:9d:cd:a7:94:20:5f:20:05:10:fd:86:b2:5a:3e:60:6a:
ef:9a:e0:1d:18:34:0b:75:d7:ef:d8:32:35:a7:8c:87:63:d0:
4f:90:26:0c:69:bb:e8:c7:18:b3:c6:2a:a9:5d:05:ef:54:f0:
2d:eb:81:e8:15:69:a7:c8:14:06:e3:07:65:6c:8c:4b:d1:49:
47:8f:bd:b4
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUPzGCNbetSOwv4OO0naCVg0Q/QUQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEIzQTMwQkFFODQzQkFGNEIxMzkxODVCNTgyQkE2ODI3
OThFMTI2RjAeFw0yNjAzMTQyMjIzMjRaFw0yNzAzMTMyMjI4MjRaMDMxMTAvBgNV
BAMTKEE5NjEzNzIzNzZGMkMxNkExQjJGMzM3OTY3MTA1Q0E3MzE0MjQ4NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo/75N58oDTmkmzCj6oYNSJXRA
VMUPMDNTe7pTUCxWqYvKkoCdU8Xn55aX33wBucEpBhUnlSpj+8grandJQk7235FL
LE6fjI2xh0h+fR9EOULY02R6OrZfxD0yvKVbt2tszxopsyyQuM/x8oaJ+jqZwu6v
L+nIfqdM/Qe41SxQlgr7b2NshIpRh+KwISty3cjJ6417Rpip33Q0aGFIxXO/6jgv
RMtJ84rK/u1vGWBrWpmnRaVQgCBxcbJns9yvStbqTE4kf55aiplV0CaAfVjyiBRe
1I0nycHdjGPvaKDxX/NmrgXvwh02oNr0qeAZGEyOA8eF3U3P/aO3Ej2I1etXAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUqWE3I3bywWobLzN5ZxBcpzFCSHQwHwYDVR0j
BBgwFoAUSzowuuhDuvSxORhbWCumgnmOEm8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0tpMnpZUHZWQ3ZVcGFLOFRSSFZhODhZa2RLUWk3d0J6S2d3am15TDRS
Q3EvMC80QjNBMzBCQUU4NDNCQUY0QjEzOTE4NUI1ODJCQTY4Mjc5OEUxMjZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCM0EzMEJBRTg0M0JBRjRC
MTM5MTg1QjU4MkJBNjgyNzk4RTEyNkYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dLaTJ6WVB2VkN2VXBhSzhUUkhWYTg4WWtkS1FpN3dCektnd2pteUw0UkNxLzAv
MzEzNzM3MmUzMTMyMzkyZTMxMzMzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM1MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALGBijANBgkqhkiG9w0BAQsFAAOCAQEAecAK
yCXtYvtUSDfSQ0sI7wOUJqz5V3xivkTvsKvQdtqtxpp61V3dhjxB13sQa29W6YxK
FFIloHt6Pxi/gfU6sMbAyX5IePB8LQDDgWgpxNbaAm2ULQ4W/QZt1p+LjEyNbIvb
iH2gJwgWhwr+mytkgOz2Ep61YGbyfHNwLDNnBcf2ygenght+amirG93KnBfUxgWP
ZtdcPTbnA4/OMSoH5gSpJAr+LdSCIAl0Hag+/HR0CTAFYV6dzaeUIF8gBRD9hrJa
PmBq75rgHRg0C3XX79gyNaeMh2PQT5AmDGm76McYs8YqqV0F71TwLeuB6BVpp8gU
BuMHZWyMS9FJR4+9tA==
-----END CERTIFICATE-----
Generated at Wed Apr 8 10:42:17 2026 by rpki-client