Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3134332e302f32342d3234203d3e20323633353834.roa
File: 3137372e3132392e3134332e302f32342d3234203d3e20323633353834.roa (raw, json)
Hash identifier: k7dfQVvagCvfg9mDD/LjDYMmuCydZAqovHrv+Ljenk0=
Subject key identifier: BA:36:1B:01:28:FF:B7:8C:DB:F0:FB:7C:05:47:A4:8F:91:22:6A:A0
Certificate issuer: /CN=4B3A30BAE843BAF4B139185B582BA682798E126F
Certificate serial: 32577044306AEC653737F5C2A975153AB7D17628
Authority key identifier: 4B:3A:30:BA:E8:43:BA:F4:B1:39:18:5B:58:2B:A6:82:79:8E:12:6F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3A30BAE843BAF4B139185B582BA682798E126F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3134332e302f32342d3234203d3e20323633353834.roa
Signing time: Sat 14 Mar 2026 22:28:24 +0000
ROA not before: Sat 14 Mar 2026 22:23:24 +0000
ROA not after: Sat 13 Mar 2027 22:28:24 +0000
asID: 263584
IP address blocks: 177.129.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:57:70:44:30:6a:ec:65:37:37:f5:c2:a9:75:15:3a:b7:d1:76:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B3A30BAE843BAF4B139185B582BA682798E126F
Validity
Not Before: Mar 14 22:23:24 2026 GMT
Not After : Mar 13 22:28:24 2027 GMT
Subject: CN=BA361B0128FFB78CDBF0FB7C0547A48F91226AA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1b:80:94:25:dd:20:e2:2a:9a:d2:92:c8:50:
f1:3b:3d:14:c6:00:db:82:5b:c3:fb:64:af:25:98:
b0:d1:5a:49:77:02:b7:05:18:c0:3b:fb:6b:3d:3c:
a8:f8:04:68:67:30:98:12:3b:80:5a:62:0e:a0:c3:
41:57:25:71:bb:10:c8:78:d2:87:08:f4:65:05:c8:
fa:e1:36:84:26:ba:79:f3:fb:f1:9b:7e:54:98:88:
7f:73:93:58:ee:51:a0:fb:3e:6e:2e:a3:d9:29:ed:
21:91:ee:78:dc:2a:72:24:a5:cf:67:b4:c4:8d:67:
8b:c6:9e:c4:64:61:83:95:5f:a3:94:fb:f4:9a:3a:
20:8e:89:52:bf:c6:c9:22:4f:8c:bf:55:91:e4:7c:
ea:43:1b:00:51:e2:7f:a3:03:38:a8:28:c7:fe:16:
e5:60:89:d0:30:79:9e:53:46:19:d4:e8:87:88:46:
d0:00:2d:06:f1:98:2e:17:42:7a:a1:98:df:02:50:
85:22:d5:ff:cd:76:ab:f4:40:be:77:44:75:8d:2b:
59:7c:09:60:ac:ad:11:9a:d3:29:a8:3d:0a:e7:f2:
9a:49:9b:43:42:06:db:05:45:f0:56:b4:41:30:c9:
39:2d:c0:a4:dc:7d:f9:67:e2:43:8f:53:a8:8d:77:
6f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:36:1B:01:28:FF:B7:8C:DB:F0:FB:7C:05:47:A4:8F:91:22:6A:A0
X509v3 Authority Key Identifier:
keyid:4B:3A:30:BA:E8:43:BA:F4:B1:39:18:5B:58:2B:A6:82:79:8E:12:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/4B3A30BAE843BAF4B139185B582BA682798E126F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3A30BAE843BAF4B139185B582BA682798E126F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3134332e302f32342d3234203d3e20323633353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.129.143.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:92:dc:ae:5e:38:6f:c8:33:73:29:08:da:29:2a:3d:28:bd:
f7:61:b9:d1:48:aa:28:6b:73:f3:7d:54:b9:75:38:17:a4:b2:
77:27:95:0f:f0:0b:db:97:f4:35:db:20:8f:c2:b6:b3:78:ff:
aa:c8:7c:1b:bf:f6:2d:c6:04:99:ad:e8:91:8a:d7:62:f2:71:
48:cc:8d:26:53:6b:34:3e:e4:1e:a3:b6:91:44:db:04:d9:22:
22:5c:d2:99:7a:30:28:2a:64:df:b0:2d:a7:d9:3a:02:ae:52:
7c:9d:e0:03:ea:e8:b6:cd:66:35:40:3c:de:0d:d2:87:72:79:
97:a5:c9:3d:d7:1b:f4:18:5e:67:5b:27:1d:08:b4:58:c6:6d:
0f:ad:c0:26:4f:7a:3a:32:cc:cc:fa:f3:8d:01:b4:b5:d6:78:
9d:3e:ba:e6:f9:79:1b:14:99:88:d5:78:c1:da:52:b1:08:77:
67:5b:be:75:da:75:6a:38:52:16:3e:60:fc:12:f3:2a:f3:1c:
c9:c9:7f:af:d4:e3:6e:7a:72:8d:ad:36:b2:a7:a7:3d:31:03:
a3:a6:7c:ae:83:a1:6c:85:20:6c:d3:e8:a2:ec:f4:97:c4:dd:
e3:65:dc:bd:1b:0e:c9:95:c3:4c:d0:e6:b5:5e:23:75:51:a8:
50:78:43:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 10:42:11 2026 by rpki-client