Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/3136382e3232372e3232302e302f32342d3234203d3e20323634383839.roa
File: 3136382e3232372e3232302e302f32342d3234203d3e20323634383839.roa (raw, json)
Hash identifier: F+uGgPznj2kJw81o5kshsR6SBI3ckUWWWq3Fo5YwJvM=
Subject key identifier: BA:D2:C2:60:B7:38:15:1E:40:54:B1:15:7D:60:CC:2A:BF:B0:8A:4B
Certificate issuer: /CN=BF3D2960951229F60429923820F4643A4958DB73
Certificate serial: 7E7F991B71879F1B0B8B124F367BC92B4F3D06D0
Authority key identifier: BF:3D:29:60:95:12:29:F6:04:29:92:38:20:F4:64:3A:49:58:DB:73
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF3D2960951229F60429923820F4643A4958DB73.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/3136382e3232372e3232302e302f32342d3234203d3e20323634383839.roa
Signing time: Wed 27 Aug 2025 16:51:49 +0000
ROA not before: Wed 27 Aug 2025 16:46:49 +0000
ROA not after: Wed 26 Aug 2026 16:51:49 +0000
asID: 264889
IP address blocks: 168.227.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:7f:99:1b:71:87:9f:1b:0b:8b:12:4f:36:7b:c9:2b:4f:3d:06:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF3D2960951229F60429923820F4643A4958DB73
Validity
Not Before: Aug 27 16:46:49 2025 GMT
Not After : Aug 26 16:51:49 2026 GMT
Subject: CN=BAD2C260B738151E4054B1157D60CC2ABFB08A4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9e:ad:8c:70:2b:fe:37:49:27:92:6a:8f:6d:
ac:da:c3:29:fa:db:ab:c4:63:15:2a:b7:c0:73:ba:
b6:50:28:b3:14:dc:50:7e:c4:09:db:a1:90:93:5b:
b4:70:6f:ad:16:36:51:32:06:ae:ac:2f:b9:5b:3d:
30:93:1a:9c:23:62:7f:34:7c:69:95:28:d5:6f:9e:
2b:b7:13:18:d2:60:58:61:fb:4f:ec:35:bc:86:ef:
1e:23:88:76:87:9c:46:7c:42:5b:5f:61:c3:2a:5d:
c2:5d:a9:31:31:d3:06:13:52:24:f4:a5:33:05:8f:
66:ac:99:36:73:b0:59:dc:f4:65:bc:e1:bf:9f:61:
d4:56:d9:6f:a2:09:3d:a4:5b:33:8b:ff:5c:0d:e3:
9b:4d:a0:31:28:c2:af:b7:03:ff:e8:9b:66:29:bf:
55:ec:5b:0f:5e:3e:f4:61:29:03:bb:fc:52:15:01:
5d:43:08:3f:2e:33:21:7a:c0:af:d0:89:41:86:d4:
0d:a6:70:ef:c9:76:9a:6a:3a:01:a5:ce:49:d9:d5:
e0:ea:37:03:9f:4c:9f:b9:e4:69:22:fe:7d:89:6c:
11:de:cc:e2:a6:fb:0e:fb:bd:d2:22:6a:41:75:9f:
9b:89:92:38:e7:31:d5:7f:3f:f5:ff:6e:f8:2f:e0:
34:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D2:C2:60:B7:38:15:1E:40:54:B1:15:7D:60:CC:2A:BF:B0:8A:4B
X509v3 Authority Key Identifier:
keyid:BF:3D:29:60:95:12:29:F6:04:29:92:38:20:F4:64:3A:49:58:DB:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/BF3D2960951229F60429923820F4643A4958DB73.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF3D2960951229F60429923820F4643A4958DB73.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/3136382e3232372e3232302e302f32342d3234203d3e20323634383839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.220.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:a9:ce:12:2f:c2:20:32:f0:35:e0:e9:b1:25:49:07:09:f6:
