Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/3138362e322e3235302e302f32342d3234203d3e20323636313633.roa
File: 3138362e322e3235302e302f32342d3234203d3e20323636313633.roa (raw, json)
Hash identifier: IRvJxyXndwafR18eUphKstYZjrQausGyK7uhHBzx/5A=
Subject key identifier: 3C:B0:BD:17:CC:4A:0A:77:0A:36:39:1D:45:99:8C:3C:9C:90:6B:52
Certificate issuer: /CN=041B44A9F96A2E80EA192819BE9533FF7CE1F401
Certificate serial: 4581E7CAC3486E46E4C73C65737B91E012550A20
Authority key identifier: 04:1B:44:A9:F9:6A:2E:80:EA:19:28:19:BE:95:33:FF:7C:E1:F4:01
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041B44A9F96A2E80EA192819BE9533FF7CE1F401.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/3138362e322e3235302e302f32342d3234203d3e20323636313633.roa
Signing time: Mon 16 Mar 2026 21:13:09 +0000
ROA not before: Mon 16 Mar 2026 21:08:09 +0000
ROA not after: Mon 15 Mar 2027 21:13:09 +0000
asID: 266163
IP address blocks: 186.2.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:81:e7:ca:c3:48:6e:46:e4:c7:3c:65:73:7b:91:e0:12:55:0a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=041B44A9F96A2E80EA192819BE9533FF7CE1F401
Validity
Not Before: Mar 16 21:08:09 2026 GMT
Not After : Mar 15 21:13:09 2027 GMT
Subject: CN=3CB0BD17CC4A0A770A36391D45998C3C9C906B52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:91:cf:4f:79:b3:1e:df:4e:df:e8:95:b6:c5:
1e:f8:38:0f:6e:f4:17:48:4e:05:95:fe:a7:88:4b:
4b:f6:10:f3:9f:5c:62:c3:6f:8d:4f:e7:d1:cd:54:
94:b8:12:c8:47:7f:47:7e:c2:da:c3:15:99:99:d6:
d0:1d:28:5c:8a:7a:4c:99:36:d1:50:75:22:dc:a5:
cc:4a:67:47:37:04:50:4d:87:2e:5f:36:88:aa:aa:
44:fc:14:24:5b:35:b0:ae:79:3a:ce:37:21:b8:a2:
e0:82:a6:5d:ef:16:46:41:09:60:03:7c:2e:bc:cc:
a1:77:87:2f:30:86:d9:9f:79:a6:e3:a8:27:99:c1:
aa:9f:f0:47:80:5b:e2:be:db:c1:61:fa:30:6f:59:
d7:84:52:c1:93:18:8a:1a:de:b9:41:df:99:66:1a:
af:35:a5:44:39:02:bf:d2:03:f5:fb:58:59:36:a7:
a9:89:3e:be:de:5a:3e:1d:cf:cb:c5:e3:92:3f:6b:
57:1b:0d:0e:98:33:5e:fe:20:6e:d0:68:41:18:03:
d3:e7:bf:3e:44:7a:56:0e:d0:db:13:0c:7b:c5:41:
44:05:34:f7:a9:f6:d9:50:66:2b:e7:98:10:2e:ad:
35:37:95:1d:06:f2:11:03:0e:d0:06:85:e6:28:ea:
69:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B0:BD:17:CC:4A:0A:77:0A:36:39:1D:45:99:8C:3C:9C:90:6B:52
X509v3 Authority Key Identifier:
keyid:04:1B:44:A9:F9:6A:2E:80:EA:19:28:19:BE:95:33:FF:7C:E1:F4:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/041B44A9F96A2E80EA192819BE9533FF7CE1F401.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041B44A9F96A2E80EA192819BE9533FF7CE1F401.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/3138362e322e3235302e302f32342d3234203d3e20323636313633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.2.250.0/24
Signature Algorithm: sha256WithRSAEncryption
94:d1:00:ac:5b:f7:d2:7c:0f:d5:35:2f:a9:28:06:5a:ad:cf:
87:65:2e:65:b4:72:e3:02:34:7c:63:ed:bd:6d:aa:7d:24:f4:
78:9f:ca:90:96:a1:d1:1e:dc:b5:bc:aa:36:1a:5d:28:df:2d:
c1:40:45:f2:97:b6:47:0d:ae:ab:bd:93:c8:f0:8e:ba:91:e9:
99:9c:aa:b6:71:c7:7d:b5:99:e5:8a:8e:0b:53:0a:b8:a0:0f:
91:92:8d:be:59:d9:0b:df:85:dc:a6:b5:43:28:13:99:1f:8d:
49:6c:13:2d:a3:51:45:84:3b:ca:62:ce:ac:88:b6:5b:14:55:
eb:07:81:fc:b5:b8:6d:a2:40:38:8a:8c:fc:ff:a6:70:45:6f:
d6:07:7b:32:fb:74:e3:a3:8e:22:04:00:a2:63:bf:07:98:d6:
70:cc:a4:10:04:d1:b4:fb:b6:42:58:d3:71:e0:c0:34:ef:9b:
75:b5:a3:c9:c3:8a:c0:16:9a:0c:e0:83:87:93:7e:d6:a4:d2:
f9:ae:64:f3:4f:98:09:2b:dd:5b:42:40:3b:ce:07:ff:56:7a:
0a:3e:65:8e:8d:f0:43:8e:f3:97:b3:d1:dd:25:c9:ac:47:d2:
8f:92:1f:a2:07:a9:a5:75:b8:d0:81:89:f0:42:a2:16:2d:b4:
16:d9:28:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:52:53 2026 by rpki-client