Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a353030303a3a2f33362d3336203d3e20323633353834.roa
File: 323830343a6636383a353030303a3a2f33362d3336203d3e20323633353834.roa (raw, json)
Hash identifier: OdGzL8vBKvrfjQqpnI+1wZ5L2DauVrqqyxhp9SEF2gI=
Subject key identifier: A7:8F:FD:A8:E8:2B:63:AF:2E:C1:26:4C:F9:62:E0:DA:5A:9F:33:EC
Certificate issuer: /CN=4B3A30BAE843BAF4B139185B582BA682798E126F
Certificate serial: 21B7FFB4CE0EF9362B52DE9DD15637963303F290
Authority key identifier: 4B:3A:30:BA:E8:43:BA:F4:B1:39:18:5B:58:2B:A6:82:79:8E:12:6F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3A30BAE843BAF4B139185B582BA682798E126F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a353030303a3a2f33362d3336203d3e20323633353834.roa
Signing time: Sat 14 Mar 2026 22:28:24 +0000
ROA not before: Sat 14 Mar 2026 22:23:24 +0000
ROA not after: Sat 13 Mar 2027 22:28:24 +0000
asID: 263584
IP address blocks: 2804:f68:5000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:b7:ff:b4:ce:0e:f9:36:2b:52:de:9d:d1:56:37:96:33:03:f2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B3A30BAE843BAF4B139185B582BA682798E126F
Validity
Not Before: Mar 14 22:23:24 2026 GMT
Not After : Mar 13 22:28:24 2027 GMT
Subject: CN=A78FFDA8E82B63AF2EC1264CF962E0DA5A9F33EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c0:a5:74:60:c3:7e:4d:26:06:75:28:3e:de:
2c:4a:24:72:9e:3c:9d:60:3a:28:e4:e8:67:3b:f7:
92:82:c4:6b:98:60:7d:aa:9b:83:7d:53:6c:6c:07:
be:ff:52:3d:69:54:0a:c2:71:53:2d:89:6f:e0:93:
94:ba:3f:36:6b:88:23:52:50:6a:79:34:d5:0a:fe:
de:e2:14:6e:4d:6c:b3:f5:1f:03:23:78:f9:83:db:
d5:15:05:d2:a5:3b:81:e1:4c:bf:9a:c8:f0:79:12:
24:a5:a1:8b:37:19:7d:dc:9e:bf:48:19:3b:22:f4:
e6:90:31:68:2e:f1:1a:c3:2e:b5:de:b4:6d:ff:b5:
01:56:42:c6:f2:b7:b7:7f:31:69:40:fa:a6:05:65:
9e:08:06:d0:71:0c:7d:16:80:be:a1:a1:8a:8c:8e:
c4:fe:11:e7:10:e3:06:c6:c5:a4:83:e2:be:fa:24:
31:10:a2:a2:72:01:9f:66:03:5a:e0:f6:8a:cb:8a:
25:6b:77:9b:4e:66:9a:2c:8a:9e:0a:8c:56:9a:ee:
87:8d:1c:a1:56:e9:80:b0:3f:df:1f:87:da:01:52:
6a:d9:9a:b3:33:61:91:75:5a:c6:54:7d:1b:7e:ba:
70:c1:0e:0a:98:55:c1:c1:6c:01:c0:17:5e:83:fb:
f7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:8F:FD:A8:E8:2B:63:AF:2E:C1:26:4C:F9:62:E0:DA:5A:9F:33:EC
X509v3 Authority Key Identifier:
keyid:4B:3A:30:BA:E8:43:BA:F4:B1:39:18:5B:58:2B:A6:82:79:8E:12:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/4B3A30BAE843BAF4B139185B582BA682798E126F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3A30BAE843BAF4B139185B582BA682798E126F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a353030303a3a2f33362d3336203d3e20323633353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:f68:5000::/36
