Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3134322e302f32342d3234203d3e20323633353834.roa
File: 3137372e3132392e3134322e302f32342d3234203d3e20323633353834.roa (raw, json)
Hash identifier: f/OazUdPFpnCPGGixAzAMKZohmWssT5oNUU/jsJMALo=
Subject key identifier: 49:00:67:B0:CD:04:A5:92:38:11:CD:52:7A:39:26:C0:C9:C6:34:DE
Certificate issuer: /CN=4B3A30BAE843BAF4B139185B582BA682798E126F
Certificate serial: 0F5F9031B5C458482EEF082683FB24F1E049B764
Authority key identifier: 4B:3A:30:BA:E8:43:BA:F4:B1:39:18:5B:58:2B:A6:82:79:8E:12:6F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3A30BAE843BAF4B139185B582BA682798E126F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3134322e302f32342d3234203d3e20323633353834.roa
Signing time: Sat 14 Mar 2026 22:28:26 +0000
ROA not before: Sat 14 Mar 2026 22:23:26 +0000
ROA not after: Sat 13 Mar 2027 22:28:26 +0000
asID: 263584
IP address blocks: 177.129.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:5f:90:31:b5:c4:58:48:2e:ef:08:26:83:fb:24:f1:e0:49:b7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B3A30BAE843BAF4B139185B582BA682798E126F
Validity
Not Before: Mar 14 22:23:26 2026 GMT
Not After : Mar 13 22:28:26 2027 GMT
Subject: CN=490067B0CD04A5923811CD527A3926C0C9C634DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e1:fb:6e:69:65:7e:a2:1b:e5:4b:66:16:df:
73:6e:15:5c:92:01:68:29:71:2f:87:1e:aa:f4:9a:
8d:8a:f3:8f:52:ad:a7:1e:e5:8c:40:85:78:fa:27:
fd:c2:79:9f:d4:00:a2:67:26:53:84:e2:9b:55:ee:
01:73:a0:12:24:70:02:43:04:db:77:ef:98:6f:b2:
80:39:a6:66:fe:f1:fc:e9:51:bb:6f:c8:f7:9c:31:
a5:39:dd:80:59:53:f6:49:b8:ac:63:28:e1:60:d4:
e2:4b:b6:2d:4f:34:b0:3f:02:37:8c:63:27:e1:33:
c2:f2:49:69:05:c7:3a:56:6f:78:1f:bb:0f:3b:c1:
bb:44:e0:6d:d4:59:6f:a3:0f:a5:49:c5:16:5c:05:
0d:44:2c:92:c7:74:b1:ab:99:a2:b6:7d:c6:6f:88:
d9:b5:1b:13:f1:3b:2c:72:9a:3b:53:30:1a:5b:c2:
6f:cc:94:b2:05:de:12:2b:04:3e:e8:20:41:0f:81:
a7:de:ec:f1:4a:3e:b5:49:97:3d:96:e9:fb:1d:b0:
3f:3e:54:35:72:77:3d:ea:4e:9a:bb:b5:08:34:96:
da:64:46:9c:64:55:51:43:12:2d:d8:b8:56:e6:60:
85:db:03:e2:90:d1:60:8b:c5:ea:3d:22:b9:39:3a:
38:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:00:67:B0:CD:04:A5:92:38:11:CD:52:7A:39:26:C0:C9:C6:34:DE
X509v3 Authority Key Identifier:
keyid:4B:3A:30:BA:E8:43:BA:F4:B1:39:18:5B:58:2B:A6:82:79:8E:12:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/4B3A30BAE843BAF4B139185B582BA682798E126F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3A30BAE843BAF4B139185B582BA682798E126F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3134322e302f32342d3234203d3e20323633353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.129.142.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:a1:96:83:6c:e1:c0:c1:f0:07:6f:62:d6:48:ed:82:12:5a:
