Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a3a2f33362d3336203d3e20323633353834.roa
File: 323830343a6636383a3a2f33362d3336203d3e20323633353834.roa (raw, json)
Hash identifier: 1Z7jXh5/kj7Y2FuXSdL6wJoEUiNr6zat+3k3VphjJT8=
Subject key identifier: 94:34:7F:76:74:5A:0D:A0:8F:8C:94:27:47:86:76:8C:1A:59:D8:A3
Certificate issuer: /CN=4B3A30BAE843BAF4B139185B582BA682798E126F
Certificate serial: 3C280200219C344CD46C31042D7E7E10077674F6
Authority key identifier: 4B:3A:30:BA:E8:43:BA:F4:B1:39:18:5B:58:2B:A6:82:79:8E:12:6F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3A30BAE843BAF4B139185B582BA682798E126F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a3a2f33362d3336203d3e20323633353834.roa
Signing time: Sat 14 Mar 2026 22:28:23 +0000
ROA not before: Sat 14 Mar 2026 22:23:23 +0000
ROA not after: Sat 13 Mar 2027 22:28:23 +0000
asID: 263584
IP address blocks: 2804:f68::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:28:02:00:21:9c:34:4c:d4:6c:31:04:2d:7e:7e:10:07:76:74:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B3A30BAE843BAF4B139185B582BA682798E126F
Validity
Not Before: Mar 14 22:23:23 2026 GMT
Not After : Mar 13 22:28:23 2027 GMT
Subject: CN=94347F76745A0DA08F8C94274786768C1A59D8A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8f:44:83:8a:d1:e0:46:a7:42:ca:4f:d2:37:
a4:3b:65:10:74:2a:12:1e:3e:fd:45:a7:21:a8:e9:
9c:23:e8:ea:27:40:cd:de:f4:8d:b1:d8:18:40:36:
44:ca:c5:77:d8:01:86:46:b1:0c:ff:30:b3:42:ba:
d9:12:05:d2:53:4c:05:6f:73:71:02:d3:ae:a5:83:
71:b7:46:46:30:9d:14:40:65:52:7b:f1:e4:9c:28:
ec:ca:9b:e3:5b:42:63:ff:46:00:68:d0:13:d0:59:
05:ef:41:01:d1:61:55:c4:1a:77:4d:38:01:3d:1d:
f0:1f:0c:5f:2a:db:1b:49:66:4e:65:bf:8a:8a:c9:
6c:a7:d9:21:3b:86:e9:67:eb:ab:c8:d8:d6:e0:32:
4c:12:8f:c3:85:58:79:4b:bd:b8:60:1f:c4:be:f3:
6f:01:b9:16:55:cc:91:b4:6e:c2:2f:3a:2b:b6:12:
97:b5:15:27:e2:72:15:35:0c:93:98:c9:01:36:7c:
51:41:4a:a8:58:14:56:a0:be:47:5f:e3:8b:29:a6:
43:4d:be:1a:55:86:12:aa:4d:df:5a:ae:b8:68:72:
61:4e:27:f0:e3:63:1c:13:16:86:4a:d4:3a:ec:23:
25:94:c0:0d:20:4c:4c:49:5d:3e:bc:76:1d:5b:32:
aa:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:34:7F:76:74:5A:0D:A0:8F:8C:94:27:47:86:76:8C:1A:59:D8:A3
X509v3 Authority Key Identifier:
keyid:4B:3A:30:BA:E8:43:BA:F4:B1:39:18:5B:58:2B:A6:82:79:8E:12:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/4B3A30BAE843BAF4B139185B582BA682798E126F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3A30BAE843BAF4B139185B582BA682798E126F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a3a2f33362d3336203d3e20323633353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:f68::/36
Signature Algorithm: sha256WithRSAEncryption
28:f1:75:bb:02:a4:6d:f4:b3:af:ca:02:c5:40:c7:67:35:10:
76:6c:f6:38:56:f6:6a:91:f7:7a:11:57:53:43:70:2c:ba:7c:
d8:6c:83:86:e7:d1:72:f8:7c:e8:1a:0a:72:2f:46:50:11:76:
3b:6a:54:71:1e:d4:e6:e9:40:e1:96:70:89:c6:52:58:bd:9a:
59:23:73:25:b3:59:5a:8b:ac:8f:03:4e:01:a0:42:f1:19:60:
8c:04:28:01:f3:8a:84:6f:e7:51:96:8e:d9:02:27:d9:db:c0:
9e:82:12:34:ff:a5:d7:cd:c3:f3:2d:75:c3:82:54:24:e3:c3:
0a:ee:0e:b8:14:fa:78:7e:26:c2:95:2e:65:62:69:13:f3:b7:
e5:70:8d:ae:71:f3:a6:ed:44:34:32:f6:91:04:e7:a6:72:fd:
9a:8b:e5:72:4a:2e:98:81:6a:34:5d:ce:6a:e0:6a:0f:05:e8:
69:f4:0b:de:78:90:d5:ac:e8:29:37:88:f0:d4:19:05:b7:fa:
7a:9f:34:ec:5d:36:9b:d8:81:78:ea:e9:24:95:04:5a:bc:30:
8e:87:62:10:43:da:2e:8b:ec:d9:b5:6f:b0:34:8b:0d:de:9d:
06:e6:06:f2:ea:37:9d:9c:4e:e0:9a:bd:5d:59:6f:74:b4:4a:
e1:ba:cb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 12:23:29 2026 by rpki-client