Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38332e302f32342d3234203d3e20323634393336.roa
File: 3136382e3233322e38332e302f32342d3234203d3e20323634393336.roa (raw, json)
Hash identifier: b6n2K8VgfOBIcOW4G8ookE/jtZrX4YEx5fYCGRlMwwI=
Subject key identifier: D7:4E:5D:6B:EA:77:30:A5:9D:4F:D6:DA:CC:B9:72:EC:8C:C7:86:43
Certificate issuer: /CN=D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC
Certificate serial: 67ACCA46A56327358582295750551213E5A33BE8
Authority key identifier: D9:AE:EE:7B:CB:3D:81:EA:AD:61:F0:7F:69:A9:B0:59:78:F5:80:EC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38332e302f32342d3234203d3e20323634393336.roa
Signing time: Wed 01 Oct 2025 22:07:09 +0000
ROA not before: Wed 01 Oct 2025 22:02:09 +0000
ROA not after: Wed 30 Sep 2026 22:07:09 +0000
asID: 264936
IP address blocks: 168.232.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:ac:ca:46:a5:63:27:35:85:82:29:57:50:55:12:13:e5:a3:3b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC
Validity
Not Before: Oct 1 22:02:09 2025 GMT
Not After : Sep 30 22:07:09 2026 GMT
Subject: CN=D74E5D6BEA7730A59D4FD6DACCB972EC8CC78643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9d:c2:98:2c:fb:20:4c:71:1c:00:26:d7:88:
90:99:e5:9d:80:a5:e1:82:8d:60:f3:88:2a:26:96:
9d:1f:d4:fd:92:a6:f0:10:d1:d2:9a:42:2f:bb:83:
07:81:32:d8:0a:44:c6:c8:d2:58:9a:0d:ea:1e:39:
a6:ba:8f:cc:b6:4f:08:91:79:dc:b9:97:54:a2:d3:
0f:75:80:4a:d2:72:4b:88:b2:10:16:bb:1d:99:ba:
ff:05:f3:e0:c8:7c:1c:7a:53:b2:92:87:04:0c:bf:
6a:60:c7:e8:03:51:29:43:0b:57:a8:4b:c4:0b:15:
c9:db:88:66:65:9f:b2:0a:02:cc:0c:5d:43:b9:ee:
3d:0e:95:dc:d5:26:1a:d9:e0:d8:11:8c:8e:c4:45:
95:91:a7:6d:54:c5:25:db:16:f3:bf:f4:f0:ee:f5:
8d:43:17:66:8f:3c:95:7d:9e:dc:6f:0a:ef:39:26:
66:b9:28:6c:af:09:12:37:df:90:3f:32:98:2e:b6:
ad:ea:1a:3a:33:3a:d8:13:97:fd:6f:f8:a3:3f:c6:
f9:60:eb:37:3a:d5:54:59:c7:8b:35:83:76:43:0b:
21:88:a7:6d:6b:4e:23:a5:92:40:4a:14:de:17:be:
4a:63:86:1b:78:6e:a1:c8:62:25:6c:14:e5:21:d7:
38:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4E:5D:6B:EA:77:30:A5:9D:4F:D6:DA:CC:B9:72:EC:8C:C7:86:43
X509v3 Authority Key Identifier:
keyid:D9:AE:EE:7B:CB:3D:81:EA:AD:61:F0:7F:69:A9:B0:59:78:F5:80:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38332e302f32342d3234203d3e20323634393336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.232.83.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:bf:88:a1:47:d5:0f:6d:8c:b1:39:f1:4a:18:43:79:52:cf:
2d:c5:40:65:81:c4:34:a9:43:7a:d0:04:4a:64:17:e3:d1:31:
