Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e382e302f32342d3234203d3e20323639353636.roa
File: 34352e3138382e382e302f32342d3234203d3e20323639353636.roa (raw, json)
Hash identifier: 6I7t4JbQBb/xMgKLYWx5VAMo+zCLtPry04eRRJhqT/4=
Subject key identifier: A3:18:9F:65:D2:9B:8C:5D:56:9B:C2:C5:8B:CC:00:3B:5C:6F:66:E9
Certificate issuer: /CN=AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6
Certificate serial: 7C67F2FC5980ECB7ADD230662CAEB410E19FB2BC
Authority key identifier: AF:70:35:97:CE:AD:8E:C9:E6:9E:2A:22:E9:BE:A5:D6:DF:14:7A:E6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e382e302f32342d3234203d3e20323639353636.roa
Signing time: Mon 23 Feb 2026 03:35:30 +0000
ROA not before: Mon 23 Feb 2026 03:30:30 +0000
ROA not after: Mon 22 Feb 2027 03:35:30 +0000
asID: 269566
IP address blocks: 45.188.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:67:f2:fc:59:80:ec:b7:ad:d2:30:66:2c:ae:b4:10:e1:9f:b2:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6
Validity
Not Before: Feb 23 03:30:30 2026 GMT
Not After : Feb 22 03:35:30 2027 GMT
Subject: CN=A3189F65D29B8C5D569BC2C58BCC003B5C6F66E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e2:b7:07:0a:c5:af:f8:25:c4:e5:82:df:29:
50:d3:3e:67:8d:fe:99:47:43:f4:c6:e3:fe:bd:0a:
08:ad:f8:9e:54:39:65:0e:94:69:38:ec:a1:70:35:
4a:84:71:c6:f3:63:71:dd:51:c5:df:52:17:6b:0b:
2e:6a:5e:62:54:28:1a:09:1a:06:68:ce:b2:6d:9f:
4c:cd:fc:3e:65:bb:ef:53:40:c7:66:3f:90:31:6c:
eb:14:95:84:87:79:ae:3b:ea:37:ae:f8:ea:f1:47:
a7:90:3e:e3:09:54:a3:64:d1:24:71:aa:f6:ac:74:
1e:57:33:1a:05:35:e3:8b:62:4d:ea:79:6c:c3:f4:
17:8d:37:49:ff:2d:30:dc:14:08:60:f2:60:e9:cd:
e9:ac:9a:b8:92:c9:12:ac:79:d2:30:92:2c:3f:90:
9a:f8:2d:ac:2f:dc:3c:93:37:b4:ee:80:8e:3a:52:
ef:f0:cd:58:ee:2c:98:71:b6:ad:06:84:4a:98:3f:
d6:b7:6c:04:95:20:ac:80:89:87:f9:8b:9d:f6:ab:
5d:c3:1d:bb:5d:da:63:b1:d3:22:a9:4a:bf:40:d6:
9a:03:93:d4:4c:cf:ba:e0:76:99:8b:9d:54:e8:cf:
a7:44:3b:b1:b2:a3:60:74:a7:5f:69:16:df:16:e2:
b3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:18:9F:65:D2:9B:8C:5D:56:9B:C2:C5:8B:CC:00:3B:5C:6F:66:E9
X509v3 Authority Key Identifier:
keyid:AF:70:35:97:CE:AD:8E:C9:E6:9E:2A:22:E9:BE:A5:D6:DF:14:7A:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e382e302f32342d3234203d3e20323639353636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.188.8.0/24
Signature Algorithm: sha256WithRSAEncryption
36:fb:08:2b:a1:8c:80:9f:cf:9b:42:b2:71:e5:53:d3:3b:4b:
47:8a:8a:2e:80:15:cb:70:ec:7c:bb:6f:77:67:f1:4a:37:4a:
23:7c:33:a8:da:cc:84:f2:4d:3b:2c:b4:e6:cc:32:2a:d9:f0:
b7:a4:18:6c:7e:7d:3d:d4:13:29:f6:61:68:ba:14:24:c7:c6:
b1:c1:83:e6:f0:81:ff:65:14:08:e6:fd:3c:ac:d5:f3:10:7e:
2c:4e:2f:a5:83:a0:df:d6:cd:44:7f:f9:80:d7:71:c0:e7:26:
7f:3c:6c:cf:d4:07:dd:c0:96:0e:ea:cb:32:27:37:4d:f2:85:
aa:5e:d3:e9:f5:88:4f:e1:86:1e:98:e3:33:3f:1c:42:02:4e:
b7:c9:e7:39:20:6a:9a:96:7a:11:7d:19:e4:8a:3a:87:ad:7a:
d6:14:54:51:7e:2a:94:a4:1e:f7:98:8b:59:5c:ac:c5:db:99:
1c:be:04:89:41:99:c3:8f:61:90:6d:a3:b9:0f:dc:38:cb:b9:
0c:68:46:b3:8e:7d:8d:a1:6b:be:45:ad:9e:32:68:ed:30:61:
9d:a5:4a:c8:40:69:f4:e0:1e:22:29:b1:64:e7:7c:b1:72:06:
31:7a:2d:30:3f:fd:cc:a8:75:0d:f1:52:a7:77:eb:62:8e:e7:
7c:85:f3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:32:46 2026 by rpki-client