Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38312e302f32342d3234203d3e20323634393336.roa
File: 3136382e3233322e38312e302f32342d3234203d3e20323634393336.roa (raw, json)
Hash identifier: 9jF7NpHVoENQFlhxA4QOOwn04a1QrUtLOaKYHsNgfSA=
Subject key identifier: 8D:20:04:9C:1F:B2:99:1C:2F:53:BF:E6:CD:87:52:D3:23:2C:8D:F2
Certificate issuer: /CN=D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC
Certificate serial: 470BB0CBE654012FDDD449CA3283C2647C9E3BCF
Authority key identifier: D9:AE:EE:7B:CB:3D:81:EA:AD:61:F0:7F:69:A9:B0:59:78:F5:80:EC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38312e302f32342d3234203d3e20323634393336.roa
Signing time: Mon 27 Oct 2025 13:15:00 +0000
ROA not before: Mon 27 Oct 2025 13:10:00 +0000
ROA not after: Mon 26 Oct 2026 13:15:00 +0000
asID: 264936
IP address blocks: 168.232.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:0b:b0:cb:e6:54:01:2f:dd:d4:49:ca:32:83:c2:64:7c:9e:3b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC
Validity
Not Before: Oct 27 13:10:00 2025 GMT
Not After : Oct 26 13:15:00 2026 GMT
Subject: CN=8D20049C1FB2991C2F53BFE6CD8752D3232C8DF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5a:15:38:87:59:4e:3e:68:58:24:37:8d:f2:
fd:b8:c8:3d:e5:da:de:9a:49:0f:ff:51:c4:75:d8:
cd:23:21:0a:cf:54:1e:a8:ad:1a:a2:61:34:5c:b9:
ea:3b:96:37:73:c6:8e:36:87:e6:53:8b:9a:b9:00:
a7:bd:d8:04:40:1b:80:c9:23:d8:7c:68:79:7e:fd:
3e:19:e1:25:4e:2c:e9:b0:38:e4:50:42:c8:f7:04:
f6:7a:d7:92:bb:9c:a4:90:a1:75:ce:49:e3:50:cb:
93:e3:6c:54:76:61:64:cd:7b:6e:89:c1:0b:fc:7b:
17:3e:e2:be:8f:d6:5a:62:51:8d:f7:5c:5b:e3:29:
c5:a1:12:95:5d:c2:ee:12:9e:3c:c3:25:67:85:dd:
7b:14:8d:99:de:31:f4:f6:c6:a0:fb:21:cb:99:fb:
b2:2f:7c:2d:51:66:c8:64:c0:fe:bc:23:6a:ff:c1:
cf:56:cc:0b:e3:82:8c:10:d0:42:1f:d0:3e:61:69:
85:3f:f1:28:df:1d:82:8a:e5:ea:35:14:04:e5:38:
f0:76:e9:63:33:07:47:27:28:aa:28:6d:64:7a:43:
bc:21:a3:26:5d:08:d1:45:04:65:24:ab:fd:e5:7e:
82:b7:a7:12:5a:14:8e:80:45:d2:e0:96:f3:90:27:
5e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:20:04:9C:1F:B2:99:1C:2F:53:BF:E6:CD:87:52:D3:23:2C:8D:F2
X509v3 Authority Key Identifier:
keyid:D9:AE:EE:7B:CB:3D:81:EA:AD:61:F0:7F:69:A9:B0:59:78:F5:80:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38312e302f32342d3234203d3e20323634393336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.232.81.0/24
Signature Algorithm: sha256WithRSAEncryption
15:67:50:1b:cb:b1:9a:02:2f:ea:35:29:76:e9:b6:47:41:86:
c7:d0:8c:09:36:75:2e:d1:43:dc:71:57:d8:f8:fc:f9:4f:11:
bf:85:97:a2:4f:44:59:20:c5:ae:53:a6:ab:8e:1a:94:98:42:
91:72:8d:9c:ad:51:69:04:ea:aa:d1:0d:e3:b8:b1:79:78:2d:
e8:48:f9:ff:da:8c:34:08:76:12:4b:e9:d7:4b:a7:08:4d:38:
4f:34:b6:92:28:eb:d1:39:66:c4:51:00:cb:34:2b:50:b6:47:
f2:df:30:fe:bf:d4:5c:9f:e5:62:ee:a0:24:d2:e7:6b:f9:fc:
a7:d0:f4:22:51:15:ca:c4:76:84:aa:b9:28:4a:32:66:ac:36:
06:7c:96:fe:aa:f9:55:97:a9:fb:fd:67:db:33:e0:93:87:ce:
11:45:5d:d5:16:df:ee:00:9d:72:69:25:8c:3f:1e:ad:de:c7:
10:1c:8b:22:85:85:0d:0e:59:d9:6a:ae:60:c1:de:b4:48:a0:
1e:33:7d:09:0a:7b:2d:45:4b:6a:bd:94:50:81:3b:d6:46:3b:
b5:ae:21:ee:69:92:b1:3d:ea:e6:b5:e8:1e:84:04:38:b9:30:
fa:36:d6:42:7d:d0:d1:ec:0c:25:3c:7d:b5:06:28:2a:22:85:
45:3a:8f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:38:00 2025 by rpki-client