Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a3a2f33322d3332203d3e20323639353636.roa
File: 323830343a363638383a3a2f33322d3332203d3e20323639353636.roa (raw, json)
Hash identifier: h/aHDIi/dzeweQz5hxxZ8iSDyz0DgMWuxcXBSaiRplI=
Subject key identifier: EE:CF:F6:50:A3:AE:64:98:D4:73:2E:5B:77:F7:C0:B5:4B:3B:52:1A
Certificate issuer: /CN=AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6
Certificate serial: 6DE2C001A26C2BE1A18226FD1CD88B20CBB61CCF
Authority key identifier: AF:70:35:97:CE:AD:8E:C9:E6:9E:2A:22:E9:BE:A5:D6:DF:14:7A:E6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a3a2f33322d3332203d3e20323639353636.roa
Signing time: Mon 23 Feb 2026 03:35:31 +0000
ROA not before: Mon 23 Feb 2026 03:30:31 +0000
ROA not after: Mon 22 Feb 2027 03:35:31 +0000
asID: 269566
IP address blocks: 2804:6688::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:e2:c0:01:a2:6c:2b:e1:a1:82:26:fd:1c:d8:8b:20:cb:b6:1c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6
Validity
Not Before: Feb 23 03:30:31 2026 GMT
Not After : Feb 22 03:35:31 2027 GMT
Subject: CN=EECFF650A3AE6498D4732E5B77F7C0B54B3B521A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:47:eb:f6:45:3a:53:33:11:87:76:b2:a0:b3:
e1:60:e7:e8:5d:a6:28:61:ed:58:70:2b:09:1e:bb:
ba:ac:9f:e9:86:4b:62:c4:4d:c5:e7:dd:e5:0c:6b:
3c:19:90:ec:27:e9:5b:94:69:12:fd:d2:93:2e:78:
cd:5e:f5:ab:79:14:c8:33:fa:15:6a:fa:63:1e:92:
57:c8:40:97:e5:b0:c2:2d:26:64:06:09:1b:57:98:
0f:5c:fb:80:40:bf:ac:3a:56:a2:73:f5:c1:59:d0:
0c:91:b6:9b:1d:8b:fa:f9:0a:f1:6f:ca:1a:84:0a:
c6:8d:b4:97:2e:9f:6d:2b:b6:fa:f1:ab:83:62:81:
13:56:d0:15:5e:7d:3d:c5:68:18:c5:4b:c7:61:aa:
05:40:4e:69:e5:4a:31:1f:75:58:eb:b6:04:44:77:
14:a8:9f:0c:a5:d5:65:7b:28:d4:65:57:dd:3a:de:
9f:23:a1:1b:d3:d0:52:77:4f:d8:0b:83:2c:a6:b7:
3b:f0:4d:13:b6:fb:6c:31:4e:bc:32:9a:66:bd:64:
81:4c:64:bd:bb:17:ab:56:3d:87:20:98:96:88:f0:
91:48:7f:6f:18:36:29:53:5f:44:26:ae:ce:47:ab:
3f:75:f2:c8:d0:7e:d7:30:61:84:89:c5:17:7b:aa:
9a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CF:F6:50:A3:AE:64:98:D4:73:2E:5B:77:F7:C0:B5:4B:3B:52:1A
X509v3 Authority Key Identifier:
keyid:AF:70:35:97:CE:AD:8E:C9:E6:9E:2A:22:E9:BE:A5:D6:DF:14:7A:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a3a2f33322d3332203d3e20323639353636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6688::/32
Signature Algorithm: sha256WithRSAEncryption
95:9c:dd:0f:ab:c2:65:8a:e6:74:ca:ac:30:7d:42:37:a5:bf:
6a:74:0a:18:e2:22:51:8a:76:c7:94:8c:80:9e:ac:f6:d6:8b:
66:8e:25:18:7f:6d:27:61:c2:6d:fb:18:96:fc:0c:e5:3c:44:
a9:73:b8:77:74:fa:2f:38:2b:99:f9:81:a1:80:ab:5a:8e:79:
3f:a8:1a:76:27:ba:27:ed:8e:5e:b5:9c:e8:78:88:cb:36:9b:
c0:df:22:ec:04:b0:79:82:90:a5:c4:e9:69:b4:56:2a:68:3b:
50:d7:dc:b5:be:af:f9:39:7f:ad:2d:f9:0b:0c:41:e4:2f:7e:
9e:d4:f2:49:e9:32:ab:04:c7:33:2b:69:ef:73:51:a2:96:3c:
15:3b:e2:b1:a2:89:dc:39:b9:c2:f7:43:16:e6:23:ca:c9:5a:
d3:94:76:2b:db:af:72:a9:2d:d5:d4:6f:fc:dd:95:13:33:f2:
5a:a6:ae:df:47:ea:a6:d4:94:59:c7:b1:2a:4c:a7:29:6a:e1:
49:d4:f7:b5:ea:04:c5:eb:42:a7:0d:20:99:44:4e:dc:07:15:
19:ec:d5:5a:c0:f1:03:33:60:9a:29:46:2f:f7:4b:fd:63:2c:
e6:da:cb:93:3b:46:63:e2:07:ac:d6:e4:aa:b7:db:12:c4:16:
50:fa:82:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:32:20 2026 by rpki-client