Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/323830343a366163383a3a2f33322d3438203d3e20323730333538.roa
File: 323830343a366163383a3a2f33322d3438203d3e20323730333538.roa (raw, json)
Hash identifier: 7I2rgThunROqnVZb2CHma3nNjXPvpt/mG9FeyJHWPqE=
Subject key identifier: 2D:4C:85:C5:E5:D8:83:6F:12:75:5A:6E:4E:49:E4:FC:B5:D0:61:39
Certificate issuer: /CN=495F7F203409375C760F0961F1FD82C2C89541CC
Certificate serial: 204C85F6F675926A87F50DFDC45AE9EE5B293E4F
Authority key identifier: 49:5F:7F:20:34:09:37:5C:76:0F:09:61:F1:FD:82:C2:C8:95:41:CC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/495F7F203409375C760F0961F1FD82C2C89541CC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/323830343a366163383a3a2f33322d3438203d3e20323730333538.roa
Signing time: Wed 04 Mar 2026 14:53:20 +0000
ROA not before: Wed 04 Mar 2026 14:48:20 +0000
ROA not after: Wed 03 Mar 2027 14:53:20 +0000
asID: 270358
IP address blocks: 2804:6ac8::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:4c:85:f6:f6:75:92:6a:87:f5:0d:fd:c4:5a:e9:ee:5b:29:3e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=495F7F203409375C760F0961F1FD82C2C89541CC
Validity
Not Before: Mar 4 14:48:20 2026 GMT
Not After : Mar 3 14:53:20 2027 GMT
Subject: CN=2D4C85C5E5D8836F12755A6E4E49E4FCB5D06139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:52:3d:55:7f:09:08:0b:4d:04:4d:8c:e9:18:
c1:9e:b1:d2:bf:8c:e9:33:da:9b:c0:6a:a2:f1:d2:
a8:5d:50:b4:70:70:58:1b:02:1a:ac:f4:9e:8c:3a:
fa:76:1c:cd:d5:01:ac:9f:0b:a2:5b:e0:f6:ef:e3:
4a:b8:2f:69:33:87:0f:23:53:f4:13:c0:48:26:86:
bc:58:46:01:2b:04:9f:40:e1:01:15:08:a1:e8:64:
58:60:4e:ac:4d:09:b9:a7:47:fa:6a:ae:27:5b:f7:
ee:43:92:e1:34:8a:99:b9:f7:8b:b7:d2:4c:aa:5a:
94:27:cb:18:bd:d0:d6:28:06:5e:6f:a2:5f:74:e4:
fc:74:17:16:56:6b:06:78:b8:23:31:51:c1:ca:ea:
25:ca:99:14:57:e6:45:df:d0:52:a3:99:63:64:17:
0c:09:04:64:ce:f1:f8:53:5a:52:8a:05:f7:a3:46:
62:0c:e9:92:ea:01:ba:1d:fd:b5:86:52:5c:e1:ed:
2c:8c:a4:0e:11:46:44:94:ca:da:54:c3:7d:72:9b:
ec:a5:ee:0c:27:b2:92:78:cf:38:2a:3d:ee:56:d4:
88:f6:a7:70:31:31:0f:36:a4:ad:e5:1a:5b:5f:f9:
b6:fc:3b:21:c4:94:ed:5f:b1:22:5a:17:07:eb:aa:
01:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4C:85:C5:E5:D8:83:6F:12:75:5A:6E:4E:49:E4:FC:B5:D0:61:39
X509v3 Authority Key Identifier:
keyid:49:5F:7F:20:34:09:37:5C:76:0F:09:61:F1:FD:82:C2:C8:95:41:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/495F7F203409375C760F0961F1FD82C2C89541CC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/495F7F203409375C760F0961F1FD82C2C89541CC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/323830343a366163383a3a2f33322d3438203d3e20323730333538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6ac8::/32
