Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/3136382e3232372e3232322e302f32342d3234203d3e20323634383839.roa
File: 3136382e3232372e3232322e302f32342d3234203d3e20323634383839.roa (raw, json)
Hash identifier: 0N4va1weoRGj7lfq0C8qG8me/YqLH/pEqZm4RNhEo0A=
Subject key identifier: 63:D5:35:5E:36:AF:7B:5A:63:21:2B:56:1C:12:56:52:AF:B8:86:5B
Certificate issuer: /CN=BF3D2960951229F60429923820F4643A4958DB73
Certificate serial: 7007D2A168BCC09399BEEE98F838560C02759829
Authority key identifier: BF:3D:29:60:95:12:29:F6:04:29:92:38:20:F4:64:3A:49:58:DB:73
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF3D2960951229F60429923820F4643A4958DB73.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/3136382e3232372e3232322e302f32342d3234203d3e20323634383839.roa
Signing time: Wed 27 Aug 2025 16:52:01 +0000
ROA not before: Wed 27 Aug 2025 16:47:01 +0000
ROA not after: Wed 26 Aug 2026 16:52:01 +0000
asID: 264889
IP address blocks: 168.227.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:07:d2:a1:68:bc:c0:93:99:be:ee:98:f8:38:56:0c:02:75:98:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF3D2960951229F60429923820F4643A4958DB73
Validity
Not Before: Aug 27 16:47:01 2025 GMT
Not After : Aug 26 16:52:01 2026 GMT
Subject: CN=63D5355E36AF7B5A63212B561C125652AFB8865B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2f:55:70:90:26:9f:0b:b2:6d:30:57:1d:cc:
96:8a:66:5f:9a:e5:ca:15:8a:c5:36:80:36:5c:e1:
8f:ab:19:1e:ac:d6:b2:5d:1f:21:2b:ae:93:fc:ea:
ec:48:9c:f7:41:66:03:b0:ab:ee:77:fc:a9:24:20:
ba:91:b1:96:3f:3d:c0:7b:fb:f4:16:20:de:67:c8:
c7:f0:7d:ee:3e:84:eb:17:5b:5b:18:f7:66:63:b1:
2a:72:c8:fd:5e:7b:0c:a9:de:7b:bb:99:78:eb:d5:
44:8e:c9:09:f4:b5:62:f5:4b:ee:27:74:00:d5:cd:
98:2d:26:f6:4a:c3:7b:78:d7:df:2f:1c:0f:71:e1:
67:74:56:02:81:6a:1a:73:7e:bf:b8:c6:a0:23:49:
cf:dc:c0:da:b6:ab:79:5c:75:24:31:8f:dd:9a:74:
2c:80:46:da:b4:0a:13:34:10:da:9a:f1:d3:3e:7d:
79:d9:2c:c2:09:05:03:e3:b1:3e:b0:25:52:c9:7c:
e5:e3:59:e2:5a:c2:ca:da:c0:8f:a6:0e:13:4a:b5:
5e:9d:80:fa:3b:61:3a:f2:3d:45:35:d4:5d:a8:7e:
86:56:63:ed:4b:52:f2:8a:53:74:fc:1f:24:07:d6:
03:7b:e6:8f:39:6c:30:d7:90:1b:48:a6:34:52:73:
48:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D5:35:5E:36:AF:7B:5A:63:21:2B:56:1C:12:56:52:AF:B8:86:5B
X509v3 Authority Key Identifier:
keyid:BF:3D:29:60:95:12:29:F6:04:29:92:38:20:F4:64:3A:49:58:DB:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/BF3D2960951229F60429923820F4643A4958DB73.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF3D2960951229F60429923820F4643A4958DB73.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/3136382e3232372e3232322e302f32342d3234203d3e20323634383839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.222.0/24
Signature Algorithm: sha256WithRSAEncryption
63:5a:15:ec:39:ec:82:90:40:4d:e4:96:1e:df:9a:83:e1:90:
fa:cd:0b:78:4b:dd:fe:a8:9e:20:d3:b6:a5:66:58:b5:55:ca:
11:56:19:eb:11:cc:61:10:4a:b1:91:a2:d0:bb:81:fc:bb:c1:
55:43:a3:fa:4c:81:6f:70:a8:4b:6c:43:e6:0d:e6:b3:32:f3:
75:0a:d6:1a:31:38:f1:bd:56:32:3f:8e:2b:77:e6:e4:e3:c4:
29:4e:9a:04:c6:48:fb:fa:61:01:53:a6:02:8e:42:e5:b0:4c:
d3:a8:f9:4f:ad:e2:98:51:49:6e:84:0d:2a:2b:b1:d2:3a:df:
41:1a:c8:19:e6:4f:bb:6a:cc:40:75:c3:88:72:2c:f4:5b:8d:
c0:d6:4c:1b:26:78:80:55:29:7a:6f:ab:76:0d:39:54:3f:cd:
24:b6:45:26:9f:43:53:e5:6f:35:8e:31:a2:51:15:f7:8d:b5:
a7:75:be:fc:48:7a:b7:73:ac:f6:35:3f:45:8d:35:8d:5f:55:
4f:b9:f4:39:42:d6:d9:0e:c2:f7:84:bd:40:aa:9f:79:2a:d6:
8b:e9:df:2d:cc:c2:d5:7c:9d:15:68:90:79:87:c2:23:fe:29:
86:c3:bf:44:17:35:7a:0e:67:12:b0:ac:80:be:17:b0:a5:29:
2a:d4:29:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 04:14:36 2025 by rpki-client