Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232302e302f32332d3233203d3e20323638323438.roa
File: 34352e3233362e3232302e302f32332d3233203d3e20323638323438.roa (raw, json)
Hash identifier: /CruhBjmB56+AYeV08Ze/tfieNp+dyFvFXd7nbGyXbk=
Subject key identifier: 64:30:8C:15:ED:7F:7B:F3:FA:AB:FA:56:35:8B:E2:DC:62:11:A1:3E
Certificate issuer: /CN=303D3960E9C6FCF6DFD255601560BC60351F347F
Certificate serial: 4F42A081E1109748A235B4E2239A1E755310C9B1
Authority key identifier: 30:3D:39:60:E9:C6:FC:F6:DF:D2:55:60:15:60:BC:60:35:1F:34:7F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/303D3960E9C6FCF6DFD255601560BC60351F347F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232302e302f32332d3233203d3e20323638323438.roa
Signing time: Wed 11 Mar 2026 19:29:36 +0000
ROA not before: Wed 11 Mar 2026 19:24:36 +0000
ROA not after: Wed 10 Mar 2027 19:29:36 +0000
asID: 268248
IP address blocks: 45.236.220.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:42:a0:81:e1:10:97:48:a2:35:b4:e2:23:9a:1e:75:53:10:c9:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=303D3960E9C6FCF6DFD255601560BC60351F347F
Validity
Not Before: Mar 11 19:24:36 2026 GMT
Not After : Mar 10 19:29:36 2027 GMT
Subject: CN=64308C15ED7F7BF3FAABFA56358BE2DC6211A13E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:73:1c:7b:13:0b:a0:a5:65:af:10:c5:21:4e:
8a:28:15:d6:c3:34:c1:db:ba:4f:9a:28:cf:10:d5:
c6:12:32:ff:2c:0b:b5:42:45:de:3d:3c:d3:89:2c:
06:2a:45:af:49:fc:a3:0a:25:55:de:96:c3:6b:c1:
61:b6:d2:f5:55:21:a9:11:80:a7:6b:87:a0:cf:0f:
a1:eb:7b:8d:e6:d4:76:f4:d1:40:8a:b6:ee:e3:b9:
31:02:76:21:bd:91:a7:f5:db:15:a7:37:01:f6:12:
70:c0:59:83:c1:07:46:63:8b:e4:0a:c2:5e:b4:9f:
6c:ad:fb:23:d5:c7:7a:c0:0f:c1:c7:c4:21:b2:52:
de:56:88:e6:be:73:5c:0d:b3:7a:dc:54:36:75:4e:
42:e9:e9:54:69:b3:a6:a1:51:79:4d:61:81:7f:6e:
21:b4:e4:71:5e:9b:47:15:d6:dc:1e:12:dd:78:8d:
2f:35:bd:30:7f:60:f6:2a:4b:d9:58:e7:31:d9:bb:
3c:d1:ba:03:21:d6:50:10:5f:4d:7c:1c:ce:66:b2:
71:25:ec:3a:d0:e6:46:8f:a6:14:6f:ce:61:ab:3d:
a9:a0:78:0f:51:d3:e9:5d:0b:3d:e5:ed:92:ee:48:
9c:6c:25:1c:9c:9c:4d:9e:d5:cd:0c:2b:04:2e:ea:
21:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:30:8C:15:ED:7F:7B:F3:FA:AB:FA:56:35:8B:E2:DC:62:11:A1:3E
X509v3 Authority Key Identifier:
keyid:30:3D:39:60:E9:C6:FC:F6:DF:D2:55:60:15:60:BC:60:35:1F:34:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/303D3960E9C6FCF6DFD255601560BC60351F347F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/303D3960E9C6FCF6DFD255601560BC60351F347F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232302e302f32332d3233203d3e20323638323438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.220.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:b4:40:dc:6b:13:f2:51:6a:a3:b6:28:e0:8f:2b:9d:b7:9e:
5a:14:f2:2d:0b:16:64:01:b0:e8:a0:59:c5:d1:5d:7e:bf:14:
fe:bc:b2:ab:35:83:40:34:01:33:95:c1:a5:06:81:4e:83:6d:
db:95:df:15:21:ee:a3:39:1f:54:3a:89:d7:a1:37:0a:67:f5:
0e:b0:11:da:0c:30:22:03:17:1f:15:4a:e3:a1:a6:56:44:2b:
6f:02:d8:1b:e3:23:7d:7f:3f:44:91:50:53:9b:ac:42:e7:93:
e9:35:05:d7:ff:74:4a:f1:13:ec:51:0e:cc:69:e2:df:75:ff:
d8:c8:aa:6a:ea:24:14:ff:db:8a:e0:e7:75:7e:f5:3d:31:eb:
95:36:b0:7a:e7:6f:6f:64:ae:a1:36:00:32:45:5e:46:81:c5:
a5:5e:94:8a:53:10:92:cb:83:03:89:8a:a4:14:d8:5a:6c:a5:
ac:89:c9:ec:fb:43:8a:50:ad:f5:bc:9a:93:0e:8f:b1:a7:cd:
64:48:0a:fc:2e:a1:a7:3c:29:49:4f:c8:7a:00:34:bc:df:0f:
5a:f4:bd:f0:5b:b3:7a:f4:bc:58:66:64:5f:c6:4c:bc:d0:b7:
a2:3f:bb:fe:ba:ee:04:da:0e:07:cc:33:17:de:3e:85:8a:57:
a0:08:7a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 16:00:45 2026 by rpki-client