Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/3136382e3232372e3232322e302f32332d3233203d3e20323634383839.roa
File: 3136382e3232372e3232322e302f32332d3233203d3e20323634383839.roa (raw, json)
Hash identifier: 1rNK6NbXh83J7Bk0suPUtyR+97YhZENv1ri7Z+TPpxk=
Subject key identifier: FA:5C:E2:CB:08:8F:C0:E9:5D:E6:2A:22:14:DC:00:86:56:56:AC:AE
Certificate issuer: /CN=BF3D2960951229F60429923820F4643A4958DB73
Certificate serial: 7EC92CA8121070065D69F38C6F45CE262B867A5C
Authority key identifier: BF:3D:29:60:95:12:29:F6:04:29:92:38:20:F4:64:3A:49:58:DB:73
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF3D2960951229F60429923820F4643A4958DB73.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/3136382e3232372e3232322e302f32332d3233203d3e20323634383839.roa
Signing time: Wed 27 Aug 2025 16:51:57 +0000
ROA not before: Wed 27 Aug 2025 16:46:57 +0000
ROA not after: Wed 26 Aug 2026 16:51:57 +0000
asID: 264889
IP address blocks: 168.227.222.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:c9:2c:a8:12:10:70:06:5d:69:f3:8c:6f:45:ce:26:2b:86:7a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF3D2960951229F60429923820F4643A4958DB73
Validity
Not Before: Aug 27 16:46:57 2025 GMT
Not After : Aug 26 16:51:57 2026 GMT
Subject: CN=FA5CE2CB088FC0E95DE62A2214DC00865656ACAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:89:4c:00:f9:47:f1:40:c8:3d:89:26:0e:de:
6d:0a:14:5e:0b:84:5f:cf:51:27:e5:a9:40:4b:58:
16:89:57:1e:94:00:25:e3:11:54:e4:12:9d:94:9f:
6b:b2:ea:0d:0f:5d:73:a8:e4:26:bc:c4:e7:1d:42:
33:06:34:9b:05:6a:c7:97:7a:2f:af:73:47:07:97:
aa:fd:f0:97:27:74:a0:94:7f:60:7c:75:98:aa:93:
bf:43:20:ef:32:b5:46:e5:7e:be:b7:bc:e5:33:8b:
b4:1c:d9:7d:62:95:ff:1f:44:18:4c:4d:d0:34:fd:
78:9c:ab:33:24:94:8e:f0:dd:3f:f7:29:76:d7:5e:
2e:00:bd:86:42:05:89:db:b2:96:99:9b:4f:05:ae:
23:10:0a:27:93:26:83:73:98:73:44:f5:f5:15:ee:
52:5c:7c:ea:3c:41:dd:33:57:9b:2b:0e:e7:9b:6d:
50:4d:d4:ba:a7:a5:4a:3d:7a:eb:a8:33:41:d0:57:
db:5f:18:6d:3f:2f:a1:a4:3c:54:ed:b9:e0:49:a2:
79:0e:82:4c:9f:55:bb:82:c1:6b:79:21:89:ae:aa:
db:1c:96:ca:94:78:08:65:77:8f:17:47:ff:de:f0:
72:2f:eb:90:2e:10:96:75:c1:7d:b5:a1:42:d4:fe:
5e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5C:E2:CB:08:8F:C0:E9:5D:E6:2A:22:14:DC:00:86:56:56:AC:AE
X509v3 Authority Key Identifier:
keyid:BF:3D:29:60:95:12:29:F6:04:29:92:38:20:F4:64:3A:49:58:DB:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/BF3D2960951229F60429923820F4643A4958DB73.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF3D2960951229F60429923820F4643A4958DB73.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/3136382e3232372e3232322e302f32332d3233203d3e20323634383839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.222.0/23
Signature Algorithm: sha256WithRSAEncryption
58:59:c5:e6:25:1c:da:25:91:a4:c0:61:0e:e4:7c:8c:25:46:
ad:a8:34:10:44:27:a3:ed:3d:57:f9:9e:00:43:78:b5:03:4e:
c0:fb:66:40:4d:81:c4:0a:04:63:9b:4d:77:dc:a2:e9:06:52:
69:b7:5d:29:7f:a5:89:74:8c:fd:75:bb:ba:0d:85:ca:b7:10:
d6:87:13:86:d1:6a:a7:3d:3f:33:17:98:00:ea:25:5e:cb:b1:
cf:95:fb:ea:8e:5a:95:34:61:5f:92:9a:3f:96:65:e8:6e:cb:
19:03:30:d1:d7:d3:a3:b1:c7:d1:64:dd:0d:f0:b5:f7:5d:ab:
b7:ba:8d:67:0a:42:7b:1a:b5:e8:21:6e:5c:9e:be:62:dc:ff:
1c:e4:3d:46:55:aa:d8:2a:74:7f:be:ae:df:7f:08:17:eb:94:
75:5b:b3:a8:f7:a9:26:32:d8:c0:0c:3a:34:21:bb:14:7a:93:
e6:31:c1:1c:db:f9:c0:e9:05:79:4e:41:48:8c:6c:32:7f:56:
ea:fc:88:e5:f6:12:d8:25:88:cc:8c:3d:4b:7a:4d:4e:42:62:
7c:c1:e8:34:65:12:5f:86:60:fe:dd:f5:3b:1f:33:25:4e:c6:
59:54:85:7f:e3:52:96:ef:e1:bf:48:46:54:7a:eb:71:39:fb:
be:fe:bc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 04:15:36 2025 by rpki-client