Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232322e302f32342d3234203d3e20323638323438.roa
File: 34352e3233362e3232322e302f32342d3234203d3e20323638323438.roa (raw, json)
Hash identifier: FHN0Kfe0mVgrVIdNOe6xs289TtDIsDX0Et48mLP3CPU=
Subject key identifier: 87:BC:63:16:31:B3:14:1D:63:79:FD:1A:56:C5:BA:6B:28:76:1F:C6
Certificate issuer: /CN=303D3960E9C6FCF6DFD255601560BC60351F347F
Certificate serial: 1718F67F6D14629DF760B338EB9E8B32F0D5ECB1
Authority key identifier: 30:3D:39:60:E9:C6:FC:F6:DF:D2:55:60:15:60:BC:60:35:1F:34:7F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/303D3960E9C6FCF6DFD255601560BC60351F347F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232322e302f32342d3234203d3e20323638323438.roa
Signing time: Wed 11 Mar 2026 19:29:45 +0000
ROA not before: Wed 11 Mar 2026 19:24:45 +0000
ROA not after: Wed 10 Mar 2027 19:29:45 +0000
asID: 268248
IP address blocks: 45.236.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:18:f6:7f:6d:14:62:9d:f7:60:b3:38:eb:9e:8b:32:f0:d5:ec:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=303D3960E9C6FCF6DFD255601560BC60351F347F
Validity
Not Before: Mar 11 19:24:45 2026 GMT
Not After : Mar 10 19:29:45 2027 GMT
Subject: CN=87BC631631B3141D6379FD1A56C5BA6B28761FC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:47:8e:69:24:74:1c:a9:c6:d7:59:ec:0b:f0:
7e:65:9b:53:6a:9b:fe:9a:ce:6d:bf:8f:d9:f8:6a:
12:73:8d:b2:32:8d:c7:76:74:bd:f4:2f:fc:41:a8:
bc:13:3c:91:25:9a:85:e8:0f:a6:da:f4:51:0b:60:
b5:49:02:62:5b:d0:17:18:46:57:38:0b:12:05:cb:
bc:d4:eb:f4:94:4e:51:79:1f:8e:62:fb:ac:a8:cd:
05:db:37:6a:c1:ea:d9:f6:2b:93:6b:8f:1d:25:4e:
57:05:39:8d:49:db:be:88:1c:01:8d:68:9e:aa:bc:
ed:0c:57:69:15:c4:b5:b2:f5:8d:c1:d0:e1:13:0f:
5a:45:d7:e5:1a:18:e3:13:8f:a1:18:d2:e2:9d:be:
ae:c0:8c:d5:bd:61:73:b4:0e:0b:c3:fb:bc:4d:0c:
17:ae:5e:82:72:e6:87:32:02:55:8c:26:12:2d:9e:
f5:ff:bb:10:e4:44:f6:6f:12:17:a0:9a:30:cc:b5:
28:2d:0c:52:7a:d7:55:98:52:fd:a4:85:f7:4e:18:
e7:ce:13:2c:7f:37:e2:db:41:12:87:75:4c:3c:65:
74:79:02:ab:08:3e:36:bd:cd:85:c4:59:f3:00:fc:
5b:89:05:9f:16:d8:31:83:58:a5:5b:82:c1:a5:8f:
d6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:BC:63:16:31:B3:14:1D:63:79:FD:1A:56:C5:BA:6B:28:76:1F:C6
X509v3 Authority Key Identifier:
keyid:30:3D:39:60:E9:C6:FC:F6:DF:D2:55:60:15:60:BC:60:35:1F:34:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/303D3960E9C6FCF6DFD255601560BC60351F347F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/303D3960E9C6FCF6DFD255601560BC60351F347F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232322e302f32342d3234203d3e20323638323438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.222.0/24
Signature Algorithm: sha256WithRSAEncryption
94:e8:c5:05:39:6c:ce:cc:26:b1:6d:fd:cb:c3:e8:57:b1:fd:
0a:c8:3e:ca:a5:cb:89:ef:ab:b8:42:28:24:83:d5:f3:27:65:
71:5c:ff:2c:aa:ab:44:de:43:cf:84:b8:1f:6c:b3:50:da:0e:
7a:d5:50:80:52:eb:03:ec:ba:2c:97:17:a2:3d:98:35:b5:a2:
0a:8c:9b:fe:a6:c2:a4:66:f6:1e:9c:5a:a9:b1:7f:3d:4c:51:
62:ab:b7:7d:2a:82:55:03:41:e6:6d:52:93:c0:bd:85:45:a7:
0e:1d:c4:99:dd:3b:11:be:1e:d5:a6:16:3a:03:0c:0c:9e:22:
77:0a:06:23:54:58:f3:e5:5e:94:b6:07:98:4b:62:27:34:f9:
94:fb:e2:82:b1:a4:a9:26:98:74:37:f8:72:a0:47:3e:89:d2:
91:23:10:de:1b:cc:2c:61:94:20:9d:88:a2:0f:98:df:b6:5f:
ed:1b:38:f4:d5:15:1d:b1:aa:2d:c5:14:88:78:dc:98:19:12:
76:ae:af:f3:19:56:55:4b:fb:4c:1f:f1:2a:e7:a4:eb:7c:bd:
3d:c0:d0:9d:7d:90:df:b1:ef:0b:09:fc:4f:d8:2f:d9:42:81:
6e:a6:c4:b8:d4:d5:d0:dc:b3:cb:27:e2:60:b0:e7:7f:fd:fe:
40:55:8f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:37:47 2026 by rpki-client