Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3230312e32302e3134342e302f32302d3234203d3e203238363035.roa
File: 3230312e32302e3134342e302f32302d3234203d3e203238363035.roa (raw, json)
Hash identifier: +46MlGsXspkx0+CrKT2kemKzHCaUxzvZibNoingvDkU=
Subject key identifier: B4:7E:B0:79:BF:D7:D6:23:A2:7E:16:CB:C6:28:E1:A9:EF:4F:1E:39
Certificate issuer: /CN=0A2B6CA6C9AA751D566934EB1DD9986288ECBC17
Certificate serial: 13CC7D15111736E729709BC405E58BDFE27770CD
Authority key identifier: 0A:2B:6C:A6:C9:AA:75:1D:56:69:34:EB:1D:D9:98:62:88:EC:BC:17
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2B6CA6C9AA751D566934EB1DD9986288ECBC17.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3230312e32302e3134342e302f32302d3234203d3e203238363035.roa
Signing time: Sat 04 Apr 2026 17:25:34 +0000
ROA not before: Sat 04 Apr 2026 17:20:34 +0000
ROA not after: Sat 03 Apr 2027 17:25:34 +0000
asID: 28605
IP address blocks: 201.20.144.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:cc:7d:15:11:17:36:e7:29:70:9b:c4:05:e5:8b:df:e2:77:70:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A2B6CA6C9AA751D566934EB1DD9986288ECBC17
Validity
Not Before: Apr 4 17:20:34 2026 GMT
Not After : Apr 3 17:25:34 2027 GMT
Subject: CN=B47EB079BFD7D623A27E16CBC628E1A9EF4F1E39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c2:f4:f8:73:5b:41:5e:32:e2:ae:b5:f4:91:
99:5d:1e:7c:49:d7:03:e5:e7:b3:94:3d:48:5a:e1:
5f:d5:3f:c5:c0:c4:f2:a1:76:db:ff:19:5b:ac:bf:
13:f8:ed:d1:95:b5:21:ca:1c:74:76:a3:0f:8e:81:
43:42:c7:48:7e:4a:60:f0:1c:62:5e:d6:91:6f:f7:
b4:6c:dd:24:ed:7f:e6:fe:00:5c:ed:f0:76:37:df:
75:db:6f:e0:46:2b:0c:e7:82:9d:9e:b3:82:62:0b:
c0:9b:79:a9:31:6a:f7:5c:57:04:9e:54:f5:8e:58:
8c:81:38:f8:66:bc:f3:eb:05:17:6e:46:e9:80:7c:
be:5f:2e:79:13:15:ed:27:90:2c:ea:ad:f1:ae:8b:
5a:fb:1d:37:ad:e2:43:83:6c:e0:5a:71:32:27:99:
51:9d:f6:57:fa:37:89:84:5b:6a:55:45:37:8a:ae:
fd:5f:36:f6:47:cb:ae:e7:ed:99:3e:64:02:d9:79:
8e:c5:6e:dc:c6:00:23:6e:d5:2a:c9:7d:d6:59:66:
b6:03:e8:93:aa:ab:d0:e8:0a:9d:99:fc:5d:e4:12:
ff:8a:a6:e8:4a:56:9d:cf:b7:3b:1a:f7:7b:4d:28:
f9:a9:9f:a0:da:92:40:9a:0c:60:d8:1c:f8:44:41:
da:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7E:B0:79:BF:D7:D6:23:A2:7E:16:CB:C6:28:E1:A9:EF:4F:1E:39
X509v3 Authority Key Identifier:
keyid:0A:2B:6C:A6:C9:AA:75:1D:56:69:34:EB:1D:D9:98:62:88:EC:BC:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/0A2B6CA6C9AA751D566934EB1DD9986288ECBC17.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2B6CA6C9AA751D566934EB1DD9986288ECBC17.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3230312e32302e3134342e302f32302d3234203d3e203238363035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.20.144.0/20
Signature Algorithm: sha256WithRSAEncryption
95:04:8e:c1:2f:65:a6:da:c9:45:ea:15:75:64:f2:0d:9d:4f:
64:d5:f2:fa:7f:09:56:79:4c:25:b0:36:10:a1:e0:78:6a:6f:
fb:e6:99:de:df:22:ce:13:61:8e:c6:28:0d:a7:72:0f:e0:80:
a9:8e:b1:d9:ff:de:90:ea:2b:cf:e6:de:e7:a6:8e:a6:fc:ce:
8b:46:d4:db:f9:3d:ad:1a:08:9a:84:c9:02:75:28:42:74:dc:
a9:8b:55:3f:d4:70:dd:15:9f:06:22:3d:db:e3:58:82:93:5b:
f1:cb:84:41:b8:77:c7:50:55:33:8e:4a:d8:32:da:2e:a7:21:
d2:51:e9:88:e9:86:db:18:d5:e4:81:cf:66:b2:a1:54:b9:bc:
c7:2b:8b:40:e5:31:43:9a:86:83:a8:35:51:98:4d:8a:84:43:
e4:23:17:d6:8b:bd:68:4b:ab:20:c4:b3:d2:77:90:7c:be:0d:
8d:d3:35:57:50:fc:f3:39:36:0a:fa:a8:f9:e9:53:11:ce:6a:
28:d1:9f:88:4c:f7:a3:0f:62:5f:c7:fc:3f:4f:73:7c:a6:e3:
08:ab:a6:85:eb:2d:e3:28:15:cd:79:a4:8a:0d:9a:06:21:c1:
93:1e:aa:9c:fa:62:7b:69:41:ec:b0:66:df:c4:0c:88:60:ea:
ae:8f:e3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:46:23 2026 by rpki-client