Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3134302e302f32342d3234203d3e20323633353834.roa
File: 3137372e3132392e3134302e302f32342d3234203d3e20323633353834.roa (raw, json)
Hash identifier: kBGy5s7ZrvN/lwMLtn4Qhr4OtuxYp9KPicATdE9D05s=
Subject key identifier: 8B:D7:C6:C9:B4:C6:DE:15:07:DA:FB:BF:03:39:37:F1:F9:AD:8B:AD
Certificate issuer: /CN=4B3A30BAE843BAF4B139185B582BA682798E126F
Certificate serial: 2A08D00EA62B340B088829A813B2316D9317DABB
Authority key identifier: 4B:3A:30:BA:E8:43:BA:F4:B1:39:18:5B:58:2B:A6:82:79:8E:12:6F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3A30BAE843BAF4B139185B582BA682798E126F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3134302e302f32342d3234203d3e20323633353834.roa
Signing time: Sat 14 Mar 2026 22:28:24 +0000
ROA not before: Sat 14 Mar 2026 22:23:24 +0000
ROA not after: Sat 13 Mar 2027 22:28:24 +0000
asID: 263584
IP address blocks: 177.129.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:08:d0:0e:a6:2b:34:0b:08:88:29:a8:13:b2:31:6d:93:17:da:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B3A30BAE843BAF4B139185B582BA682798E126F
Validity
Not Before: Mar 14 22:23:24 2026 GMT
Not After : Mar 13 22:28:24 2027 GMT
Subject: CN=8BD7C6C9B4C6DE1507DAFBBF033937F1F9AD8BAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cf:33:45:75:2f:df:33:30:60:e6:4d:af:8c:
e7:0c:03:ec:d2:aa:74:a5:d1:b7:73:0f:e4:67:31:
27:56:f6:f1:80:01:56:be:bd:83:57:ab:ad:08:eb:
24:c8:69:b9:f1:f9:ff:dc:c9:57:62:2d:d8:1d:c8:
ba:ce:b0:40:32:77:c3:a2:0f:1a:e7:1e:60:eb:66:
a2:1a:45:89:21:bd:d7:81:ba:82:80:c7:7f:68:7d:
2e:6b:f6:30:ef:3d:04:f1:3b:3e:46:28:95:13:92:
ef:aa:e8:7d:4f:e6:6a:85:a1:b2:6f:a2:8b:48:48:
fc:a6:58:bd:08:24:c7:a1:26:ee:9e:5a:22:8c:66:
15:49:a9:94:08:38:ff:28:ca:48:a9:6d:a9:b6:99:
80:a4:fb:1e:9e:c1:9e:6e:28:6c:bb:3e:f9:71:86:
e1:b5:a4:18:5d:15:d8:9c:14:43:6a:fe:ec:25:0c:
29:2d:ba:b9:9c:7d:e7:89:e5:e5:be:81:d7:ac:d2:
88:11:78:10:40:f6:27:c8:f4:5e:c3:03:f9:91:23:
05:05:76:87:e1:fe:86:e8:2d:27:8b:66:df:49:bb:
0c:66:d8:d9:2d:7c:7c:61:a7:03:9c:0a:ea:28:b3:
15:ef:e0:b2:c3:1f:19:8b:9d:2c:d4:b4:6b:68:7e:
72:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D7:C6:C9:B4:C6:DE:15:07:DA:FB:BF:03:39:37:F1:F9:AD:8B:AD
X509v3 Authority Key Identifier:
keyid:4B:3A:30:BA:E8:43:BA:F4:B1:39:18:5B:58:2B:A6:82:79:8E:12:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/4B3A30BAE843BAF4B139185B582BA682798E126F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3A30BAE843BAF4B139185B582BA682798E126F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3134302e302f32342d3234203d3e20323633353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.129.140.0/24
Signature Algorithm: sha256WithRSAEncryption
80:27:a0:ea:c3:24:98:62:c9:46:1e:23:ae:b1:d5:81:4f:e5:
24:c6:2a:75:6d:cf:40:44:4a:83:ac:9c:62:11:bb:90:05:99:
72:d3:69:65:39:b8:16:b1:99:50:52:2f:42:09:f1:ec:32:5a:
79:e9:ba:c5:f6:39:03:b5:5e:42:3e:9a:c5:e1:42:ea:51:e6:
60:52:d5:fc:2d:3a:87:b5:8f:24:23:d2:f5:67:0a:86:89:c0:
34:fa:e5:62:bb:04:9f:de:88:79:e9:cc:b1:49:02:fc:fb:95:
a8:f4:7a:a9:81:c0:14:b7:4f:83:a2:1f:57:32:e9:cd:38:d2:
9d:7a:04:37:9f:9e:60:7e:6c:55:85:1f:9b:b0:ea:17:9a:32:
71:42:39:d8:34:b6:8f:01:02:22:95:6e:23:0d:f9:bf:52:dc:
ac:13:8d:3d:54:ce:22:b2:27:8a:3d:3e:a0:72:35:3d:30:f8:
b5:86:3b:0c:2d:84:16:c2:e8:64:d5:c5:4d:6d:d2:6a:ec:7f:
b4:3e:39:f3:e8:31:66:16:ca:42:d8:3a:d2:0b:e2:e6:ad:9a:
e9:e2:07:9d:78:8a:7e:2b:a9:5a:e5:79:d8:38:ce:3f:41:cc:
54:e0:c6:81:e5:83:a5:1d:5c:a1:7b:02:47:b8:89:b8:eb:4a:
48:3d:96:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 10:42:12 2026 by rpki-client