Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e382e302f32322d3232203d3e20323639353636.roa
File:                     34352e3138382e382e302f32322d3232203d3e20323639353636.roa (raw, json)
Hash identifier:          YolX7zPqoFs+bATEWHYceBsIZje5xORm2h1toZPgQPA=
Subject key identifier:   DC:EF:6D:AC:81:25:42:EF:EC:C3:EC:B8:9B:F1:4D:8D:FF:EF:B8:56
Certificate issuer:       /CN=AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6
Certificate serial:       04EDDED60C0AB1C25D5A4E4511FEF8AFF9E13FBD
Authority key identifier: AF:70:35:97:CE:AD:8E:C9:E6:9E:2A:22:E9:BE:A5:D6:DF:14:7A:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e382e302f32322d3232203d3e20323639353636.roa
Signing time:             Mon 23 Feb 2026 03:35:30 +0000
ROA not before:           Mon 23 Feb 2026 03:30:30 +0000
ROA not after:            Mon 22 Feb 2027 03:35:30 +0000
asID:                     269566
IP address blocks:        45.188.8.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ed:de:d6:0c:0a:b1:c2:5d:5a:4e:45:11:fe:f8:af:f9:e1:3f:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6
        Validity
            Not Before: Feb 23 03:30:30 2026 GMT
            Not After : Feb 22 03:35:30 2027 GMT
        Subject: CN=DCEF6DAC812542EFECC3ECB89BF14D8DFFEFB856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:85:64:00:ed:67:a5:38:94:f3:72:ea:68:37:
                    ac:93:24:0c:ed:62:a2:c0:f3:b9:0f:68:cd:13:39:
                    5c:f2:01:65:a7:9e:14:7f:79:56:ae:62:04:4a:12:
                    56:6d:6f:25:2d:f5:93:02:d6:bd:2b:4e:27:88:5d:
                    c5:d2:f3:82:7f:5b:90:2b:0d:eb:4a:df:08:c3:84:
                    8a:f3:27:03:c9:20:1a:90:d8:9a:35:71:91:d6:7c:
                    1f:7d:84:25:5b:98:f0:a6:80:88:bd:56:29:e2:91:
                    f0:cb:86:55:2e:c1:54:c5:ba:73:e1:fe:cc:87:fd:
                    bd:16:4e:f0:af:ba:14:42:22:81:91:e3:86:0c:97:
                    43:f0:0f:10:2c:a6:47:ec:2c:50:73:7b:99:68:f9:
                    2f:0c:39:dc:98:c0:ed:b8:a8:1f:93:b6:0f:f7:28:
                    b8:8b:35:ba:7f:e4:4a:c6:9f:78:5b:ee:42:fc:29:
                    7e:bc:7a:1d:47:da:b4:1b:30:6c:48:35:d0:2d:fe:
                    da:9f:91:f9:d8:76:a5:82:d7:18:b2:65:57:9b:7c:
                    00:96:0a:7f:96:6a:36:46:48:9c:bd:57:f6:f2:14:
                    01:ac:4a:80:53:53:a9:d4:4f:9e:77:07:a2:47:fc:
                    03:35:18:43:f2:de:13:16:4c:08:f2:46:f9:37:15:
                    1c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EF:6D:AC:81:25:42:EF:EC:C3:EC:B8:9B:F1:4D:8D:FF:EF:B8:56
            X509v3 Authority Key Identifier:
                keyid:AF:70:35:97:CE:AD:8E:C9:E6:9E:2A:22:E9:BE:A5:D6:DF:14:7A:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e382e302f32322d3232203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:4d:9d:ca:84:3a:01:d9:b6:0e:b7:49:d6:6e:a2:36:dc:c6:
         25:46:08:a9:1f:df:f4:01:17:c2:c0:04:12:8d:31:f1:59:42:
         d8:31:c4:a0:1b:5f:9e:fa:9a:14:56:89:5e:3e:ab:de:de:e2:
         c4:81:6d:01:b6:d4:36:be:83:3e:e8:f8:97:f2:31:f0:76:f9:
         95:89:04:82:59:51:10:ad:a4:13:20:5b:65:85:f1:d2:66:4e:
         ee:34:e4:80:9e:62:94:67:9b:ab:85:37:1f:4f:d0:e3:bb:89:
         c9:71:07:cf:f4:0e:f9:d4:bd:f3:e8:1f:c0:4b:5d:4c:f6:e9:
         a0:53:ce:37:e6:50:16:98:60:6c:06:71:87:64:e2:7c:9f:30:
         02:17:f9:0f:7e:18:1e:21:e4:02:eb:88:4b:c8:a3:52:2e:8d:
         a8:0f:25:76:10:c1:a8:39:34:50:db:86:64:f0:ff:8a:63:0e:
         d6:cc:9e:c5:ad:f4:81:7a:96:0f:8f:88:68:cd:35:f4:06:ca:
         7e:87:a6:86:a2:fb:58:e7:a8:a3:a9:bd:5b:0e:1b:88:f8:a2:
         e1:6f:fa:5b:f3:9e:c5:69:77:d1:a6:d1:58:5e:56:b4:dd:1f:
         6b:52:e0:30:3e:07:66:90:51:be:9c:18:e3:44:b9:c4:f2:7f:
         93:98:cb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:32:54 2026 by rpki-client