Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a333030303a3a2f33362d3336203d3e20323633353834.roa
File: 323830343a6636383a333030303a3a2f33362d3336203d3e20323633353834.roa (raw, json)
Hash identifier: junAnWp/Xt8Vsj8T2SAvTZb/CPqMS6+k6y12wV587ro=
Subject key identifier: 94:7A:52:84:8A:08:7B:1A:50:A1:25:88:4D:68:DE:06:37:7E:2F:DA
Certificate issuer: /CN=4B3A30BAE843BAF4B139185B582BA682798E126F
Certificate serial: 520D56A7EF2726CE03A919E4B4AD79A0B73B0E75
Authority key identifier: 4B:3A:30:BA:E8:43:BA:F4:B1:39:18:5B:58:2B:A6:82:79:8E:12:6F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3A30BAE843BAF4B139185B582BA682798E126F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a333030303a3a2f33362d3336203d3e20323633353834.roa
Signing time: Sat 14 Mar 2026 22:28:25 +0000
ROA not before: Sat 14 Mar 2026 22:23:25 +0000
ROA not after: Sat 13 Mar 2027 22:28:25 +0000
asID: 263584
IP address blocks: 2804:f68:3000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:0d:56:a7:ef:27:26:ce:03:a9:19:e4:b4:ad:79:a0:b7:3b:0e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B3A30BAE843BAF4B139185B582BA682798E126F
Validity
Not Before: Mar 14 22:23:25 2026 GMT
Not After : Mar 13 22:28:25 2027 GMT
Subject: CN=947A52848A087B1A50A125884D68DE06377E2FDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2f:be:ed:b4:52:4a:92:f7:82:10:22:fa:3b:
b1:79:9c:1c:54:8d:ec:cc:fd:37:5d:f2:fb:b4:b7:
e4:cf:2e:df:97:30:b3:a0:cd:5d:d7:8c:78:e3:69:
93:42:62:47:0e:4e:c2:9a:f3:48:ae:05:12:78:a4:
1f:0f:1e:13:20:d3:ac:dc:22:b3:c4:93:d1:9d:eb:
c8:5f:f9:84:1b:d7:76:83:f7:dd:af:03:c4:85:4b:
8f:7d:02:f9:2d:7c:a8:03:03:e8:b8:62:64:6a:73:
b5:57:58:bc:31:65:c5:a3:a4:91:78:14:7d:00:94:
f8:a0:f2:60:15:73:3c:ab:ba:40:60:ed:21:cd:49:
be:2e:d2:f0:46:03:a3:d6:17:0c:7d:d7:e6:2f:d1:
5d:73:b6:29:57:a2:f0:51:2d:6f:9e:1f:49:49:82:
f4:6b:32:e6:4a:6d:31:b7:00:5f:cb:9b:06:33:2f:
95:46:17:5f:cd:00:84:a1:2f:30:cd:89:47:36:84:
3b:bf:14:78:94:ad:45:c8:a2:c1:db:3f:da:21:22:
4f:dd:7c:dc:8f:26:30:37:22:fb:5d:ad:66:dc:bd:
80:b3:9a:b0:bb:a0:9c:c8:45:93:c7:93:f7:19:bc:
4a:57:a9:88:28:3d:e6:c6:a5:99:4a:2f:21:a9:de:
a5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7A:52:84:8A:08:7B:1A:50:A1:25:88:4D:68:DE:06:37:7E:2F:DA
X509v3 Authority Key Identifier:
keyid:4B:3A:30:BA:E8:43:BA:F4:B1:39:18:5B:58:2B:A6:82:79:8E:12:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/4B3A30BAE843BAF4B139185B582BA682798E126F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3A30BAE843BAF4B139185B582BA682798E126F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a333030303a3a2f33362d3336203d3e20323633353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:f68:3000::/36
Signature Algorithm: sha256WithRSAEncryption
79:af:ae:6d:b9:f2:17:a8:17:51:cd:a5:28:af:13:35:d5:6d:
df:2b:ff:a3:1b:11:48:52:1b:e0:99:46:96:4e:85:58:53:39:
ba:af:ed:1f:2f:60:a1:f4:37:7a:f1:73:50:57:c3:81:13:4e:
0c:29:d3:3b:95:48:a2:57:d6:e8:f0:13:7e:a3:db:5b:4f:1f:
05:d6:22:20:9e:d8:77:bb:11:ea:63:d2:45:4c:98:d7:2c:bb:
7e:99:00:50:14:b0:9d:7b:26:83:86:5a:05:63:14:d9:88:3c:
1a:11:5b:dd:29:32:91:77:59:48:0e:97:e2:5c:d7:96:74:25:
83:4d:5d:f8:55:6c:f3:e8:15:ce:1e:ca:61:33:b2:6f:c8:12:
06:74:5a:f3:ff:aa:5b:d3:18:64:59:bb:f6:a4:1b:dd:07:e6:
c7:1e:6b:cd:50:c2:b1:1e:3a:fe:e3:55:fa:7d:54:0e:61:d9:
10:e8:0b:17:08:bb:c0:fb:12:f8:3e:85:54:83:78:bd:27:14:
c1:ec:e3:d6:9b:ef:f9:96:61:90:bb:eb:2e:52:9a:1f:1d:06:
1f:e0:c3:3b:f6:73:3a:ea:a6:48:76:91:83:35:83:ab:bd:53:
6e:e4:5c:54:6b:e9:79:77:bf:46:0c:19:30:b1:d9:16:46:0e:
db:61:ba:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 10:42:10 2026 by rpki-client