Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232302e302f32342d3234203d3e20323638323438.roa
File: 34352e3233362e3232302e302f32342d3234203d3e20323638323438.roa (raw, json)
Hash identifier: L1yWQaddpprLb98yZK4yZAUX7BkpaJ5s0Gu31i/zJ5w=
Subject key identifier: CB:90:BF:39:52:82:E0:67:F6:14:95:B4:D9:D7:EC:DA:16:E4:70:C9
Certificate issuer: /CN=303D3960E9C6FCF6DFD255601560BC60351F347F
Certificate serial: 04C8B1ACB72A0DE4A181C81091ED6E242D970523
Authority key identifier: 30:3D:39:60:E9:C6:FC:F6:DF:D2:55:60:15:60:BC:60:35:1F:34:7F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/303D3960E9C6FCF6DFD255601560BC60351F347F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232302e302f32342d3234203d3e20323638323438.roa
Signing time: Wed 11 Mar 2026 19:29:39 +0000
ROA not before: Wed 11 Mar 2026 19:24:39 +0000
ROA not after: Wed 10 Mar 2027 19:29:39 +0000
asID: 268248
IP address blocks: 45.236.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:c8:b1:ac:b7:2a:0d:e4:a1:81:c8:10:91:ed:6e:24:2d:97:05:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=303D3960E9C6FCF6DFD255601560BC60351F347F
Validity
Not Before: Mar 11 19:24:39 2026 GMT
Not After : Mar 10 19:29:39 2027 GMT
Subject: CN=CB90BF395282E067F61495B4D9D7ECDA16E470C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ea:09:00:e4:b4:92:7f:0e:e7:41:47:dc:8f:
74:85:7c:1a:fb:49:15:e2:61:b4:8e:ce:66:5b:d3:
06:29:1b:e8:62:2a:c2:fb:75:24:30:44:cd:6a:ef:
b7:59:17:93:7c:15:43:cc:cc:ca:e3:34:55:88:d1:
19:53:05:a2:a3:bb:fc:c9:0f:a6:91:28:61:ec:75:
13:12:86:ff:73:a6:da:93:ff:70:fa:fe:cb:c7:9d:
95:5f:cf:26:27:bd:cc:8e:12:1d:7b:3f:6f:17:8f:
aa:94:16:6f:14:20:55:f1:17:6a:b5:9a:5c:4e:59:
d2:f8:02:43:23:c0:a8:de:1c:83:7d:70:44:6b:04:
83:4b:99:41:ee:b1:b0:b2:3f:c5:47:c1:39:8a:4a:
81:3c:4d:d1:20:0a:8a:5d:31:69:a6:78:f5:31:91:
de:f7:b4:87:b1:ca:e0:6e:20:cc:bc:1b:ad:c7:f6:
0a:e4:04:3f:cc:91:73:c4:9b:95:12:04:8b:f2:d3:
93:14:32:32:73:00:da:62:79:3c:d9:95:bc:f7:aa:
66:c5:b6:9f:83:dd:14:cb:e7:eb:eb:09:30:64:3d:
af:39:37:a4:57:b7:e4:a7:bd:8f:33:9a:88:f3:35:
80:34:23:25:74:dc:3a:8a:36:b9:3b:59:25:af:82:
05:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:90:BF:39:52:82:E0:67:F6:14:95:B4:D9:D7:EC:DA:16:E4:70:C9
X509v3 Authority Key Identifier:
keyid:30:3D:39:60:E9:C6:FC:F6:DF:D2:55:60:15:60:BC:60:35:1F:34:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/303D3960E9C6FCF6DFD255601560BC60351F347F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/303D3960E9C6FCF6DFD255601560BC60351F347F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232302e302f32342d3234203d3e20323638323438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.220.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:27:11:3f:3d:77:5f:48:19:e8:4b:b7:6c:93:4e:41:77:55:
03:b0:22:15:a1:8f:94:06:65:ad:d4:c3:af:27:63:a4:1f:ec:
e1:73:ec:c0:08:b4:75:9d:51:7b:07:9a:ce:01:d2:a5:78:db:
2e:c7:c1:6f:07:ab:20:6b:2c:66:e1:a9:62:cb:9d:51:bc:29:
b1:a7:ce:ba:dd:0d:52:05:fb:7c:81:ca:46:14:3c:7b:c1:37:
fd:fe:2f:aa:a7:0b:ad:75:51:f2:08:33:34:48:e1:7e:07:5d:
78:80:7a:98:b3:df:ac:54:55:23:fb:1b:98:38:92:99:5d:21:
18:c1:6f:da:1b:95:8c:9e:cc:ad:46:25:62:70:5a:59:e1:a1:
90:81:55:65:4e:75:53:88:43:4d:8e:de:11:1d:1c:58:09:d0:
c4:78:82:c6:2f:a7:58:43:30:08:99:9d:3a:cd:c2:3c:6f:ca:
55:11:e0:a6:d4:80:49:04:51:ac:a9:13:84:50:3a:f8:32:06:
88:98:f6:07:5e:71:09:d8:08:0d:b8:47:1f:14:2c:a8:c7:98:
77:71:f4:65:72:0f:c5:f1:2a:7f:75:e4:10:20:be:a8:f8:18:
6b:0a:64:5f:fd:28:06:82:9f:e8:8e:a5:34:35:a5:cb:69:f2:
eb:87:a1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:53:55 2026 by rpki-client