Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38302e302f32322d3232203d3e20323634393336.roa
File: 3136382e3233322e38302e302f32322d3232203d3e20323634393336.roa (raw, json)
Hash identifier: xae2mKDybcZ7oikF0rpBnLGrbdru+3EKJDky9epdXcc=
Subject key identifier: F6:1D:B2:E7:55:69:32:CA:1F:DF:E7:81:02:B6:58:75:FB:DA:83:36
Certificate issuer: /CN=D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC
Certificate serial: 74265F10C6688F85888B0D487DA30E1BEC37831D
Authority key identifier: D9:AE:EE:7B:CB:3D:81:EA:AD:61:F0:7F:69:A9:B0:59:78:F5:80:EC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38302e302f32322d3232203d3e20323634393336.roa
Signing time: Wed 01 Oct 2025 22:07:08 +0000
ROA not before: Wed 01 Oct 2025 22:02:08 +0000
ROA not after: Wed 30 Sep 2026 22:07:08 +0000
asID: 264936
IP address blocks: 168.232.80.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:26:5f:10:c6:68:8f:85:88:8b:0d:48:7d:a3:0e:1b:ec:37:83:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC
Validity
Not Before: Oct 1 22:02:08 2025 GMT
Not After : Sep 30 22:07:08 2026 GMT
Subject: CN=F61DB2E7556932CA1FDFE78102B65875FBDA8336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5c:54:69:97:9f:00:ab:ba:a2:ea:70:d1:28:
fa:0d:8d:87:58:36:1e:ac:d5:6f:19:17:f9:77:37:
da:13:a5:d6:af:c9:4a:e6:44:b3:68:52:a4:c2:f4:
25:04:f5:38:59:1e:0e:80:0d:c1:18:a5:2c:72:6f:
0c:42:f0:9a:dc:35:15:53:33:9b:eb:a9:0f:f6:6b:
d4:0c:03:bb:fd:0d:23:dc:16:c4:7b:bd:97:e7:dd:
42:a2:9d:75:d1:58:9e:16:d5:24:9e:ff:da:c8:2e:
eb:56:22:c8:37:e1:ff:13:16:cf:30:ee:a2:42:1c:
86:cd:e8:5f:09:b6:b4:b3:11:a4:c0:4c:4c:67:44:
90:a6:4f:a3:92:d3:3c:75:48:70:3b:40:17:90:cd:
d2:1e:c9:cd:d8:77:48:bd:61:02:80:c4:92:6c:ba:
a4:7b:b4:1d:7c:3d:02:8c:9c:5b:dd:60:41:c4:58:
8c:8f:49:86:41:b1:99:ef:70:6b:49:6a:d4:99:4a:
80:65:64:68:be:72:06:ac:44:e6:90:ff:e9:44:ae:
9b:77:39:cb:f8:bc:7c:3f:de:1a:0c:c3:88:30:84:
f0:a7:c4:f0:66:81:ab:f7:33:db:cd:2c:07:03:ea:
a8:ab:c0:09:21:7a:ba:e4:62:74:81:08:19:89:61:
09:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1D:B2:E7:55:69:32:CA:1F:DF:E7:81:02:B6:58:75:FB:DA:83:36
X509v3 Authority Key Identifier:
keyid:D9:AE:EE:7B:CB:3D:81:EA:AD:61:F0:7F:69:A9:B0:59:78:F5:80:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38302e302f32322d3232203d3e20323634393336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.232.80.0/22
Signature Algorithm: sha256WithRSAEncryption
30:c9:a1:12:8f:dc:8c:0e:b7:62:f8:ac:0b:84:40:fe:2e:86:
6b:08:c5:44:c3:42:02:e3:70:b4:d8:67:f2:a0:9b:81:5a:17:
81:f6:57:c1:d2:08:d3:72:57:2d:1d:0c:58:d8:9c:c2:05:e6:
85:4d:57:12:ed:ac:25:b6:42:da:26:a8:f1:64:0c:21:1e:26:
63:5b:19:76:05:03:b1:42:b9:ae:9d:1e:35:23:be:15:a3:3f:
72:34:47:f0:74:07:d0:48:82:db:b2:51:c2:a3:8f:e4:d0:22:
d6:6b:a1:a1:b1:b7:9e:29:99:97:f6:3c:08:e6:de:c1:54:05:
0f:3b:12:1e:00:78:91:5d:c3:9f:00:15:80:e4:5c:6c:ea:2c:
b0:ad:6e:7d:08:83:95:61:19:d4:ea:88:a9:62:0c:64:46:d0:
9d:af:4d:e9:32:86:de:ad:6f:9f:ea:38:ee:4c:8d:22:52:15:
86:c5:f8:b4:f9:f7:b1:f8:f9:29:35:63:75:ff:37:4f:ef:9f:
61:d6:30:f8:c3:e5:7a:b8:2d:a6:92:e8:a1:66:b5:de:28:e9:
5a:2f:0d:a9:ff:cf:ea:67:49:3d:b6:df:35:14:ad:7e:a5:2b:
fd:a2:93:6a:45:bb:31:15:fb:8e:95:6c:7f:63:1b:d5:40:7c:
0b:df:24:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:38:08 2025 by rpki-client