Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e31302e302f32342d3234203d3e20323639353636.roa
File: 34352e3138382e31302e302f32342d3234203d3e20323639353636.roa (raw, json)
Hash identifier: G8awMdiiFesBcQcyPhJeeWKCIUJP4HUrGJaewVhhG3Q=
Subject key identifier: E9:71:77:A2:FD:1A:14:CF:7F:EC:1B:84:52:36:E4:6C:98:7C:FB:38
Certificate issuer: /CN=AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6
Certificate serial: 691D71FDED70ACEE4328DCCC480D59BC2F807C10
Authority key identifier: AF:70:35:97:CE:AD:8E:C9:E6:9E:2A:22:E9:BE:A5:D6:DF:14:7A:E6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e31302e302f32342d3234203d3e20323639353636.roa
Signing time: Mon 23 Feb 2026 03:35:29 +0000
ROA not before: Mon 23 Feb 2026 03:30:29 +0000
ROA not after: Mon 22 Feb 2027 03:35:29 +0000
asID: 269566
IP address blocks: 45.188.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:1d:71:fd:ed:70:ac:ee:43:28:dc:cc:48:0d:59:bc:2f:80:7c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6
Validity
Not Before: Feb 23 03:30:29 2026 GMT
Not After : Feb 22 03:35:29 2027 GMT
Subject: CN=E97177A2FD1A14CF7FEC1B845236E46C987CFB38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ae:da:47:8d:c6:d0:83:de:1f:d2:7c:72:22:
43:10:d8:ce:3b:93:81:d7:0b:5d:e2:fa:6e:62:46:
61:2a:b7:1c:64:1c:27:85:57:6b:b3:49:9b:e4:e8:
40:7d:45:95:66:c5:e6:1b:23:e5:3c:c5:10:ca:3e:
5d:5c:4d:b7:4b:3b:07:2d:b6:c7:9a:7b:a8:c6:8e:
5b:78:f0:04:22:20:3a:e8:bf:59:45:02:74:cb:4c:
ab:a9:ef:69:3f:32:53:b4:49:18:85:48:5f:f4:be:
c3:3d:20:79:55:c2:f2:ea:5e:1d:56:7a:1a:42:73:
07:8c:a9:73:6c:89:2b:a9:ea:30:c2:ac:fb:16:8d:
00:7b:b1:ba:a5:8d:82:bd:37:08:33:ce:94:21:45:
c9:a4:8b:e2:02:bd:c3:47:61:14:8a:38:4b:aa:61:
0f:03:cc:bb:ef:00:a6:19:45:4b:4d:ed:ed:b6:06:
fe:90:61:f8:40:d7:2d:d1:4b:67:e5:57:4c:a4:ce:
ed:75:51:5b:46:99:54:01:88:35:d5:89:b1:7b:46:
64:1c:85:1b:cb:33:23:61:ed:1a:9e:9e:6e:f1:5c:
57:77:1d:b5:d4:ed:ff:f5:f9:6d:67:48:b4:e4:1d:
72:16:1a:3e:92:64:b0:f5:72:d5:eb:5b:a2:4b:b4:
40:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:71:77:A2:FD:1A:14:CF:7F:EC:1B:84:52:36:E4:6C:98:7C:FB:38
X509v3 Authority Key Identifier:
keyid:AF:70:35:97:CE:AD:8E:C9:E6:9E:2A:22:E9:BE:A5:D6:DF:14:7A:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e31302e302f32342d3234203d3e20323639353636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.188.10.0/24
Signature Algorithm: sha256WithRSAEncryption
04:59:43:8e:8d:24:26:99:df:be:f0:bc:55:79:bd:d6:e4:81:
9a:4e:01:2b:82:76:83:0a:30:13:b9:5a:c9:6e:b6:05:9f:8a:
7d:4d:11:02:a3:18:59:c4:f9:0c:fb:23:b0:fc:af:7f:9b:ff:
bc:b4:7d:d3:ce:96:82:cc:89:59:29:ca:37:64:38:bb:75:21:
36:87:fb:1c:46:5f:ef:ac:9d:fa:81:0d:10:fa:36:ee:82:bb:
5b:29:19:ee:4f:b2:b5:be:c9:a6:a5:99:49:31:40:cb:9c:f8:
fc:96:01:79:16:0d:20:b8:97:ee:7d:e3:45:c8:0f:33:72:18:
22:55:f8:67:b2:70:49:ca:6d:3f:5a:42:05:ca:c5:9b:4d:8e:
2a:fd:90:91:7c:2a:eb:a8:ab:08:c2:6d:27:97:23:c7:a5:5f:
be:dc:90:8c:83:8c:06:1e:9c:04:74:79:39:85:e4:17:56:ad:
52:8f:93:92:66:cc:e5:c0:24:04:4e:d9:9f:e1:cd:b6:aa:33:
dd:b7:d8:d4:a5:07:c4:a5:f1:69:1e:59:29:57:e2:56:df:8a:
f4:c3:a0:07:11:2d:fc:8e:5c:42:10:55:1d:64:ee:2b:8e:d7:
31:f5:fc:19:93:62:d1:1e:b8:b4:09:42:36:11:de:38:18:20:
42:fa:c5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:32:44 2026 by rpki-client