Signature Algorithm: sha256WithRSAEncryption
10:3f:26:ee:61:40:2b:63:8a:b0:d2:83:d4:14:50:8c:bf:94:
a3:74:b4:be:e3:37:c5:57:a4:f1:0b:19:b9:65:00:0e:0c:51:
73:dc:5a:1c:81:83:36:ef:95:48:86:3b:6b:5f:e2:ac:4e:b5:
34:28:8b:4d:35:3c:bb:08:a2:09:81:05:4b:60:9b:2b:00:01:
1a:95:44:76:7b:dc:0d:d8:93:dc:47:7e:de:d9:48:51:ca:cf:
4f:ee:87:c4:60:25:51:61:19:ee:6e:6d:e2:97:02:a1:53:15:
7a:eb:03:50:2c:ff:91:e0:84:22:d5:a9:37:c2:37:db:09:fd:
d5:d4:44:2f:97:f6:a8:fb:16:31:1e:14:25:f2:99:e1:d4:36:
a7:a9:ab:dd:0c:19:63:76:02:74:2d:5c:d1:56:71:c1:8d:20:
fe:34:bd:75:c1:0e:40:e9:9f:52:78:bb:31:28:b9:83:9b:d3:
d1:f3:99:0b:24:5f:d3:c0:f2:10:b4:20:04:a1:4f:c1:bb:0d:
c4:91:64:60:00:6d:1e:74:3b:e0:d7:a7:29:16:d0:04:2d:5b:
e8:1e:52:28:ef:4a:d6:82:90:ca:a0:67:93:ab:9c:37:fe:1a:
86:d2:c3:c4:4a:01:e2:2f:29:ac:7c:98:40:b4:8a:5f:af:85:
a0:26:17:08
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUIEyF9vZ1kmqH9Q39xFrp7lspPk8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDk1RjdGMjAzNDA5Mzc1Qzc2MEYwOTYxRjFGRDgyQzJD
ODk1NDFDQzAeFw0yNjAzMDQxNDQ4MjBaFw0yNzAzMDMxNDUzMjBaMDMxMTAvBgNV
BAMTKDJENEM4NUM1RTVEODgzNkYxMjc1NUE2RTRFNDlFNEZDQjVEMDYxMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLUj1VfwkIC00ETYzpGMGesdK/
jOkz2pvAaqLx0qhdULRwcFgbAhqs9J6MOvp2HM3VAayfC6Jb4Pbv40q4L2kzhw8j
U/QTwEgmhrxYRgErBJ9A4QEVCKHoZFhgTqxNCbmnR/pqridb9+5DkuE0ipm594u3
0kyqWpQnyxi90NYoBl5vol905Px0FxZWawZ4uCMxUcHK6iXKmRRX5kXf0FKjmWNk
FwwJBGTO8fhTWlKKBfejRmIM6ZLqAbod/bWGUlzh7SyMpA4RRkSUytpUw31ym+yl
7gwnspJ4zzgqPe5W1Ij2p3AxMQ82pK3lGltf+bb8OyHElO1fsSJaFwfrqgE1AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQULUyFxeXYg28SdVpuTknk/LXQYTkwHwYDVR0j
BBgwFoAUSV9/IDQJN1x2Dwlh8f2CwsiVQcwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNENjVjhZSkc5NDFhTTZWc1dycFRUVUQxb3dxbUF3aVhDMmZMVzlhYjJn
QUgvMC80OTVGN0YyMDM0MDkzNzVDNzYwRjA5NjFGMUZEODJDMkM4OTU0MUNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ5NUY3RjIwMzQwOTM3NUM3
NjBGMDk2MUYxRkQ4MkMyQzg5NTQxQ0MuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRDY1Y4WUpHOTQxYU02VnNXcnBUVFVEMW93cW1Bd2lYQzJmTFc5YWIyZ0FILzAv
MzIzODMwMzQzYTM2NjE2MzM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMw
MzMzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARqyDANBgkqhkiG9w0BAQsFAAOCAQEAED8m7mFA
K2OKsNKD1BRQjL+Uo3S0vuM3xVek8QsZuWUADgxRc9xaHIGDNu+VSIY7a1/irE61
NCiLTTU8uwiiCYEFS2CbKwABGpVEdnvcDdiT3Ed+3tlIUcrPT+6HxGAlUWEZ7m5t
4pcCoVMVeusDUCz/keCEItWpN8I32wn91dREL5f2qPsWMR4UJfKZ4dQ2p6mr3QwZ
Y3YCdC1c0VZxwY0g/jS9dcEOQOmfUni7MSi5g5vT0fOZCyRf08DyELQgBKFPwbsN
xJFkYABtHnQ74NenKRbQBC1b6B5SKO9K1oKQyqBnk6ucN/4ahtLDxEoB4i8prHyY
QLSKX6+FoCYXCA==
-----END CERTIFICATE-----
Generated at Wed Apr 8 12:22:40 2026 by rpki-client