08:c1:a8:8c:ed:c3:ff:0f:78:aa:22:51:fa:69:73:e0:4f:d7:
bf:bf:5b:ac:a7:dd:49:6f:3d:7e:47:5c:68:5f:69:43:af:01:
82:d4:9a:60:f7:47:d5:09:4c:c6:c3:76:b0:06:48:05:85:2f:
0b:f4:85:af:74:56:aa:2f:f4:c4:db:ef:e6:ec:e0:0b:7a:c1:
15:e5:5e:47:f9:a8:1c:79:1c:26:65:f6:36:b5:fb:df:20:3f:
ca:79:fd:82:ef:13:e2:69:d5:87:4b:97:68:25:28:27:e3:3c:
97:6d:73:88:7d:12:8f:5c:75:30:cd:16:cb:7e:84:66:45:67:
fa:23:54:5f:5f:e6:d1:1c:55:d4:1a:28:57:42:cd:04:21:ef:
d5:4d:33:8f:10:bb:c4:42:56:88:cd:7c:39:21:86:40:65:57:
c9:2a:bf:ce:cb:26:22:57:3e:71:63:d6:c0:1d:ca:3a:38:3e:
f6:65:bd:61:86:26:ee:dd:41:39:d8:ef:50:15:40:d8:57:78:
80:44:5f:5a:8b:2f:43:28:5f:21:c6:c6:97:63:97:2e:8a:cb:
e5:43:28:98:9f:02:cd:82:6e:63:5c:c3:98:79:4e:71:4b:af:
e7:9d:ce:f0
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUD1+QMbXEWEgu7wgmg/sk8eBJt2QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEIzQTMwQkFFODQzQkFGNEIxMzkxODVCNTgyQkE2ODI3
OThFMTI2RjAeFw0yNjAzMTQyMjIzMjZaFw0yNzAzMTMyMjI4MjZaMDMxMTAvBgNV
BAMTKDQ5MDA2N0IwQ0QwNEE1OTIzODExQ0Q1MjdBMzkyNkMwQzlDNjM0REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC84ftuaWV+ohvlS2YW33NuFVyS
AWgpcS+HHqr0mo2K849Srace5YxAhXj6J/3CeZ/UAKJnJlOE4ptV7gFzoBIkcAJD
BNt375hvsoA5pmb+8fzpUbtvyPecMaU53YBZU/ZJuKxjKOFg1OJLti1PNLA/AjeM
YyfhM8LySWkFxzpWb3gfuw87wbtE4G3UWW+jD6VJxRZcBQ1ELJLHdLGrmaK2fcZv
iNm1GxPxOyxymjtTMBpbwm/MlLIF3hIrBD7oIEEPgafe7PFKPrVJlz2W6fsdsD8+
VDVydz3qTpq7tQg0ltpkRpxkVVFDEi3YuFbmYIXbA+KQ0WCLxeo9Irk5OjjHAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUSQBnsM0EpZI4Ec1SejkmwMnGNN4wHwYDVR0j
BBgwFoAUSzowuuhDuvSxORhbWCumgnmOEm8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0tpMnpZUHZWQ3ZVcGFLOFRSSFZhODhZa2RLUWk3d0J6S2d3am15TDRS
Q3EvMC80QjNBMzBCQUU4NDNCQUY0QjEzOTE4NUI1ODJCQTY4Mjc5OEUxMjZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCM0EzMEJBRTg0M0JBRjRC
MTM5MTg1QjU4MkJBNjgyNzk4RTEyNkYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dLaTJ6WVB2VkN2VXBhSzhUUkhWYTg4WWtkS1FpN3dCektnd2pteUw0UkNxLzAv
MzEzNzM3MmUzMTMyMzkyZTMxMzQzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM1MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALGBjjANBgkqhkiG9w0BAQsFAAOCAQEAW6GW
g2zhwMHwB29i1kjtghJaCMGojO3D/w94qiJR+mlz4E/Xv79brKfdSW89fkdcaF9p
Q68BgtSaYPdH1QlMxsN2sAZIBYUvC/SFr3RWqi/0xNvv5uzgC3rBFeVeR/moHHkc
JmX2NrX73yA/ynn9gu8T4mnVh0uXaCUoJ+M8l21ziH0Sj1x1MM0Wy36EZkVn+iNU
X1/m0RxV1BooV0LNBCHv1U0zjxC7xEJWiM18OSGGQGVXySq/zssmIlc+cWPWwB3K
Ojg+9mW9YYYm7t1BOdjvUBVA2Fd4gERfWosvQyhfIcbGl2OXLorL5UMomJ8CzYJu
Y1zDmHlOcUuv553O8A==
-----END CERTIFICATE-----
Generated at Wed Apr 8 10:42:13 2026 by rpki-client