Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/3136382e3232372e3232312e302f32342d3234203d3e20323634383839.roa
File: 3136382e3232372e3232312e302f32342d3234203d3e20323634383839.roa (raw, json)
Hash identifier: gIF3q1qKso/fG3trB9Ndpap9I7M3uDiLFkfKPzw036I=
Subject key identifier: 13:36:3B:71:54:92:DE:64:6D:AC:3A:5B:CE:9E:F6:47:A2:B0:B6:CA
Certificate issuer: /CN=BF3D2960951229F60429923820F4643A4958DB73
Certificate serial: 0728C128BD4C6C96AEAC05B86F5E0B70F295AA68
Authority key identifier: BF:3D:29:60:95:12:29:F6:04:29:92:38:20:F4:64:3A:49:58:DB:73
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF3D2960951229F60429923820F4643A4958DB73.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/3136382e3232372e3232312e302f32342d3234203d3e20323634383839.roa
Signing time: Wed 27 Aug 2025 16:51:54 +0000
ROA not before: Wed 27 Aug 2025 16:46:54 +0000
ROA not after: Wed 26 Aug 2026 16:51:54 +0000
asID: 264889
IP address blocks: 168.227.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:28:c1:28:bd:4c:6c:96:ae:ac:05:b8:6f:5e:0b:70:f2:95:aa:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF3D2960951229F60429923820F4643A4958DB73
Validity
Not Before: Aug 27 16:46:54 2025 GMT
Not After : Aug 26 16:51:54 2026 GMT
Subject: CN=13363B715492DE646DAC3A5BCE9EF647A2B0B6CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e2:7f:b0:a3:0e:2a:a9:cd:47:09:6c:62:8b:
54:6a:f1:42:ca:31:4f:d6:03:ad:e1:86:b5:a2:22:
c3:ad:61:88:24:ee:51:f7:9a:fd:d0:4d:d4:76:14:
18:92:7f:92:1d:eb:ae:76:96:70:7f:58:34:dc:5e:
51:6b:24:6e:40:89:92:72:b7:fe:2a:06:df:1c:23:
61:83:81:7f:1c:84:35:bc:e0:16:e4:b7:d9:e0:a1:
ef:59:30:b4:a6:20:02:30:ce:dc:af:92:ad:4b:9f:
75:96:05:9e:ae:a2:c8:1f:a8:da:fd:d6:40:78:55:
d2:4c:c2:f0:35:9d:f9:8b:cf:9d:aa:6a:f3:dd:f0:
0b:f8:16:fc:0e:b3:7a:e2:07:f3:6a:45:3a:c4:e7:
6f:28:47:42:3b:0a:d9:2e:35:ef:0c:f6:64:f6:94:
bd:a2:40:3f:63:6c:77:a5:3b:c9:ae:ff:fb:d0:ab:
31:a7:ce:36:28:29:0c:09:30:f3:01:45:9d:c7:62:
a9:5e:b7:6e:35:d9:d9:17:18:35:7b:22:64:71:36:
b9:1f:74:34:17:6e:fb:a0:3f:57:7d:6c:ec:15:c8:
a8:64:1f:92:c4:f9:5e:dc:0d:42:e2:ea:28:52:48:
41:a4:db:96:7f:c4:6e:c4:d3:2e:f7:31:7a:10:42:
9a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:36:3B:71:54:92:DE:64:6D:AC:3A:5B:CE:9E:F6:47:A2:B0:B6:CA
X509v3 Authority Key Identifier:
keyid:BF:3D:29:60:95:12:29:F6:04:29:92:38:20:F4:64:3A:49:58:DB:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/BF3D2960951229F60429923820F4643A4958DB73.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF3D2960951229F60429923820F4643A4958DB73.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/3136382e3232372e3232312e302f32342d3234203d3e20323634383839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.221.0/24
