Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232302e302f32322d3232203d3e20323638323438.roa
File:                     34352e3233362e3232302e302f32322d3232203d3e20323638323438.roa (raw, json)
Hash identifier:          1jbyH8ysiOuft9YRIWwInBmjkjYSfCUX7NHYhPpHmEk=
Subject key identifier:   FE:61:C1:91:71:BB:40:91:05:CC:F4:14:04:CD:85:FB:10:F5:AA:6B
Certificate issuer:       /CN=303D3960E9C6FCF6DFD255601560BC60351F347F
Certificate serial:       1C8537DCB6C387664760A1564EA55484989346EB
Authority key identifier: 30:3D:39:60:E9:C6:FC:F6:DF:D2:55:60:15:60:BC:60:35:1F:34:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/303D3960E9C6FCF6DFD255601560BC60351F347F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232302e302f32322d3232203d3e20323638323438.roa
Signing time:             Wed 11 Mar 2026 19:29:35 +0000
ROA not before:           Wed 11 Mar 2026 19:24:35 +0000
ROA not after:            Wed 10 Mar 2027 19:29:35 +0000
asID:                     268248
IP address blocks:        45.236.220.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:85:37:dc:b6:c3:87:66:47:60:a1:56:4e:a5:54:84:98:93:46:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=303D3960E9C6FCF6DFD255601560BC60351F347F
        Validity
            Not Before: Mar 11 19:24:35 2026 GMT
            Not After : Mar 10 19:29:35 2027 GMT
        Subject: CN=FE61C19171BB409105CCF41404CD85FB10F5AA6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4d:8e:7a:27:63:e2:12:08:59:aa:ec:af:cf:
                    a8:7e:88:c6:b7:ef:70:26:fc:78:71:4f:e4:e6:4d:
                    57:89:8d:bd:7d:00:8b:e4:cb:d6:56:bd:53:b1:88:
                    99:9c:c2:5c:4e:86:57:78:61:96:74:4e:8a:b3:e3:
                    e1:82:0f:19:d4:bb:e0:53:20:d4:7a:bc:b3:c9:79:
                    8a:a3:67:5d:4d:68:bb:3a:bd:70:a3:88:e9:6b:5a:
                    7c:df:eb:71:7d:3d:6a:8d:04:6d:3e:47:a1:00:f1:
                    cb:99:9a:4b:74:88:15:f4:b5:78:e4:b0:54:40:6c:
                    ae:39:d8:54:0b:6d:3e:3b:f0:6b:33:67:13:6e:f2:
                    f9:20:a3:bd:e1:89:5d:a4:7d:dd:40:5d:6e:d8:67:
                    f2:23:7b:f4:c8:fb:05:4e:13:b1:26:39:72:14:0f:
                    b6:83:00:5b:b7:fd:b9:5b:0e:55:13:e1:7b:ab:34:
                    7e:48:e5:4a:c6:fd:11:76:a3:70:a1:c1:0a:c2:c7:
                    d5:17:03:2e:9f:08:ef:e5:11:f2:15:a2:da:13:da:
                    45:10:be:e2:8b:8a:56:55:54:ca:15:45:40:27:2c:
                    15:7d:b1:8a:b3:2d:40:7d:ea:90:f9:8b:d4:92:46:
                    48:e0:4c:85:f3:9c:73:ab:dd:ff:44:fe:07:b2:a9:
                    60:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:61:C1:91:71:BB:40:91:05:CC:F4:14:04:CD:85:FB:10:F5:AA:6B
            X509v3 Authority Key Identifier:
