Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/3136382e3232372e3232302e302f32322d3232203d3e20323634383839.roa
File: 3136382e3232372e3232302e302f32322d3232203d3e20323634383839.roa (raw, json)
Hash identifier: 5muL60XuGL/9r/UFXtv/ksLhk8HoHj4rUoscOhn3kgA=
Subject key identifier: 69:81:B8:8A:DA:CB:37:76:6C:C4:D1:46:A2:BE:CF:EC:0A:EF:69:7B
Certificate issuer: /CN=BF3D2960951229F60429923820F4643A4958DB73
Certificate serial: 395B0418E8A225713D446DACBBA7D7910B38C28D
Authority key identifier: BF:3D:29:60:95:12:29:F6:04:29:92:38:20:F4:64:3A:49:58:DB:73
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF3D2960951229F60429923820F4643A4958DB73.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/3136382e3232372e3232302e302f32322d3232203d3e20323634383839.roa
Signing time: Wed 27 Aug 2025 16:51:39 +0000
ROA not before: Wed 27 Aug 2025 16:46:39 +0000
ROA not after: Wed 26 Aug 2026 16:51:39 +0000
asID: 264889
IP address blocks: 168.227.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:5b:04:18:e8:a2:25:71:3d:44:6d:ac:bb:a7:d7:91:0b:38:c2:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF3D2960951229F60429923820F4643A4958DB73
Validity
Not Before: Aug 27 16:46:39 2025 GMT
Not After : Aug 26 16:51:39 2026 GMT
Subject: CN=6981B88ADACB37766CC4D146A2BECFEC0AEF697B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6e:c4:c7:c8:29:6b:fd:aa:96:c7:1f:e7:2b:
0b:1e:fe:1a:25:7f:ff:d5:28:48:e2:fd:49:d6:2d:
10:3c:a8:53:04:43:3c:34:c8:6e:a6:dd:86:f3:1c:
9c:b0:c3:82:5f:e5:1b:14:0f:ae:87:d6:d0:d8:b9:
f6:42:ff:a7:c9:82:6f:07:a7:56:7b:6d:31:cf:17:
8b:f3:4f:cf:0b:8c:2c:3f:ac:55:fb:10:21:e1:7c:
0a:2d:3d:90:80:4f:2c:f6:34:d7:84:8b:81:b3:36:
e3:cf:be:86:91:97:b4:cf:f3:d8:56:cb:44:49:7c:
59:c4:d0:11:ed:1d:65:59:15:7d:a5:10:7f:78:68:
6d:52:95:07:df:af:74:3f:d8:98:06:4f:2a:91:05:
95:14:33:69:e4:1b:95:c2:e4:df:1a:66:33:96:ad:
87:b5:cd:0a:c0:63:1b:22:88:77:32:bf:06:42:1c:
dc:f6:60:d4:05:ae:bf:ba:94:19:f3:3f:c2:6f:3e:
0a:15:37:47:5f:b7:49:b3:a3:1f:12:ac:ee:f1:27:
ce:ee:c2:ed:15:32:6a:69:71:ce:b1:cb:dd:14:a9:
12:ba:ef:30:b6:f0:18:2a:52:49:fa:a6:26:63:39:
aa:a2:e7:30:c9:47:42:9d:65:6e:00:64:68:c2:57:
b3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:81:B8:8A:DA:CB:37:76:6C:C4:D1:46:A2:BE:CF:EC:0A:EF:69:7B
X509v3 Authority Key Identifier:
keyid:BF:3D:29:60:95:12:29:F6:04:29:92:38:20:F4:64:3A:49:58:DB:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/BF3D2960951229F60429923820F4643A4958DB73.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF3D2960951229F60429923820F4643A4958DB73.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/3136382e3232372e3232302e302f32322d3232203d3e20323634383839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.220.0/22
Signature Algorithm: sha256WithRSAEncryption
55:ec:68:1b:e9:7a:cd:2b:be:9a:a2:35:58:6a:aa:11:6b:55:
5d:56:02:6c:1a:43:1a:73:d8:6c:ac:46:de:6e:2a:8c:9b:99:
ee:90:a8:35:d4:92:6d:c1:d1:a5:59:c6:43:58:25:ff:86:e2:
c0:8e:25:da:6b:d7:1b:dd:8e:5b:5e:43:66:db:3b:7e:f6:86:
84:6a:ae:6b:f9:7a:72:1d:7e:af:44:73:68:c4:de:94:6e:d1:
57:86:af:42:e1:91:0d:1c:a1:56:d9:9b:36:d7:fa:dc:93:6c:
d8:7a:55:cd:ea:b2:d9:dd:ac:19:aa:b5:ab:26:25:99:ec:3a:
53:d4:e0:8e:b5:d6:9a:52:a7:db:26:5d:6c:91:bd:35:16:f8:
33:de:8e:c9:08:65:8e:88:c1:74:6e:b0:49:d2:c4:a2:18:46:
bf:cf:05:88:03:24:16:d4:59:ae:e2:7b:8c:d6:b0:9d:ce:38:
41:8e:75:46:16:6c:bb:18:73:fa:f6:eb:54:38:7a:99:5b:59:
8a:a9:69:fa:a4:b8:7b:68:66:3d:bb:fe:08:af:79:9f:37:6b:
c0:5b:12:43:69:73:b4:62:96:24:be:09:c0:5c:75:fa:a8:80:
66:a1:db:c1:6e:1f:76:51:b6:3d:bc:2e:80:de:2b:50:4f:de:
58:0c:23:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 05:47:41 2025 by rpki-client