cb:ef:a5:94:cb:a0:35:7a:0e:87:e7:21:f5:a5:38:eb:35:cc:
2f:d7:27:72:be:5f:35:cd:0d:94:cc:66:a4:79:ef:39:f9:29:
79:81:ad:99:97:11:de:18:70:fa:f8:19:34:e9:35:13:df:4e:
72:d2:85:b8:dd:a5:34:d5:fb:73:1a:0a:c3:29:66:7e:60:14:
f4:3c:0a:73:bb:59:f5:a0:6c:31:2d:3a:43:98:02:ab:70:b6:
2c:94:3c:c6:ee:3b:d9:15:19:d6:40:15:29:77:c1:17:cd:42:
af:1b:1f:12:fd:01:87:1b:8f:17:30:9b:60:c0:2a:bb:56:21:
21:b0:54:25:0e:17:56:d6:77:1e:61:fb:23:f8:19:3f:f0:14:
c2:75:7b:9a:01:38:97:63:51:6a:14:19:0d:9d:4d:10:d3:bb:
1c:53:b4:9a:e7:71:7f:90:bc:b9:ea:c8:a8:ff:b1:d0:c4:3d:
ed:c9:53:b2:69:21:12:5d:73:e0:8d:dd:3d:8b:00:9e:f6:d6:
79:ea:a4:50:68:07:9b:bd:de:f8:d9:cd:18:4a:e8:75:f0:2a:
52:e4:47:89
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZ6zKRqVjJzWFgilXUFUSE+WjO+gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDlBRUVFN0JDQjNEODFFQUFENjFGMDdGNjlBOUIwNTk3
OEY1ODBFQzAeFw0yNTEwMDEyMjAyMDlaFw0yNjA5MzAyMjA3MDlaMDMxMTAvBgNV
BAMTKEQ3NEU1RDZCRUE3NzMwQTU5RDRGRDZEQUNDQjk3MkVDOENDNzg2NDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIncKYLPsgTHEcACbXiJCZ5Z2A
peGCjWDziComlp0f1P2SpvAQ0dKaQi+7gweBMtgKRMbI0liaDeoeOaa6j8y2TwiR
edy5l1Si0w91gErSckuIshAWux2Zuv8F8+DIfBx6U7KShwQMv2pgx+gDUSlDC1eo
S8QLFcnbiGZln7IKAswMXUO57j0OldzVJhrZ4NgRjI7ERZWRp21UxSXbFvO/9PDu
9Y1DF2aPPJV9ntxvCu85Jma5KGyvCRI335A/Mpgutq3qGjozOtgTl/1v+KM/xvlg
6zc61VRZx4s1g3ZDCyGIp21rTiOlkkBKFN4Xvkpjhht4bqHIYiVsFOUh1zirAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU105da+p3MKWdT9bazLly7IzHhkMwHwYDVR0j
BBgwFoAU2a7ue8s9geqtYfB/aamwWXj1gOwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDNyNUh0TnVhQnRmcUNEM0xiVmdHb2F3dmlyaXdWNk5YWXlwYmEzcmFX
UG4vMC9EOUFFRUU3QkNCM0Q4MUVBQUQ2MUYwN0Y2OUE5QjA1OTc4RjU4MEVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5QUVFRTdCQ0IzRDgxRUFB
RDYxRjA3RjY5QTlCMDU5NzhGNTgwRUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQzcjVIdE51YUJ0ZnFDRDNMYlZnR29hd3Zpcml3VjZOWFl5cGJhM3JhV1BuLzAv
MzEzNjM4MmUzMjMzMzIyZTM4MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzOTMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACo6FMwDQYJKoZIhvcNAQELBQADggEBAKK/iKFH
1Q9tjLE58UoYQ3lSzy3FQGWBxDSpQ3rQBEpkF+PRMcvvpZTLoDV6DofnIfWlOOs1
zC/XJ3K+XzXNDZTMZqR57zn5KXmBrZmXEd4YcPr4GTTpNRPfTnLShbjdpTTV+3Ma
CsMpZn5gFPQ8CnO7WfWgbDEtOkOYAqtwtiyUPMbuO9kVGdZAFSl3wRfNQq8bHxL9
AYcbjxcwm2DAKrtWISGwVCUOF1bWdx5h+yP4GT/wFMJ1e5oBOJdjUWoUGQ2dTRDT
uxxTtJrncX+QvLnqyKj/sdDEPe3JU7JpIRJdc+CN3T2LAJ721nnqpFBoB5u93vjZ
zRhK6HXwKlLkR4k=
-----END CERTIFICATE-----
Generated at Tue Nov 4 01:38:02 2025 by rpki-client