                keyid:30:3D:39:60:E9:C6:FC:F6:DF:D2:55:60:15:60:BC:60:35:1F:34:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/303D3960E9C6FCF6DFD255601560BC60351F347F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/303D3960E9C6FCF6DFD255601560BC60351F347F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232302e302f32322d3232203d3e20323638323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:e7:01:ed:da:e6:f4:e6:7a:dc:95:8a:d2:97:a4:5f:7b:c7:
         08:ec:c5:c4:dc:fa:72:6c:6c:f5:1d:33:19:c0:5c:08:2d:09:
         19:d0:8c:b1:22:a1:2d:a0:b1:75:5f:ac:63:06:87:50:03:c2:
         6c:dc:17:72:83:3f:99:f5:0d:2a:3a:12:61:e6:ae:6d:3e:3d:
         a4:f2:92:d5:7b:64:97:0d:3a:09:47:84:21:34:11:76:1d:70:
         f4:1b:e1:8a:63:63:d2:87:dd:a6:84:14:0b:55:11:91:0e:5a:
         5d:bd:d7:9e:43:ff:55:61:3c:bb:f0:b3:33:e7:63:3a:1c:a3:
         c0:b5:9c:96:18:fd:5d:1c:0d:58:77:4e:6a:a9:c3:f0:26:71:
         6a:77:a3:1e:b0:52:ef:da:ad:69:95:c7:3d:36:f5:93:3c:b0:
         e5:5e:a7:9a:0f:f9:3a:50:94:8d:a4:db:6b:d0:df:2d:02:3c:
         bf:80:37:02:a4:89:cb:86:64:88:a8:d3:d2:cc:c5:07:a7:35:
         55:8d:b4:15:ee:84:c5:10:52:08:fe:35:e3:2b:6f:62:41:40:
         a3:16:ee:39:8b:dc:52:71:28:ce:35:8d:d4:85:20:a6:ec:37:
         15:b4:b9:fc:94:25:3c:fc:2e:49:40:1f:84:c2:09:b8:15:37:
         2b:42:2e:63
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHIU33LbDh2ZHYKFWTqVUhJiTRuswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzAzRDM5NjBFOUM2RkNGNkRGRDI1NTYwMTU2MEJDNjAz
NTFGMzQ3RjAeFw0yNjAzMTExOTI0MzVaFw0yNzAzMTAxOTI5MzVaMDMxMTAvBgNV
BAMTKEZFNjFDMTkxNzFCQjQwOTEwNUNDRjQxNDA0Q0Q4NUZCMTBGNUFBNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpTY56J2PiEghZquyvz6h+iMa3
73Am/HhxT+TmTVeJjb19AIvky9ZWvVOxiJmcwlxOhld4YZZ0Toqz4+GCDxnUu+BT
INR6vLPJeYqjZ11NaLs6vXCjiOlrWnzf63F9PWqNBG0+R6EA8cuZmkt0iBX0tXjk
sFRAbK452FQLbT478GszZxNu8vkgo73hiV2kfd1AXW7YZ/Ije/TI+wVOE7EmOXIU
D7aDAFu3/blbDlUT4XurNH5I5UrG/RF2o3ChwQrCx9UXAy6fCO/lEfIVotoT2kUQ
vuKLilZVVMoVRUAnLBV9sYqzLUB96pD5i9SSRkjgTIXznHOr3f9E/geyqWDJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU/mHBkXG7QJEFzPQUBM2F+xD1qmswHwYDVR0j
BBgwFoAUMD05YOnG/Pbf0lVgFWC8YDUfNH8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFZWRERaZVA4Skt6QzJtUndhRnVIQXRiMnpuYU5IQ3p4NFU1RUh0VllQ
SEwvMC8zMDNEMzk2MEU5QzZGQ0Y2REZEMjU1NjAxNTYwQkM2MDM1MUYzNDdGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMwM0QzOTYwRTlDNkZDRjZE
RkQyNTU2MDE1NjBCQzYwMzUxRjM0N0YuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RWVkREWmVQOEpLekMybVJ3YUZ1SEF0YjJ6bmFOSEN6eDRVNUVIdFZZUEhMLzAv
MzQzNTJlMzIzMzM2MmUzMjMyMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzgzMjM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt7NwwDQYJKoZIhvcNAQELBQADggEBAJbnAe3a
5vTmetyVitKXpF97xwjsxcTc+nJsbPUdMxnAXAgtCRnQjLEioS2gsXVfrGMGh1AD
wmzcF3KDP5n1DSo6EmHmrm0+PaTyktV7ZJcNOglHhCE0EXYdcPQb4YpjY9KH3aaE
FAtVEZEOWl29155D/1VhPLvwszPnYzoco8C1nJYY/V0cDVh3Tmqpw/AmcWp3ox6w
Uu/arWmVxz029ZM8sOVep5oP+TpQlI2k22vQ3y0CPL+ANwKkicuGZIio09LMxQen
NVWNtBXuhMUQUgj+NeMrb2JBQKMW7jmL3FJxKM41jdSFIKbsNxW0ufyUJTz8LklA
H4TCCbgVNytCLmM=
-----END CERTIFICATE-----
Generated at Wed Apr 8 13:36:24 2026 by rpki-client