Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HzgSwP6evxSJFLt1iLAZoSdSs2nkFdbT2QvFXym33eG9/0/323830343a393736303a3a2f33322d313238203d3e203238313335.roa
File: 323830343a393736303a3a2f33322d313238203d3e203238313335.roa (raw, json)
Hash identifier: pKNL0B0qo5E9sn9J/16myUo8w41ZjyjYzbaGgcaprxA=
Subject key identifier: 57:84:16:84:71:82:1E:20:5D:47:60:5D:82:2B:AA:A8:F8:8F:0D:38
Certificate issuer: /CN=BD3B8B1E46815A2BB6448F4C5FFB19779C059A2C
Certificate serial: 75671FE215223AD9CE990458D280FF0665419277
Authority key identifier: BD:3B:8B:1E:46:81:5A:2B:B6:44:8F:4C:5F:FB:19:77:9C:05:9A:2C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3B8B1E46815A2BB6448F4C5FFB19779C059A2C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HzgSwP6evxSJFLt1iLAZoSdSs2nkFdbT2QvFXym33eG9/0/323830343a393736303a3a2f33322d313238203d3e203238313335.roa
Signing time: Tue 27 Jan 2026 20:50:11 +0000
ROA not before: Tue 27 Jan 2026 20:45:11 +0000
ROA not after: Tue 26 Jan 2027 20:50:11 +0000
asID: 28135
IP address blocks: 2804:9760::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:67:1f:e2:15:22:3a:d9:ce:99:04:58:d2:80:ff:06:65:41:92:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD3B8B1E46815A2BB6448F4C5FFB19779C059A2C
Validity
Not Before: Jan 27 20:45:11 2026 GMT
Not After : Jan 26 20:50:11 2027 GMT
Subject: CN=5784168471821E205D47605D822BAAA8F88F0D38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c4:f5:20:f1:e2:71:a5:7b:76:79:c0:19:f9:
32:71:65:e6:c8:51:09:af:5c:2c:46:9e:33:43:8c:
d7:55:b8:60:6c:3c:3a:20:9d:92:28:75:87:8a:05:
f4:ae:d1:b9:d0:1c:d6:87:27:f5:2e:9f:e5:d8:ce:
cd:2d:09:9b:87:21:d5:17:fa:3d:5e:43:b7:c2:9a:
9f:6e:3d:92:85:36:4b:89:b1:b3:df:49:90:df:23:
00:f3:de:e2:5b:f8:ab:c6:a1:c6:08:b5:32:58:b3:
ce:40:8b:ca:84:ed:26:9a:d4:4c:f2:38:4c:5a:ca:
91:4c:b0:6f:b6:df:1f:8a:ea:e1:b1:1e:c1:e7:5c:
5b:e5:98:d3:57:84:44:48:a9:7b:23:66:cd:f1:b2:
3e:5c:ff:b5:86:31:1f:5e:4f:e3:39:4f:ab:10:ee:
65:76:f1:47:7b:82:1c:68:9b:18:50:de:64:f1:be:
0f:16:38:e8:d5:d9:79:22:8f:57:c9:ae:c7:6c:e4:
59:c3:89:50:f6:4a:50:36:40:78:3e:ee:6d:f8:1e:
0a:e8:77:a4:9a:e3:f2:82:54:b5:2b:ae:dc:3b:45:
f6:27:24:2c:da:4a:6e:c0:62:1e:bf:77:b9:a6:ec:
4c:aa:a0:85:d6:08:28:4d:c5:a3:11:86:51:b7:0e:
49:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:84:16:84:71:82:1E:20:5D:47:60:5D:82:2B:AA:A8:F8:8F:0D:38
X509v3 Authority Key Identifier:
keyid:BD:3B:8B:1E:46:81:5A:2B:B6:44:8F:4C:5F:FB:19:77:9C:05:9A:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HzgSwP6evxSJFLt1iLAZoSdSs2nkFdbT2QvFXym33eG9/0/BD3B8B1E46815A2BB6448F4C5FFB19779C059A2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3B8B1E46815A2BB6448F4C5FFB19779C059A2C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HzgSwP6evxSJFLt1iLAZoSdSs2nkFdbT2QvFXym33eG9/0/323830343a393736303a3a2f33322d313238203d3e203238313335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:9760::/32
Signature Algorithm: sha256WithRSAEncryption
51:09:df:2c:04:ba:3a:2b:41:f6:d6:3d:e6:c0:76:91:f9:23:
e7:b5:ab:b5:75:78:10:0e:07:5a:dc:e0:e7:a7:f4:86:8a:61:
de:32:ec:55:a1:e1:9b:50:b2:d0:3a:04:c8:e1:de:f4:fe:63:
e2:43:ee:49:55:77:7a:01:2a:be:a9:ae:6e:11:82:7f:fc:27:
7e:fd:89:0b:cc:47:29:3b:4b:a1:4b:38:26:17:b0:bf:d9:75:
de:1d:b5:55:f5:4e:99:5b:d8:6f:59:3c:4e:24:c4:04:10:f5:
a4:e9:fb:14:06:79:c8:49:7a:0c:4f:5b:9f:ef:eb:f2:ad:3b:
40:b2:7d:7d:c3:43:89:38:20:9e:6b:54:1f:42:66:87:ba:00:
6c:0f:64:0a:3f:91:b3:25:0b:39:5c:be:75:86:ed:9c:b4:30:
f9:1f:7b:24:22:39:70:86:14:5f:16:f6:65:09:8d:d0:ab:1f:
15:e0:88:cf:2b:ce:a9:bc:f1:61:06:ea:ae:67:61:ed:d3:c7:
f8:e1:f6:34:ab:6b:99:74:c7:57:98:75:08:51:ee:80:6b:53:
3c:e2:c9:c0:a4:d8:4a:db:ed:02:6d:44:b5:5a:d0:93:5c:a1:
cb:9f:86:7c:71:2f:de:2e:e5:48:48:b3:e4:79:20:ef:13:0c:
6a:f2:63:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 02:59:05 2026 by rpki-client