8c:d9:d8:af:d7:9a:05:4f:51:e4:76:19:99:30:5e:c9:2b:42:
b7:ab:04:ff:80:b5:97:b1:8c:95:26:28:a6:8d:76:ab:fb:fb:
e4:50:0e:e3:be:bb:ad:6a:ba:c2:c4:f0:f1:64:26:08:d6:bc:
4e:fa:de:93:41:d1:2b:44:56:ea:a1:bb:6b:b3:4b:b3:79:18:
80:9b:4b:cd:ad:53:2f:c8:38:29:59:d8:81:8b:60:dc:07:87:
7b:32:cc:de:72:6b:89:a6:0e:5d:a2:41:d9:eb:8a:8a:80:23:
e2:82:bf:71:64:31:69:54:f2:d6:6f:aa:23:c4:56:33:a6:1e:
e6:cf:39:e2:bd:cc:db:6a:c8:86:60:6b:3e:5e:fb:46:86:4c:
d8:3f:6c:a6:16:3e:5b:e2:91:18:9d:97:49:42:f9:46:fb:33:
f0:2a:1c:61:5a:60:13:5f:02:29:42:44:5a:6e:2e:27:b7:78:
f0:ba:91:34:20:ae:fb:ba:84:cf:53:ee:87:8b:35:d0:3f:ac:
d8:33:77:7f:df:cf:bb:ab:9d:b0:ca:17:e1:ab:50:64:97:dd:
b7:2b:8f:6b:37:41:9e:52:6b:dd:54:c0:29:6b:cd:11:26:02:
ed:5b:e6:75
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUfn+ZG3GHnxsLixJPNnvJK089BtAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkYzRDI5NjA5NTEyMjlGNjA0Mjk5MjM4MjBGNDY0M0E0
OTU4REI3MzAeFw0yNTA4MjcxNjQ2NDlaFw0yNjA4MjYxNjUxNDlaMDMxMTAvBgNV
BAMTKEJBRDJDMjYwQjczODE1MUU0MDU0QjExNTdENjBDQzJBQkZCMDhBNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1nq2McCv+N0knkmqPbazawyn6
26vEYxUqt8BzurZQKLMU3FB+xAnboZCTW7Rwb60WNlEyBq6sL7lbPTCTGpwjYn80
fGmVKNVvniu3ExjSYFhh+0/sNbyG7x4jiHaHnEZ8QltfYcMqXcJdqTEx0wYTUiT0
pTMFj2asmTZzsFnc9GW84b+fYdRW2W+iCT2kWzOL/1wN45tNoDEowq+3A//om2Yp
v1XsWw9ePvRhKQO7/FIVAV1DCD8uMyF6wK/QiUGG1A2mcO/JdppqOgGlzknZ1eDq
NwOfTJ+55Gki/n2JbBHezOKm+w77vdIiakF1n5uJkjjnMdV/P/X/bvgv4DQrAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUutLCYLc4FR5AVLEVfWDMKr+wikswHwYDVR0j
BBgwFoAUvz0pYJUSKfYEKZI4IPRkOklY23MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlg3aGhpZjNxY1h4R05Za1NTSExyZnFzMnlzcDJNM2NZWTloV21TQzMz
MnUvMC9CRjNEMjk2MDk1MTIyOUY2MDQyOTkyMzgyMEY0NjQzQTQ5NThEQjczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGM0QyOTYwOTUxMjI5RjYw
NDI5OTIzODIwRjQ2NDNBNDk1OERCNzMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JYN2hoaWYzcWNYeEdOWWtTU0hMcmZxczJ5c3AyTTNjWVk5aFdtU0MzMzJ1LzAv
MzEzNjM4MmUzMjMyMzcyZTMyMzIzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDM4MzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjj3DANBgkqhkiG9w0BAQsFAAOCAQEAC6nO
Ei/CIDLwNeDpsSVJBwn2jNnYr9eaBU9R5HYZmTBeyStCt6sE/4C1l7GMlSYopo12
q/v75FAO4767rWq6wsTw8WQmCNa8Tvrek0HRK0RW6qG7a7NLs3kYgJtLza1TL8g4
KVnYgYtg3AeHezLM3nJriaYOXaJB2euKioAj4oK/cWQxaVTy1m+qI8RWM6Ye5s85
4r3M22rIhmBrPl77RoZM2D9sphY+W+KRGJ2XSUL5Rvsz8CocYVpgE18CKUJEWm4u
J7d48LqRNCCu+7qEz1Puh4s10D+s2DN3f9/Pu6udsMoX4atQZJfdtyuPazdBnlJr
3VTAKWvNESYC7VvmdQ==
-----END CERTIFICATE-----
Generated at Sat Sep 20 04:14:45 2025 by rpki-client