Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a313037313a3a2f34382d3438203d3e20323639353636.roa
File: 323830343a363638383a313037313a3a2f34382d3438203d3e20323639353636.roa (raw, json)
Hash identifier: jB3DljL6YTiDQ724gpNDy2253K5JZv5S/KrG0R6WkYw=
Subject key identifier: E7:3E:BE:66:FC:99:64:87:AE:86:DD:51:55:36:C4:9C:3C:AA:80:2E
Certificate issuer: /CN=AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6
Certificate serial: 3AC57C854DB8D1E11888DC2545E5B2A70B5A17A6
Authority key identifier: AF:70:35:97:CE:AD:8E:C9:E6:9E:2A:22:E9:BE:A5:D6:DF:14:7A:E6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a313037313a3a2f34382d3438203d3e20323639353636.roa
Signing time: Mon 23 Feb 2026 03:35:29 +0000
ROA not before: Mon 23 Feb 2026 03:30:29 +0000
ROA not after: Mon 22 Feb 2027 03:35:29 +0000
asID: 269566
IP address blocks: 2804:6688:1071::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:c5:7c:85:4d:b8:d1:e1:18:88:dc:25:45:e5:b2:a7:0b:5a:17:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6
Validity
Not Before: Feb 23 03:30:29 2026 GMT
Not After : Feb 22 03:35:29 2027 GMT
Subject: CN=E73EBE66FC996487AE86DD515536C49C3CAA802E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bf:6b:db:1a:f4:c9:97:3f:32:6a:e0:d2:cf:
30:86:07:f1:2d:3b:e5:3c:63:78:6c:cb:43:f4:ec:
ec:14:2c:8c:99:ed:6f:b7:93:1a:ad:c8:11:a6:83:
62:0d:0f:2a:63:10:7e:c3:07:4e:aa:44:3c:7d:50:
8b:a0:5e:9f:ea:19:91:e6:5b:a4:0c:49:73:45:7d:
40:93:d3:33:bb:3d:a5:c0:7c:05:37:66:dd:2d:01:
33:f6:63:66:96:d5:8d:1c:27:90:07:06:f1:39:bf:
78:b0:a2:86:70:38:17:a6:b2:c7:90:a5:59:c0:6b:
2b:cf:0e:13:bf:7f:d9:8f:c9:59:ae:06:5e:0a:a4:
8d:97:b1:19:80:0c:b6:45:b8:bb:7c:c5:cc:b4:07:
5e:a9:31:2f:f7:a0:04:19:27:ac:11:3a:67:bf:76:
a0:1c:e7:19:ef:fa:da:de:ed:b4:94:68:f7:7f:53:
1c:a8:80:f3:63:ba:74:e7:74:35:60:3a:a4:92:02:
91:18:95:f3:85:19:ce:49:66:26:c4:4f:b3:0d:c0:
55:40:f3:fd:3e:66:6d:32:79:5a:7c:39:c9:f5:97:
ed:6e:fa:b0:27:db:a5:3b:eb:51:9a:63:5a:72:f2:
ac:0a:e0:8f:98:dd:98:1e:b7:2f:4c:81:1a:52:24:
c7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3E:BE:66:FC:99:64:87:AE:86:DD:51:55:36:C4:9C:3C:AA:80:2E
X509v3 Authority Key Identifier:
keyid:AF:70:35:97:CE:AD:8E:C9:E6:9E:2A:22:E9:BE:A5:D6:DF:14:7A:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a313037313a3a2f34382d3438203d3e20323639353636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6688:1071::/48
Signature Algorithm: sha256WithRSAEncryption
88:75:b1:8f:21:ac:bf:09:bb:03:b3:1f:ac:f3:77:cb:0a:da:
22:87:4a:f1:32:25:76:18:b0:f4:c9:b9:c5:27:e5:1b:7a:3d:
