Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/323830343a3363303a3a2f33322d3438203d3e203238363035.roa
File: 323830343a3363303a3a2f33322d3438203d3e203238363035.roa (raw, json)
Hash identifier: r3ydhLpLfHAyaiN3YWDGT2xWMDKfCgCG9anVRkUMGag=
Subject key identifier: AF:25:70:02:3C:8F:8C:8E:65:AB:D0:D8:AE:D9:C8:7C:6F:9C:47:F8
Certificate issuer: /CN=0A2B6CA6C9AA751D566934EB1DD9986288ECBC17
Certificate serial: 77AF14AF75F07FB27816B04DAB3ADCF6239B2495
Authority key identifier: 0A:2B:6C:A6:C9:AA:75:1D:56:69:34:EB:1D:D9:98:62:88:EC:BC:17
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2B6CA6C9AA751D566934EB1DD9986288ECBC17.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/323830343a3363303a3a2f33322d3438203d3e203238363035.roa
Signing time: Sat 04 Apr 2026 17:25:40 +0000
ROA not before: Sat 04 Apr 2026 17:20:40 +0000
ROA not after: Sat 03 Apr 2027 17:25:40 +0000
asID: 28605
IP address blocks: 2804:3c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:af:14:af:75:f0:7f:b2:78:16:b0:4d:ab:3a:dc:f6:23:9b:24:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A2B6CA6C9AA751D566934EB1DD9986288ECBC17
Validity
Not Before: Apr 4 17:20:40 2026 GMT
Not After : Apr 3 17:25:40 2027 GMT
Subject: CN=AF2570023C8F8C8E65ABD0D8AED9C87C6F9C47F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:13:77:da:43:b9:2a:dd:e2:a3:1e:52:ec:fb:
68:88:04:03:61:d6:4b:3c:98:03:60:69:70:74:3c:
6d:fd:4d:59:83:41:5c:36:8d:bd:a6:a3:14:cf:c7:
64:d0:ba:1f:5e:51:cf:03:2f:69:51:e1:2a:72:d0:
e5:46:44:f5:c2:81:7e:4e:02:27:bb:c9:52:a0:50:
76:b7:5d:ea:ef:e6:eb:a4:37:82:7e:f4:2b:61:c5:
36:30:4b:cc:31:05:e2:71:4e:73:05:80:65:16:10:
92:ad:65:59:ef:77:c9:99:ce:95:b5:d1:0e:d0:2e:
09:05:4c:80:9f:90:d1:2a:28:ed:10:32:57:9b:c1:
eb:51:f4:36:f7:4b:05:9e:ae:ad:3f:70:81:67:90:
b0:81:55:8b:31:96:4e:60:42:f8:37:4a:71:53:57:
30:56:b4:d9:62:23:47:57:af:27:c0:e1:4c:63:48:
e7:fd:d2:09:c1:26:cd:69:09:1c:b5:b5:ca:79:4d:
9c:63:fd:fb:8b:8d:08:6b:3c:38:49:08:76:d0:04:
e5:56:38:f5:54:c0:75:0a:43:d3:8b:85:c3:2f:b7:
d2:52:ef:be:5e:2c:42:b2:6f:cc:84:20:54:fb:72:
05:a1:55:11:85:03:ae:fc:09:0b:29:07:86:eb:67:
e9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:25:70:02:3C:8F:8C:8E:65:AB:D0:D8:AE:D9:C8:7C:6F:9C:47:F8
X509v3 Authority Key Identifier:
keyid:0A:2B:6C:A6:C9:AA:75:1D:56:69:34:EB:1D:D9:98:62:88:EC:BC:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/0A2B6CA6C9AA751D566934EB1DD9986288ECBC17.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2B6CA6C9AA751D566934EB1DD9986288ECBC17.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/323830343a3363303a3a2f33322d3438203d3e203238363035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3c0::/32
