Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a343030303a3a2f33362d3336203d3e20323633353834.roa
File: 323830343a6636383a343030303a3a2f33362d3336203d3e20323633353834.roa (raw, json)
Hash identifier: 5Z26Quc/ZRo7EKYOCqAT7umyaySzc1syUSBH/rUxIds=
Subject key identifier: 44:89:A2:DD:84:E2:BB:4B:18:9A:DC:2D:B2:EB:29:E5:B3:CA:58:CA
Certificate issuer: /CN=4B3A30BAE843BAF4B139185B582BA682798E126F
Certificate serial: 7511747EBDF92DDA230149025AE8CE4622E32849
Authority key identifier: 4B:3A:30:BA:E8:43:BA:F4:B1:39:18:5B:58:2B:A6:82:79:8E:12:6F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3A30BAE843BAF4B139185B582BA682798E126F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a343030303a3a2f33362d3336203d3e20323633353834.roa
Signing time: Sat 14 Mar 2026 22:28:24 +0000
ROA not before: Sat 14 Mar 2026 22:23:24 +0000
ROA not after: Sat 13 Mar 2027 22:28:24 +0000
asID: 263584
IP address blocks: 2804:f68:4000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:11:74:7e:bd:f9:2d:da:23:01:49:02:5a:e8:ce:46:22:e3:28:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B3A30BAE843BAF4B139185B582BA682798E126F
Validity
Not Before: Mar 14 22:23:24 2026 GMT
Not After : Mar 13 22:28:24 2027 GMT
Subject: CN=4489A2DD84E2BB4B189ADC2DB2EB29E5B3CA58CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c9:2a:7d:72:55:0d:78:42:d2:16:86:90:11:
78:26:7e:c0:e8:d1:8a:29:a7:84:4d:2c:8a:a6:42:
3c:58:5d:70:c3:b3:69:ff:8c:ae:5d:97:ee:e7:00:
4a:ac:ae:e2:5c:38:2c:05:bf:5e:1d:23:df:a7:aa:
ed:0e:86:97:0e:c6:8b:6d:79:f4:0b:2e:fe:eb:d6:
ea:19:94:77:d0:eb:0c:ec:25:7e:3c:ad:fc:82:f0:
c1:d3:4e:20:f8:74:d6:cb:e8:f9:92:a1:37:27:95:
47:f2:35:6b:e8:9d:71:ae:01:28:d8:12:e3:81:ee:
33:b1:22:dc:93:12:66:c8:ed:0c:cc:3d:d6:92:7e:
6e:e4:63:28:dd:ac:08:d7:99:d5:7e:db:c6:21:47:
2e:41:ce:50:f3:e8:be:6f:ef:57:2c:19:ec:5c:41:
96:b8:97:78:6f:f0:47:3c:3e:40:1e:50:23:1d:68:
36:3c:0d:14:68:c5:59:36:50:1a:da:0e:75:b3:2e:
ff:68:e9:c3:af:29:ec:a4:9e:b2:74:46:dd:3d:af:
61:d6:af:08:fc:aa:6e:46:3d:5e:20:26:61:e2:b9:
cf:c1:84:ef:5a:fb:af:c6:19:43:69:c6:db:7e:1a:
d5:ee:5e:52:57:ea:e3:21:9c:85:97:44:20:02:e1:
00:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:89:A2:DD:84:E2:BB:4B:18:9A:DC:2D:B2:EB:29:E5:B3:CA:58:CA
X509v3 Authority Key Identifier:
keyid:4B:3A:30:BA:E8:43:BA:F4:B1:39:18:5B:58:2B:A6:82:79:8E:12:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/4B3A30BAE843BAF4B139185B582BA682798E126F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3A30BAE843BAF4B139185B582BA682798E126F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a343030303a3a2f33362d3336203d3e20323633353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:f68:4000::/36
Signature Algorithm: sha256WithRSAEncryption
55:91:7c:b8:cf:e3:ed:4b:07:43:76:de:e3:c5:bc:48:7e:42:
6f:44:84:20:99:0f:aa:a5:50:fa:a1:09:10:f6:51:50:c7:c0:
83:c5:64:23:44:01:df:96:bd:a9:77:d0:13:32:9d:11:79:55:
72:bb:0a:6c:3d:69:16:98:ad:a1:69:f5:40:11:e9:b5:24:d7:
72:d4:85:63:97:fb:0b:80:d2:a6:53:88:5d:b4:cf:2d:2e:0e:
ba:50:4d:11:51:64:d7:b8:7a:87:ca:b0:3d:12:99:00:9f:c8:
9f:0d:ee:30:52:51:ad:a1:0c:df:b1:f3:7f:05:1b:0a:ee:f9:
97:d4:f4:89:e0:8b:81:a2:f0:1d:f2:4f:af:2b:42:60:90:2d:
86:ec:d3:4b:bb:18:bc:16:2d:96:e2:ce:05:d0:fe:be:71:3f:
63:00:e3:38:ae:bc:ed:56:db:82:22:96:9f:87:d3:f2:14:cd:
8e:4d:98:99:82:45:a7:05:1a:eb:96:f0:fd:3d:1c:9a:b4:1a:
06:71:37:52:ba:72:bb:f1:4d:8f:3c:e0:5d:65:e6:c2:f8:fd:
fb:64:9c:5b:78:a0:c8:5c:65:38:5f:14:31:5d:d8:f3:e0:83:
5c:dc:00:ab:4a:af:97:ef:23:a7:75:e9:c2:a8:5a:2d:cc:ad:
c2:b8:f1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 10:42:05 2026 by rpki-client