18:ab:13:16:8e:4d:f9:48:f3:85:37:88:ca:65:c6:d8:ff:cf:
c4:0a:ec:ec:8c:42:c6:37:f6:3f:49:41:88:48:bb:28:f4:25:
94:1c:b1:51:9e:73:dd:48:82:64:58:76:81:fc:66:e5:63:d7:
e7:92:15:6c:e9:be:44:ff:25:af:d3:1d:44:d2:8d:04:64:a7:
c1:fe:3e:02:4d:03:39:26:5f:6d:99:40:95:f7:b5:6c:88:43:
db:d5:af:2f:20:b6:b8:1d:e7:6e:85:f7:73:ab:96:4d:9b:58:
69:70:3e:87:ef:eb:f7:59:09:5c:c5:0f:7c:b4:d5:e6:40:87:
b3:73:17:80:08:fb:d6:18:6e:f1:d4:4a:ee:15:8c:9e:07:9b:
91:33:d6:b3:cb:9a:23:63:10:29:1d:5c:05:fb:00:a0:10:10:
97:19:48:83:1c:79:ff:48:49:88:cd:3a:42:4c:bb:42:d7:50:
80:af:df:94:68:9b:3d:5e:bd:5d:b6:85:5c:84:e1:f7:af:86:
c4:11:5f:53:5a:be:75:4a:e9:ad:b5:ac:42:41:7f:35:37:39:
8a:00:81:d9
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUOsV8hU240eEYiNwlReWypwtaF6YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUY3MDM1OTdDRUFEOEVDOUU2OUUyQTIyRTlCRUE1RDZE
RjE0N0FFNjAeFw0yNjAyMjMwMzMwMjlaFw0yNzAyMjIwMzM1MjlaMDMxMTAvBgNV
BAMTKEU3M0VCRTY2RkM5OTY0ODdBRTg2REQ1MTU1MzZDNDlDM0NBQTgwMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCv2vbGvTJlz8yauDSzzCGB/Et
O+U8Y3hsy0P07OwULIyZ7W+3kxqtyBGmg2INDypjEH7DB06qRDx9UIugXp/qGZHm
W6QMSXNFfUCT0zO7PaXAfAU3Zt0tATP2Y2aW1Y0cJ5AHBvE5v3iwooZwOBemsseQ
pVnAayvPDhO/f9mPyVmuBl4KpI2XsRmADLZFuLt8xcy0B16pMS/3oAQZJ6wROme/
dqAc5xnv+tre7bSUaPd/UxyogPNjunTndDVgOqSSApEYlfOFGc5JZibET7MNwFVA
8/0+Zm0yeVp8Ocn1l+1u+rAn26U761GaY1py8qwK4I+Y3Zgety9MgRpSJMcTAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQU5z6+ZvyZZIeuht1RVTbEnDyqgC4wHwYDVR0j
BBgwFoAUr3A1l86tjsnmnioi6b6l1t8UeuYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWZWN0cxb2tUMXZRdEZiTVFwZ2F0REM5cHRod0FNVWQ4SFVydnVFb3ZF
NEsvMC9BRjcwMzU5N0NFQUQ4RUM5RTY5RTJBMjJFOUJFQTVENkRGMTQ3QUU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGNzAzNTk3Q0VBRDhFQzlF
NjlFMkEyMkU5QkVBNUQ2REYxNDdBRTYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VmVjdHMW9rVDF2UXRGYk1RcGdhdERDOXB0aHdBTVVkOEhVcnZ1RW92RTRLLzAv
MzIzODMwMzQzYTM2MzYzODM4M2EzMTMwMzczMTNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzOTM1MzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEZogQcTANBgkqhkiG9w0BAQsF
AAOCAQEAiHWxjyGsvwm7A7MfrPN3ywraIodK8TIldhiw9Mm5xSflG3o9GKsTFo5N
+UjzhTeIymXG2P/PxArs7IxCxjf2P0lBiEi7KPQllByxUZ5z3UiCZFh2gfxm5WPX
55IVbOm+RP8lr9MdRNKNBGSnwf4+Ak0DOSZfbZlAlfe1bIhD29WvLyC2uB3nboX3
c6uWTZtYaXA+h+/r91kJXMUPfLTV5kCHs3MXgAj71hhu8dRK7hWMngebkTPWs8ua
I2MQKR1cBfsAoBAQlxlIgxx5/0hJiM06Qky7QtdQgK/flGibPV69XbaFXITh96+G
xBFfU1q+dUrprbWsQkF/NTc5igCB2Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:32:15 2026 by rpki-client