Signature Algorithm: sha256WithRSAEncryption
a6:9f:87:ce:6b:ce:28:41:e4:6d:59:19:be:e1:80:8e:f3:15:
b9:51:de:eb:43:19:05:78:c8:57:af:82:12:55:94:e5:fd:61:
24:71:9d:b6:46:37:9a:52:3e:bb:66:54:6d:41:98:e8:86:49:
81:8e:86:a3:cb:a5:ea:7c:56:1e:32:b6:b9:0e:49:7a:4e:da:
44:1d:ea:74:c5:f0:f2:1e:c2:99:e7:c7:34:93:b4:50:9d:cb:
14:87:88:45:9b:e4:db:da:27:96:4c:3a:a7:72:62:30:57:01:
55:e1:18:82:65:e8:ff:a8:e0:d0:74:d9:01:9e:aa:1f:b2:ca:
e0:6a:81:44:54:7b:fe:30:94:ed:71:c4:0a:a6:4c:ce:dd:83:
5b:d8:f1:b9:62:b8:91:3e:52:f4:57:4c:db:16:0d:ec:d6:27:
05:6d:ce:c8:00:c2:63:f9:5d:e7:7f:52:7d:eb:7a:30:bc:e8:
c7:f9:2d:5d:3e:d3:e5:81:5e:09:eb:1b:6c:af:8b:a1:9d:0a:
fe:02:a2:b8:8d:30:5a:1f:14:ed:83:f1:30:b6:c1:f9:08:63:
6a:d5:f8:27:26:93:59:a5:12:7f:99:ce:df:22:92:de:e5:3f:
83:e4:04:84:e8:0d:49:3d:d6:32:8e:91:c3:ec:40:f3:60:d8:
bd:7f:cf:92
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUd68Ur3Xwf7J4FrBNqzrc9iObJJUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEEyQjZDQTZDOUFBNzUxRDU2NjkzNEVCMUREOTk4NjI4
OEVDQkMxNzAeFw0yNjA0MDQxNzIwNDBaFw0yNzA0MDMxNzI1NDBaMDMxMTAvBgNV
BAMTKEFGMjU3MDAyM0M4RjhDOEU2NUFCRDBEOEFFRDlDODdDNkY5QzQ3RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwE3faQ7kq3eKjHlLs+2iIBANh
1ks8mANgaXB0PG39TVmDQVw2jb2moxTPx2TQuh9eUc8DL2lR4Spy0OVGRPXCgX5O
Aie7yVKgUHa3Xerv5uukN4J+9CthxTYwS8wxBeJxTnMFgGUWEJKtZVnvd8mZzpW1
0Q7QLgkFTICfkNEqKO0QMlebwetR9Db3SwWerq0/cIFnkLCBVYsxlk5gQvg3SnFT
VzBWtNliI0dXryfA4UxjSOf90gnBJs1pCRy1tcp5TZxj/fuLjQhrPDhJCHbQBOVW
OPVUwHUKQ9OLhcMvt9JS775eLEKyb8yEIFT7cgWhVRGFA678CQspB4brZ+kBAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUryVwAjyPjI5lq9DYrtnIfG+cR/gwHwYDVR0j
BBgwFoAUCitspsmqdR1WaTTrHdmYYojsvBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFo5OHdVNWk1Y005N0hoaTZVb2JQbWNiZE1IZVhlM0VXeUF2NFAxbVpI
eVMvMC8wQTJCNkNBNkM5QUE3NTFENTY2OTM0RUIxREQ5OTg2Mjg4RUNCQzE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBMkI2Q0E2QzlBQTc1MUQ1
NjY5MzRFQjFERDk5ODYyODhFQ0JDMTcuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRaOTh3VTVpNWNNOTdIaGk2VW9iUG1jYmRNSGVYZTNFV3lBdjRQMW1aSHlTLzAv
MzIzODMwMzQzYTMzNjMzMDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzgzNjMw
MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAPAMA0GCSqGSIb3DQEBCwUAA4IBAQCmn4fOa84oQeRt
WRm+4YCO8xW5Ud7rQxkFeMhXr4ISVZTl/WEkcZ22RjeaUj67ZlRtQZjohkmBjoaj
y6XqfFYeMra5Dkl6TtpEHep0xfDyHsKZ58c0k7RQncsUh4hFm+Tb2ieWTDqncmIw
VwFV4RiCZej/qODQdNkBnqofssrgaoFEVHv+MJTtccQKpkzO3YNb2PG5YriRPlL0
V0zbFg3s1icFbc7IAMJj+V3nf1J963owvOjH+S1dPtPlgV4J6xtsr4uhnQr+AqK4
jTBaHxTtg/EwtsH5CGNq1fgnJpNZpRJ/mc7fIpLe5T+D5ASE6A1JPdYyjpHD7EDz
YNi9f8+S
-----END CERTIFICATE-----
Generated at Wed Apr 8 10:57:15 2026 by rpki-client