Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e382e302f32332d3233203d3e20323639353636.roa
File: 34352e3138382e382e302f32332d3233203d3e20323639353636.roa (raw, json)
Hash identifier: dYjYu0hTQC8H4RCFuPhtulAnoPnQQQ9Sd2tvpyvzItU=
Subject key identifier: 10:71:E3:A1:FD:0B:EE:EF:ED:DE:5B:6E:82:83:5E:26:89:F7:F9:5C
Certificate issuer: /CN=AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6
Certificate serial: 4923A9C2AA10E9720655D8DB421F925317458DDD
Authority key identifier: AF:70:35:97:CE:AD:8E:C9:E6:9E:2A:22:E9:BE:A5:D6:DF:14:7A:E6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e382e302f32332d3233203d3e20323639353636.roa
Signing time: Mon 23 Feb 2026 03:35:32 +0000
ROA not before: Mon 23 Feb 2026 03:30:32 +0000
ROA not after: Mon 22 Feb 2027 03:35:32 +0000
asID: 269566
IP address blocks: 45.188.8.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:23:a9:c2:aa:10:e9:72:06:55:d8:db:42:1f:92:53:17:45:8d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6
Validity
Not Before: Feb 23 03:30:32 2026 GMT
Not After : Feb 22 03:35:32 2027 GMT
Subject: CN=1071E3A1FD0BEEEFEDDE5B6E82835E2689F7F95C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:89:39:9f:58:8c:cf:00:75:01:4c:6c:61:0f:
7e:60:9c:75:4b:50:33:2f:c6:67:70:ce:41:9a:39:
08:9c:75:0a:a2:95:22:ea:3c:d4:99:bf:92:0d:d8:
71:32:ab:f8:4d:d9:70:cc:37:56:7b:cf:01:74:7d:
9a:b4:eb:32:b9:48:c5:c7:7c:57:e5:6a:39:13:2b:
b7:d6:32:d5:d7:43:fb:38:b0:43:27:b7:09:06:f4:
ec:07:88:fa:0b:11:72:4d:9d:c3:28:f7:19:c3:1a:
6a:c7:da:c3:18:f3:a3:db:33:a3:9a:c6:ce:23:89:
fb:bf:f1:c1:2c:46:cc:8c:b4:30:4e:b3:74:55:f0:
69:8a:c4:90:1d:3e:e6:da:46:f5:71:2b:1c:d5:79:
7e:6e:88:37:0d:2b:93:bf:34:b6:d1:4c:9f:dc:f9:
ee:ab:8b:70:99:d7:05:73:c3:1b:ac:4e:73:7b:0a:
cd:fc:b0:a8:f5:29:3d:93:3b:75:6c:49:f3:98:66:
31:15:22:ad:a9:09:2c:5e:3e:0a:55:01:91:b1:a1:
ce:08:d7:79:85:af:13:04:bd:2a:f6:c1:3d:f2:bd:
12:67:00:1e:47:56:b6:e2:6d:38:80:02:9d:95:9e:
b4:bf:45:48:81:5f:1d:cf:1a:7f:40:2e:b1:4e:c8:
25:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:71:E3:A1:FD:0B:EE:EF:ED:DE:5B:6E:82:83:5E:26:89:F7:F9:5C
X509v3 Authority Key Identifier:
keyid:AF:70:35:97:CE:AD:8E:C9:E6:9E:2A:22:E9:BE:A5:D6:DF:14:7A:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e382e302f32332d3233203d3e20323639353636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.188.8.0/23
Signature Algorithm: sha256WithRSAEncryption
21:e2:c3:bb:71:ea:aa:6c:95:bc:53:52:62:a9:88:b3:bc:db:
99:bd:30:1e:64:38:3d:cd:07:47:3b:d6:2a:e1:bf:ee:53:2a:
17:cb:2e:41:56:be:65:ce:4d:40:38:17:eb:54:45:0e:de:2e:
1c:da:a5:df:59:80:7b:ec:43:8e:02:8a:6d:ce:36:f2:f5:ac:
43:c0:53:ad:ad:25:38:ac:c5:2c:ff:bb:15:a9:97:22:b6:af:
af:1f:0e:49:a1:49:eb:63:a8:a4:22:6c:1d:5e:b7:1e:88:93:
11:89:3e:a1:49:cd:2f:d5:eb:1d:b4:41:c6:cb:4e:06:ab:58:
ac:bc:d2:4f:3a:25:f7:f7:06:db:68:e3:6e:0f:07:11:26:13:
2c:9c:a2:26:57:6a:0f:2b:2e:8c:c0:c0:59:a6:2d:99:d7:7c:
8b:52:9d:34:a1:e3:b1:4e:8e:30:54:d9:98:65:57:c4:a3:6b:
b9:bb:e8:93:fd:bf:34:7f:2f:52:95:9a:55:56:20:e8:98:ac:
e4:d7:e4:df:1a:5e:87:cf:ea:f4:07:3b:93:8e:81:33:49:f1:
fc:8f:6d:d9:3c:c0:66:e0:23:5b:1c:fd:5c:b6:80:fa:5d:d6:
42:31:fe:4b:05:0a:63:84:58:0e:ce:86:9e:a7:09:bd:b6:90:
02:f6:d3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:31:25 2026 by rpki-client