Signature Algorithm: sha256WithRSAEncryption
9d:81:d7:69:71:47:6a:21:a4:3f:1f:3e:5e:f7:7f:09:b8:47:
f6:2a:3a:73:1b:5f:16:02:70:f2:2e:c5:56:52:d2:f8:90:52:
a9:2f:f7:05:41:16:f3:46:02:8f:2b:67:a7:95:7c:ce:3a:35:
24:23:91:63:e5:a4:12:e0:a1:dc:5a:a9:b1:a7:0c:99:bd:62:
e7:0b:4c:63:38:fa:0e:a1:50:2d:a7:e1:70:02:91:98:06:e8:
d4:80:3c:19:c6:32:47:d6:37:10:69:eb:d0:96:bd:59:ab:ae:
30:a4:62:e2:e6:59:07:d9:e6:3b:55:5e:5b:0d:94:b4:35:e6:
5a:14:34:28:48:09:2b:b7:d1:b5:db:ae:8d:9b:e8:99:63:63:
9b:2a:2c:fd:7a:80:52:26:89:79:40:cf:34:db:74:24:16:e8:
09:bd:bd:93:90:45:81:38:d8:2d:69:92:fc:33:e1:7a:03:f7:
47:2a:1d:74:0d:93:97:74:75:34:84:f7:f2:0a:34:d8:1d:3f:
20:18:85:4b:32:7e:67:50:44:a7:e6:7b:4b:9a:3a:a3:cf:d5:
d2:b3:46:55:1b:72:9a:70:5d:ba:4e:b7:8c:f0:6e:4d:ba:9b:
b8:1a:71:2e:94:82:e2:21:f0:18:cd:33:ed:79:e0:f6:1e:c5:
0c:fd:19:e2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUIbf/tM4O+TYrUt6d0VY3ljMD8pAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEIzQTMwQkFFODQzQkFGNEIxMzkxODVCNTgyQkE2ODI3
OThFMTI2RjAeFw0yNjAzMTQyMjIzMjRaFw0yNzAzMTMyMjI4MjRaMDMxMTAvBgNV
BAMTKEE3OEZGREE4RTgyQjYzQUYyRUMxMjY0Q0Y5NjJFMERBNUE5RjMzRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvwKV0YMN+TSYGdSg+3ixKJHKe
PJ1gOijk6Gc795KCxGuYYH2qm4N9U2xsB77/Uj1pVArCcVMtiW/gk5S6PzZriCNS
UGp5NNUK/t7iFG5NbLP1HwMjePmD29UVBdKlO4HhTL+ayPB5EiSloYs3GX3cnr9I
GTsi9OaQMWgu8RrDLrXetG3/tQFWQsbyt7d/MWlA+qYFZZ4IBtBxDH0WgL6hoYqM
jsT+EecQ4wbGxaSD4r76JDEQoqJyAZ9mA1rg9orLiiVrd5tOZposip4KjFaa7oeN
HKFW6YCwP98fh9oBUmrZmrMzYZF1WsZUfRt+unDBDgqYVcHBbAHAF16D+/eXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUp4/9qOgrY68uwSZM+WLg2lqfM+wwHwYDVR0j
BBgwFoAUSzowuuhDuvSxORhbWCumgnmOEm8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0tpMnpZUHZWQ3ZVcGFLOFRSSFZhODhZa2RLUWk3d0J6S2d3am15TDRS
Q3EvMC80QjNBMzBCQUU4NDNCQUY0QjEzOTE4NUI1ODJCQTY4Mjc5OEUxMjZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCM0EzMEJBRTg0M0JBRjRC
MTM5MTg1QjU4MkJBNjgyNzk4RTEyNkYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dLaTJ6WVB2VkN2VXBhSzhUUkhWYTg4WWtkS1FpN3dCektnd2pteUw0UkNxLzAv
MzIzODMwMzQzYTY2MzYzODNhMzUzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNl
MjAzMjM2MzMzNTM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBA9oUDANBgkqhkiG9w0BAQsFAAOC
AQEAnYHXaXFHaiGkPx8+Xvd/CbhH9io6cxtfFgJw8i7FVlLS+JBSqS/3BUEW80YC
jytnp5V8zjo1JCORY+WkEuCh3FqpsacMmb1i5wtMYzj6DqFQLafhcAKRmAbo1IA8
GcYyR9Y3EGnr0Ja9WauuMKRi4uZZB9nmO1VeWw2UtDXmWhQ0KEgJK7fRtduujZvo
mWNjmyos/XqAUiaJeUDPNNt0JBboCb29k5BFgTjYLWmS/DPhegP3RyoddA2Tl3R1
NIT38go02B0/IBiFSzJ+Z1BEp+Z7S5o6o8/V0rNGVRtymnBduk63jPBuTbqbuBpx
LpSC4iHwGM0z7Xng9h7FDP0Z4g==
-----END CERTIFICATE-----
Generated at Wed Apr 8 10:42:11 2026 by rpki-client