Signature Algorithm: sha256WithRSAEncryption
13:63:ab:3f:da:18:28:d2:1e:ca:be:4a:9f:76:71:7d:3a:d6:
40:99:7f:e4:f3:2c:27:f9:c0:5a:30:c2:9d:73:de:85:00:05:
e0:98:bf:60:37:67:67:7f:d7:4a:dc:2e:78:94:2b:9b:1b:21:
f8:8f:e9:86:0b:c0:fb:0b:20:c5:3e:0b:dc:eb:57:b7:78:e1:
25:9b:e2:06:b3:05:82:7b:33:48:64:f4:bb:01:b9:fd:0e:b2:
49:59:34:26:6c:d7:07:ff:33:0c:fd:df:67:cd:1b:f5:ac:51:
1b:4e:17:1f:21:78:00:6e:51:89:b4:54:a1:a5:d8:f7:0f:a9:
9a:df:36:9e:d7:55:39:cf:83:e5:1f:6e:6e:f3:6f:25:15:ee:
6a:10:0c:5f:08:e7:51:3f:88:e4:32:54:f9:10:61:ff:e1:84:
e6:9a:b6:9c:8d:0f:46:bf:11:b6:24:60:63:9b:fa:07:ff:59:
42:05:cf:5a:9a:f0:ed:45:46:52:d3:e4:e8:13:5c:fb:5d:f6:
41:9a:28:95:45:6a:6a:7c:c5:75:b2:5d:6f:2a:29:ca:6d:24:
26:2b:83:7a:89:43:11:8f:95:f7:70:4b:26:57:c6:17:0e:72:
9e:40:63:aa:5d:7d:84:c8:5c:65:17:f4:45:43:9e:e2:06:85:
fc:68:04:2a
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUByjBKL1MbJaurAW4b14LcPKVqmgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkYzRDI5NjA5NTEyMjlGNjA0Mjk5MjM4MjBGNDY0M0E0
OTU4REI3MzAeFw0yNTA4MjcxNjQ2NTRaFw0yNjA4MjYxNjUxNTRaMDMxMTAvBgNV
BAMTKDEzMzYzQjcxNTQ5MkRFNjQ2REFDM0E1QkNFOUVGNjQ3QTJCMEI2Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC74n+wow4qqc1HCWxii1Rq8ULK
MU/WA63hhrWiIsOtYYgk7lH3mv3QTdR2FBiSf5Id6652lnB/WDTcXlFrJG5AiZJy
t/4qBt8cI2GDgX8chDW84Bbkt9ngoe9ZMLSmIAIwztyvkq1Ln3WWBZ6uosgfqNr9
1kB4VdJMwvA1nfmLz52qavPd8Av4FvwOs3riB/NqRTrE528oR0I7CtkuNe8M9mT2
lL2iQD9jbHelO8mu//vQqzGnzjYoKQwJMPMBRZ3HYqlet2412dkXGDV7ImRxNrkf
dDQXbvugP1d9bOwVyKhkH5LE+V7cDULi6ihSSEGk25Z/xG7E0y73MXoQQpqvAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUEzY7cVSS3mRtrDpbzp72R6KwtsowHwYDVR0j
BBgwFoAUvz0pYJUSKfYEKZI4IPRkOklY23MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlg3aGhpZjNxY1h4R05Za1NTSExyZnFzMnlzcDJNM2NZWTloV21TQzMz
MnUvMC9CRjNEMjk2MDk1MTIyOUY2MDQyOTkyMzgyMEY0NjQzQTQ5NThEQjczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGM0QyOTYwOTUxMjI5RjYw
NDI5OTIzODIwRjQ2NDNBNDk1OERCNzMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JYN2hoaWYzcWNYeEdOWWtTU0hMcmZxczJ5c3AyTTNjWVk5aFdtU0MzMzJ1LzAv
MzEzNjM4MmUzMjMyMzcyZTMyMzIzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDM4MzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjj3TANBgkqhkiG9w0BAQsFAAOCAQEAE2Or
P9oYKNIeyr5Kn3ZxfTrWQJl/5PMsJ/nAWjDCnXPehQAF4Ji/YDdnZ3/XStwueJQr
mxsh+I/phgvA+wsgxT4L3OtXt3jhJZviBrMFgnszSGT0uwG5/Q6ySVk0JmzXB/8z
DP3fZ80b9axRG04XHyF4AG5RibRUoaXY9w+pmt82ntdVOc+D5R9ubvNvJRXuahAM
XwjnUT+I5DJU+RBh/+GE5pq2nI0PRr8RtiRgY5v6B/9ZQgXPWprw7UVGUtPk6BNc
+132QZoolUVqanzFdbJdbyopym0kJiuDeolDEY+V93BLJlfGFw5ynkBjql19hMhc
ZRf0RUOe4gaF/GgEKg==
-----END CERTIFICATE-----
Generated at Sat Sep 20 09:24:23 2025 by rpki-client