Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e392e302f32342d3234203d3e20323639353636.roa
File:                     34352e3138382e392e302f32342d3234203d3e20323639353636.roa (raw, json)
Hash identifier:          YNz/ozhOrSKDwrIH9teSSRYd3SOgmibDEUMoFGtoxT0=
Subject key identifier:   0E:E3:9A:C8:99:37:C3:F2:CF:4C:7D:6B:E3:85:64:1D:5C:DB:BD:F7
Certificate issuer:       /CN=AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6
Certificate serial:       75A84C696F4C162E812B1A7F4F79B37571F87E08
Authority key identifier: AF:70:35:97:CE:AD:8E:C9:E6:9E:2A:22:E9:BE:A5:D6:DF:14:7A:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e392e302f32342d3234203d3e20323639353636.roa
Signing time:             Mon 23 Feb 2026 03:35:30 +0000
ROA not before:           Mon 23 Feb 2026 03:30:30 +0000
ROA not after:            Mon 22 Feb 2027 03:35:30 +0000
asID:                     269566
IP address blocks:        45.188.9.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a8:4c:69:6f:4c:16:2e:81:2b:1a:7f:4f:79:b3:75:71:f8:7e:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6
        Validity
            Not Before: Feb 23 03:30:30 2026 GMT
            Not After : Feb 22 03:35:30 2027 GMT
        Subject: CN=0EE39AC89937C3F2CF4C7D6BE385641D5CDBBDF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3b:30:1b:e4:a0:ed:0f:2b:19:03:59:77:51:
                    7c:a2:2c:e1:dd:6c:ae:80:04:7f:af:45:a4:c4:50:
                    72:21:f6:71:0f:9f:6a:e9:e1:52:72:2b:ac:72:62:
                    77:99:77:15:e4:61:e1:7a:61:e2:97:b0:87:bb:ac:
                    c4:4a:18:1a:f4:28:ec:69:a7:43:4a:a6:26:1c:7e:
                    e8:35:de:62:99:a5:ad:d4:62:d1:de:a4:1b:75:bd:
                    9b:7d:5f:04:cc:ad:07:89:e3:07:1a:e8:27:50:ca:
                    68:1a:b6:a0:41:89:88:47:1d:3c:12:0a:96:8c:ef:
                    5f:98:fa:32:6f:76:06:e3:0c:6d:35:c2:6c:33:00:
                    0d:7d:c2:06:63:bd:43:72:ef:b4:c8:16:b5:97:35:
                    63:7c:84:4f:6b:6c:ce:bd:ac:b0:dc:d7:0f:b4:12:
                    d2:66:a1:c6:e7:73:4c:af:11:cd:67:eb:75:9c:d8:
                    26:dd:bf:db:56:51:57:49:77:3f:e2:52:71:4c:ff:
                    5b:18:5c:a7:61:08:58:97:39:de:5a:52:93:88:6b:
                    2d:aa:84:46:5e:37:e3:e6:b3:a9:d0:51:c2:87:9a:
                    be:02:38:67:42:9b:05:ed:56:61:2a:61:a3:ae:6b:
                    17:62:fa:bc:f0:db:3d:e5:eb:20:cf:24:03:84:ba:
                    9c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E3:9A:C8:99:37:C3:F2:CF:4C:7D:6B:E3:85:64:1D:5C:DB:BD:F7
            X509v3 Authority Key Identifier:
                keyid:AF:70:35:97:CE:AD:8E:C9:E6:9E:2A:22:E9:BE:A5:D6:DF:14:7A:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e392e302f32342d3234203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:4c:ee:dc:34:7e:66:f9:f1:2c:34:9c:3b:b1:53:0d:66:3a:
         ce:3f:c3:75:b4:9e:39:73:38:fa:cf:44:19:10:a6:92:bf:d7:
         9f:cf:2a:49:f0:81:e3:66:d8:21:c4:c2:12:82:3f:63:27:28:
         46:b6:57:0f:d8:55:8a:fc:2e:67:19:e9:00:c9:dc:8c:57:09:
         db:32:cd:a1:33:77:f9:92:ca:50:c4:6c:44:57:03:f5:27:35:
         e2:95:1d:f4:05:6d:c3:a6:a4:5d:ba:35:42:b9:0e:c6:c9:78:
         7f:f3:c1:2f:50:90:4c:c3:4b:1e:d5:f0:cc:f3:39:2b:14:67:
         cc:45:9e:8a:2a:22:5e:96:67:af:65:19:b9:ff:f1:d7:5a:9f:
         48:bf:6e:ab:a4:cc:e5:a4:8b:1e:0e:d9:5d:e2:d8:90:b5:0c:
         04:3b:fa:f8:54:91:11:c6:74:d2:68:8d:9f:cf:58:10:9f:b5:
         ac:de:62:20:96:bb:7c:11:bb:93:86:d0:fe:ff:51:38:2a:96:
         09:1a:5e:61:cb:46:ba:1d:6f:0f:33:e7:26:66:07:16:d4:91:
         3a:f0:70:57:7e:b2:bc:b5:b4:6f:50:3e:5b:16:4d:6b:7a:60:
         6f:67:f5:1d:f5:b6:3f:04:ab:89:8f:e7:a3:c3:4b:3e:04:82:
         b7:a8:cc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:32:49 2026 by rpki-client