Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/323830343a3362303a3a2f33322d3438203d3e203533303632.roa
File: 323830343a3362303a3a2f33322d3438203d3e203533303632.roa (raw, json)
Hash identifier: Ktzj3SxALAI1oL1cIiYd0pN2tOOUl62QORMhrVkFVOo=
Subject key identifier: 5B:F0:8F:18:12:52:A8:92:DD:EF:41:4C:49:76:98:D9:B0:B0:48:B5
Certificate issuer: /CN=8B01CB8245E03ABF597867F21C1F5766BE6B6ED0
Certificate serial: 600511B517E4DCE24D4B343DFDC2BDD963D83578
Authority key identifier: 8B:01:CB:82:45:E0:3A:BF:59:78:67:F2:1C:1F:57:66:BE:6B:6E:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B01CB8245E03ABF597867F21C1F5766BE6B6ED0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/323830343a3362303a3a2f33322d3438203d3e203533303632.roa
Signing time: Fri 16 Jan 2026 17:23:56 +0000
ROA not before: Fri 16 Jan 2026 17:18:56 +0000
ROA not after: Fri 15 Jan 2027 17:23:56 +0000
asID: 53062
IP address blocks: 2804:3b0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:05:11:b5:17:e4:dc:e2:4d:4b:34:3d:fd:c2:bd:d9:63:d8:35:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B01CB8245E03ABF597867F21C1F5766BE6B6ED0
Validity
Not Before: Jan 16 17:18:56 2026 GMT
Not After : Jan 15 17:23:56 2027 GMT
Subject: CN=5BF08F181252A892DDEF414C497698D9B0B048B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:10:45:09:2d:e7:28:ee:a0:07:d8:7c:c9:ed:
1d:87:e6:d5:29:84:1f:97:c1:e7:9b:b7:58:22:29:
8c:b1:db:58:2e:bd:6d:5f:13:bf:37:d5:18:a6:97:
0c:60:58:93:d8:b4:7b:21:71:82:90:3d:d8:d3:e9:
51:e4:64:58:5c:87:5f:7c:8a:a4:e8:38:4c:48:77:
7f:09:59:79:cb:5f:4a:a1:55:16:fd:62:dd:11:52:
cb:2b:28:c7:5e:7b:72:b7:3b:7d:7a:f9:36:b5:71:
69:20:90:ec:2d:bf:47:c2:e7:f9:ee:1a:c5:bc:3e:
cd:fb:b5:21:05:c8:16:9e:95:8c:11:35:14:5c:f3:
28:5f:e3:d2:e4:37:53:55:30:e1:88:34:e7:d4:e8:
8f:b6:69:c6:d0:f9:75:e1:f7:43:5d:e8:87:bd:e0:
db:8c:ff:e0:f7:96:ac:d3:55:fa:63:27:53:cd:3a:
dc:02:f9:4a:6b:d2:d5:26:97:1c:9d:3b:6a:d7:bb:
e6:82:75:6d:db:3e:ab:d0:15:03:53:68:c3:24:f5:
e5:85:c2:a2:1a:64:1c:7d:eb:70:07:36:55:67:c4:
71:a1:70:ae:98:e7:03:02:10:c4:17:18:76:87:db:
14:73:39:fb:3b:a0:d3:5e:20:ab:a8:a4:f3:68:fb:
2b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F0:8F:18:12:52:A8:92:DD:EF:41:4C:49:76:98:D9:B0:B0:48:B5
X509v3 Authority Key Identifier:
keyid:8B:01:CB:82:45:E0:3A:BF:59:78:67:F2:1C:1F:57:66:BE:6B:6E:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/8B01CB8245E03ABF597867F21C1F5766BE6B6ED0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B01CB8245E03ABF597867F21C1F5766BE6B6ED0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/323830343a3362303a3a2f33322d3438203d3e203533303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3b0::/32
Signature Algorithm: sha256WithRSAEncryption
78:2d:80:e1:e9:be:74:35:a3:23:2a:4b:40:51:de:25:7e:5f:
12:85:27:9c:8c:99:d5:d0:8a:8a:e8:c4:77:1f:d4:f3:d0:fc:
00:19:57:14:c9:7b:bb:2c:ac:22:c2:1d:4e:22:f9:93:84:84:
40:c8:e0:6b:4f:2d:69:b7:e5:37:68:dd:68:17:76:d7:8a:4d:
04:7c:e2:53:b0:41:43:cc:a5:f5:5e:45:f0:89:2d:8e:18:90:
ec:ee:b5:d3:ec:a7:08:0f:53:36:2d:bf:c0:78:59:0f:0b:06:
3b:b8:f7:8f:f3:d6:f1:1b:63:05:eb:d2:5d:6b:2c:a9:06:15:
0c:31:99:64:5b:f5:53:d6:45:b3:4e:91:88:ce:32:d4:31:6a:
70:04:20:76:55:02:e2:2d:dc:b8:61:58:c0:8b:d8:43:a8:9e:
1f:37:49:42:a0:c0:e6:04:57:bc:6a:34:33:b1:13:38:f0:c9:
b3:9e:70:81:ae:7b:44:68:6e:d0:f9:9e:ca:c0:87:9a:f1:76:
3e:a9:bc:25:0a:19:e5:5e:30:cc:ac:66:24:8d:e8:ef:7a:5f:
24:ef:a1:c0:3d:a1:05:e0:4c:d6:7b:78:c6:b9:e4:81:4c:c6:
8c:1a:c1:f4:6f:3c:aa:70:9f:2d:c3:c5:c4:76:20:f0:46:f4:
10:a5:c0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:23:21 2026 by rpki-client