Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232312e302f32342d3234203d3e20323638323438.roa
File:                     34352e3233362e3232312e302f32342d3234203d3e20323638323438.roa (raw, json)
Hash identifier:          XlC9FUHEXEvqpXWVw5wDYKlk2NAiW8gaL5GkN8UvG7o=
Subject key identifier:   49:2D:C2:53:1E:C0:E1:CB:AA:A2:45:E9:7F:ED:03:2C:C7:73:09:24
Certificate issuer:       /CN=303D3960E9C6FCF6DFD255601560BC60351F347F
Certificate serial:       7E7E0838B03387A49733BFF13A97355AA99D7F6A
Authority key identifier: 30:3D:39:60:E9:C6:FC:F6:DF:D2:55:60:15:60:BC:60:35:1F:34:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/303D3960E9C6FCF6DFD255601560BC60351F347F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232312e302f32342d3234203d3e20323638323438.roa
Signing time:             Wed 11 Mar 2026 19:29:43 +0000
ROA not before:           Wed 11 Mar 2026 19:24:43 +0000
ROA not after:            Wed 10 Mar 2027 19:29:43 +0000
asID:                     268248
IP address blocks:        45.236.221.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:7e:08:38:b0:33:87:a4:97:33:bf:f1:3a:97:35:5a:a9:9d:7f:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=303D3960E9C6FCF6DFD255601560BC60351F347F
        Validity
            Not Before: Mar 11 19:24:43 2026 GMT
            Not After : Mar 10 19:29:43 2027 GMT
        Subject: CN=492DC2531EC0E1CBAAA245E97FED032CC7730924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:11:65:20:05:fa:20:12:ed:19:26:8f:24:a9:
                    38:f4:72:68:48:3c:45:f2:7d:06:ac:33:82:85:b8:
                    2c:82:07:fb:59:14:46:14:80:11:35:07:bb:14:82:
                    72:f8:c7:70:b1:4b:4a:c7:62:12:ae:e8:eb:2d:44:
                    d3:a7:75:41:85:12:70:22:ff:e0:ec:86:12:ca:fe:
                    e9:8a:73:29:c3:7e:e3:82:99:0c:af:27:4b:02:c0:
                    a1:df:8b:f7:fe:0f:1f:d3:c4:be:42:0c:6b:56:cd:
                    ed:32:9f:61:5f:ba:34:69:77:70:6d:dd:9f:b2:d1:
                    72:81:fa:c8:b3:28:51:13:22:fb:0c:25:8a:b4:7d:
                    f2:12:79:95:c6:7d:11:05:d8:e6:91:45:d4:d2:f0:
                    28:f0:95:bc:09:9c:1e:61:fb:51:0b:ce:da:a9:5f:
                    5f:d0:87:7a:cd:c6:7d:d3:ec:db:5f:38:d8:83:77:
                    02:2e:48:b8:53:e1:3f:98:6c:5b:f4:ad:ca:d1:04:
                    60:af:cc:20:28:ac:5c:ce:38:04:23:0f:5a:a9:59:
                    6f:14:5e:64:6e:91:07:d0:c9:68:3f:ca:90:8f:f7:
                    f0:fb:7c:a0:a9:ba:7d:f0:6f:4c:c0:01:43:87:07:
                    3e:1c:a1:2c:91:d8:b9:6d:05:be:bd:9a:d2:0a:bb:
                    1d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2D:C2:53:1E:C0:E1:CB:AA:A2:45:E9:7F:ED:03:2C:C7:73:09:24
            X509v3 Authority Key Identifier:
