Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/3136382e3232372e3232302e302f32332d3233203d3e20323634383839.roa
File: 3136382e3232372e3232302e302f32332d3233203d3e20323634383839.roa (raw, json)
Hash identifier: KyQh+Vt5Mj9Tk9O+Gto8k0L4GC+ii84g4y8YobKforw=
Subject key identifier: F6:DC:AA:0D:89:60:D2:C1:93:D7:5A:0D:D2:46:F9:8A:DC:3A:9D:0C
Certificate issuer: /CN=BF3D2960951229F60429923820F4643A4958DB73
Certificate serial: 0FC4A9980B8C723B10F62CA867159177C3AA9465
Authority key identifier: BF:3D:29:60:95:12:29:F6:04:29:92:38:20:F4:64:3A:49:58:DB:73
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF3D2960951229F60429923820F4643A4958DB73.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/3136382e3232372e3232302e302f32332d3233203d3e20323634383839.roa
Signing time: Wed 27 Aug 2025 16:51:44 +0000
ROA not before: Wed 27 Aug 2025 16:46:44 +0000
ROA not after: Wed 26 Aug 2026 16:51:44 +0000
asID: 264889
IP address blocks: 168.227.220.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:c4:a9:98:0b:8c:72:3b:10:f6:2c:a8:67:15:91:77:c3:aa:94:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF3D2960951229F60429923820F4643A4958DB73
Validity
Not Before: Aug 27 16:46:44 2025 GMT
Not After : Aug 26 16:51:44 2026 GMT
Subject: CN=F6DCAA0D8960D2C193D75A0DD246F98ADC3A9D0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3e:5a:20:24:ac:0c:65:d9:bd:3a:a3:03:f6:
7f:8d:c7:61:38:90:fb:8b:fc:ac:c1:34:68:af:74:
3a:e8:f6:15:cb:d0:ab:02:82:9b:67:20:b2:fd:c0:
a0:94:5d:64:2b:c4:9b:57:5e:d7:a6:ef:82:fd:86:
27:cd:dc:e3:f9:19:70:f9:0f:29:27:26:0e:02:95:
63:7c:bd:37:da:8f:1e:bf:a9:13:71:69:05:fe:e0:
e2:96:bc:ca:c9:1e:13:91:1c:d0:d3:6f:cb:86:f1:
88:a8:55:2b:29:50:63:50:f9:9a:4a:09:07:75:78:
a3:ba:7a:17:88:0f:3a:ec:cb:8c:0d:43:c8:51:ab:
ca:1f:16:ce:56:a8:06:cc:31:f5:79:da:5e:4e:c1:
7a:87:35:ca:10:dc:07:0e:00:e4:d1:a5:80:b0:ab:
ca:77:5c:c2:62:18:05:5f:84:3c:1f:43:b7:79:e2:
17:4b:ea:45:78:ba:07:b1:51:41:72:dc:3d:db:9a:
df:66:8c:ea:15:b0:72:0d:d9:df:3d:9f:a7:95:d0:
d3:ba:a5:30:2e:52:c4:3d:b3:f9:09:9f:53:66:c2:
2b:bd:dd:a5:89:c7:46:5a:b1:08:57:70:e4:24:b8:
70:fe:71:ea:4a:19:46:f7:22:06:dd:94:96:51:21:
d6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DC:AA:0D:89:60:D2:C1:93:D7:5A:0D:D2:46:F9:8A:DC:3A:9D:0C
X509v3 Authority Key Identifier:
keyid:BF:3D:29:60:95:12:29:F6:04:29:92:38:20:F4:64:3A:49:58:DB:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/BF3D2960951229F60429923820F4643A4958DB73.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF3D2960951229F60429923820F4643A4958DB73.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/3136382e3232372e3232302e302f32332d3233203d3e20323634383839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.220.0/23
Signature Algorithm: sha256WithRSAEncryption
23:62:27:f9:8a:75:dc:26:4d:c2:9d:66:5b:0e:04:13:d6:ec:
d3:04:3e:01:af:91:ff:5d:01:03:24:1e:da:c4:01:7b:43:c0:
4f:bc:fe:cf:c7:52:e7:95:39:a9:ac:9b:09:fd:be:99:dc:d3:
70:2c:34:9e:76:25:ec:a5:e4:92:02:7d:d6:db:ee:40:88:f2:
d5:49:88:02:3d:ab:da:22:dd:6f:32:73:db:4a:38:e3:79:58:
e6:e5:b7:db:29:09:16:f9:b2:1b:c5:1a:cc:e9:fc:9c:bf:d8:
27:b6:6e:94:26:da:56:a8:78:fe:b6:f9:99:5d:db:7c:c1:1c:
a7:d8:ff:78:d7:f3:0a:30:38:5d:8a:7b:b9:79:1a:89:e5:94:
58:49:74:aa:f0:48:85:cb:1f:b0:59:77:0d:d8:ac:33:66:76:
6b:31:90:a3:31:64:0f:86:d4:a8:cb:db:d7:15:34:7e:aa:e5:
08:4f:67:a6:bf:23:9e:4d:17:44:c9:32:70:ab:dd:9d:c8:5f:
96:e6:35:63:62:20:30:6f:0a:d6:50:cd:e5:09:ed:9a:69:ad:
47:fa:d0:77:59:d1:69:34:fc:33:71:7f:c0:45:d0:64:4a:3e:
a8:87:d2:ab:74:84:3c:5a:fa:dc:d5:a6:37:6f:6e:34:e4:69:
af:22:9f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 05:48:46 2025 by rpki-client