Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/3136382e3232372e3232332e302f32342d3234203d3e20323634383839.roa
File: 3136382e3232372e3232332e302f32342d3234203d3e20323634383839.roa (raw, json)
Hash identifier: qleznANBaqIbKY9MSc5atgZQ7ZWciSbS+GCG3nZyKz8=
Subject key identifier: D5:F1:83:1D:0B:38:D1:96:DD:B2:B8:A5:36:58:F4:3E:E0:D1:45:2D
Certificate issuer: /CN=BF3D2960951229F60429923820F4643A4958DB73
Certificate serial: 1DA274959DF61F123E8A27FDDA21DA4B5514C13D
Authority key identifier: BF:3D:29:60:95:12:29:F6:04:29:92:38:20:F4:64:3A:49:58:DB:73
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF3D2960951229F60429923820F4643A4958DB73.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/3136382e3232372e3232332e302f32342d3234203d3e20323634383839.roa
Signing time: Wed 27 Aug 2025 16:52:04 +0000
ROA not before: Wed 27 Aug 2025 16:47:04 +0000
ROA not after: Wed 26 Aug 2026 16:52:04 +0000
asID: 264889
IP address blocks: 168.227.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:a2:74:95:9d:f6:1f:12:3e:8a:27:fd:da:21:da:4b:55:14:c1:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF3D2960951229F60429923820F4643A4958DB73
Validity
Not Before: Aug 27 16:47:04 2025 GMT
Not After : Aug 26 16:52:04 2026 GMT
Subject: CN=D5F1831D0B38D196DDB2B8A53658F43EE0D1452D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:eb:34:3a:e6:12:d9:c5:d5:98:a0:c5:85:5e:
07:a9:d2:8d:1e:aa:95:c6:8f:7d:64:e1:44:56:09:
d0:8b:e0:eb:f8:cf:48:d8:65:ff:fb:24:5f:eb:68:
ef:83:10:42:a4:30:47:30:5e:2f:9d:47:ac:cf:10:
56:a5:fe:55:ac:5d:d5:65:38:10:68:d2:d0:65:c4:
60:14:44:f9:c4:ab:c4:77:4d:30:a2:b8:1e:41:ce:
b1:0f:9c:65:cb:30:cb:98:58:ab:21:e5:58:4b:4c:
84:c8:be:2b:7b:4b:db:75:d9:ba:5b:dc:2f:55:0c:
28:ae:9c:18:ce:fa:d2:22:fc:8c:5d:bf:ee:f8:a1:
79:9e:55:82:77:62:5d:06:68:2a:b6:0a:46:d1:54:
2c:35:8b:72:66:f3:c1:35:a8:00:22:94:fa:b6:47:
ea:ba:93:56:53:12:ac:01:bb:81:06:c5:f7:11:d5:
cf:8b:20:9f:15:11:c4:85:15:da:e0:75:09:4f:72:
9a:fb:61:87:9c:f2:0a:f2:1b:83:e0:7e:b4:de:88:
dc:c4:3e:b6:38:aa:82:02:40:ce:42:27:98:ae:91:
f9:75:23:01:36:c6:96:1b:c6:84:ab:e5:01:3f:60:
b7:38:32:6a:e0:cc:e6:f8:32:f2:a4:c7:78:fc:24:
f4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F1:83:1D:0B:38:D1:96:DD:B2:B8:A5:36:58:F4:3E:E0:D1:45:2D
X509v3 Authority Key Identifier:
keyid:BF:3D:29:60:95:12:29:F6:04:29:92:38:20:F4:64:3A:49:58:DB:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/BF3D2960951229F60429923820F4643A4958DB73.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF3D2960951229F60429923820F4643A4958DB73.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/3136382e3232372e3232332e302f32342d3234203d3e20323634383839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.223.0/24
Signature Algorithm: sha256WithRSAEncryption
58:17:b8:19:c3:a8:43:59:6d:99:ed:30:88:38:6c:a8:0a:d8:
08:70:48:07:3b:f8:f9:08:34:03:62:0e:fb:f3:a7:3e:4d:55:
e2:0b:6f:06:af:9e:b1:66:a3:4b:4c:f3:d0:ac:4a:7f:da:ad:
d6:e7:aa:b0:61:a1:61:d3:12:d8:df:9a:59:e3:d7:da:fa:8b:
11:f9:3a:95:b1:ca:5e:cf:c4:29:e6:5a:66:3c:ef:7a:cb:1e:
d8:3f:69:23:6f:6a:e5:92:e5:a6:a2:c2:e5:12:d2:a3:da:1b:
2d:0e:79:cd:de:c6:0c:c8:e6:d7:6b:56:f3:7f:e8:be:b5:3b:
65:a0:18:35:5e:e2:10:f4:7a:e1:19:fa:1f:b4:ac:5b:c2:b1:
eb:31:39:15:ff:dd:68:94:89:19:8b:36:2c:a3:e1:3b:9b:9a:
ae:f6:9b:c9:ae:c7:76:3b:15:a6:cf:f2:87:1b:ae:c4:d5:d8:
dd:e4:6f:9a:a2:76:e5:44:69:ce:49:36:8c:41:90:bc:91:0a:
be:66:2e:0c:25:0d:9e:25:0c:5d:6b:f1:5c:ab:32:85:7d:d9:
eb:0c:4b:8f:a1:a3:c2:95:18:c2:0c:a6:89:06:92:9d:0e:14:
00:22:d3:a3:1e:07:e7:6e:1d:09:5c:d6:2f:50:b1:f7:d9:c2:
c4:1d:67:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 04:14:34 2025 by rpki-client