                keyid:30:3D:39:60:E9:C6:FC:F6:DF:D2:55:60:15:60:BC:60:35:1F:34:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/303D3960E9C6FCF6DFD255601560BC60351F347F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/303D3960E9C6FCF6DFD255601560BC60351F347F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232312e302f32342d3234203d3e20323638323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:fc:4f:63:e2:27:4d:19:50:d7:07:6f:cc:2c:06:80:31:4e:
         c1:91:12:f4:6d:0c:72:4c:f4:b6:15:70:36:3e:ca:40:2e:5d:
         f2:8c:5c:21:8b:89:d5:2a:c7:67:88:0f:eb:33:f9:a6:f8:ae:
         7c:94:36:f4:b9:95:4d:e4:08:a0:fa:55:d6:b2:5f:65:74:7a:
         2f:5f:67:f3:f1:8b:da:78:f8:49:b8:fd:c3:c4:4b:95:13:b4:
         5c:a7:8d:3d:0d:19:12:21:e5:c2:41:ec:10:e2:ad:45:a5:2f:
         cf:13:bb:9c:34:b3:e0:1b:84:d1:1b:1a:96:dc:46:b6:d6:f8:
         73:69:85:fa:2c:a8:f0:fe:fb:b3:5e:8d:59:f5:7d:13:59:ca:
         7b:ee:16:16:f1:47:d0:4a:e6:54:17:a8:ba:a8:b1:b6:c0:5f:
         6c:7b:3e:d1:af:a0:20:70:56:70:09:3a:f4:44:87:99:47:0e:
         b0:6c:ef:28:ab:11:39:7e:7f:1f:85:ad:e2:99:34:47:ff:eb:
         ae:51:5c:db:dc:63:c6:0c:85:1e:8d:39:3c:c8:98:da:bb:9b:
         bd:7a:3a:79:6c:21:03:9e:a7:dd:a5:e7:70:a7:bb:3b:af:e0:
         2d:6c:80:7b:61:1d:61:bf:e4:ae:76:81:c4:e4:67:51:b4:87:
         95:ea:5b:2a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfn4IOLAzh6SXM7/xOpc1Wqmdf2owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzAzRDM5NjBFOUM2RkNGNkRGRDI1NTYwMTU2MEJDNjAz
NTFGMzQ3RjAeFw0yNjAzMTExOTI0NDNaFw0yNzAzMTAxOTI5NDNaMDMxMTAvBgNV
BAMTKDQ5MkRDMjUzMUVDMEUxQ0JBQUEyNDVFOTdGRUQwMzJDQzc3MzA5MjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/EWUgBfogEu0ZJo8kqTj0cmhI
PEXyfQasM4KFuCyCB/tZFEYUgBE1B7sUgnL4x3CxS0rHYhKu6OstRNOndUGFEnAi
/+DshhLK/umKcynDfuOCmQyvJ0sCwKHfi/f+Dx/TxL5CDGtWze0yn2FfujRpd3Bt
3Z+y0XKB+sizKFETIvsMJYq0ffISeZXGfREF2OaRRdTS8CjwlbwJnB5h+1ELztqp
X1/Qh3rNxn3T7NtfONiDdwIuSLhT4T+YbFv0rcrRBGCvzCAorFzOOAQjD1qpWW8U
XmRukQfQyWg/ypCP9/D7fKCpun3wb0zAAUOHBz4coSyR2LltBb69mtIKux0VAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUSS3CUx7A4cuqokXpf+0DLMdzCSQwHwYDVR0j
BBgwFoAUMD05YOnG/Pbf0lVgFWC8YDUfNH8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFZWRERaZVA4Skt6QzJtUndhRnVIQXRiMnpuYU5IQ3p4NFU1RUh0VllQ
SEwvMC8zMDNEMzk2MEU5QzZGQ0Y2REZEMjU1NjAxNTYwQkM2MDM1MUYzNDdGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMwM0QzOTYwRTlDNkZDRjZE
RkQyNTU2MDE1NjBCQzYwMzUxRjM0N0YuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RWVkREWmVQOEpLekMybVJ3YUZ1SEF0YjJ6bmFOSEN6eDRVNUVIdFZZUEhMLzAv
MzQzNTJlMzIzMzM2MmUzMjMyMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMjM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt7N0wDQYJKoZIhvcNAQELBQADggEBAEP8T2Pi
J00ZUNcHb8wsBoAxTsGREvRtDHJM9LYVcDY+ykAuXfKMXCGLidUqx2eID+sz+ab4
rnyUNvS5lU3kCKD6VdayX2V0ei9fZ/Pxi9p4+Em4/cPES5UTtFynjT0NGRIh5cJB
7BDirUWlL88Tu5w0s+AbhNEbGpbcRrbW+HNphfosqPD++7NejVn1fRNZynvuFhbx
R9BK5lQXqLqosbbAX2x7PtGvoCBwVnAJOvREh5lHDrBs7yirETl+fx+FreKZNEf/
665RXNvcY8YMhR6NOTzImNq7m716OnlsIQOep92l53Cnuzuv4C1sgHthHWG/5K52
gcTkZ1G0h5XqWyo=
-----END CERTIFICATE-----
Generated at Wed Apr 8 13:36:45 2026 by rpki-client