![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/1/3136382e3139352e342e302f32342d3234203d3e20323635343036.roa
File: 3136382e3139352e342e302f32342d3234203d3e20323635343036.roa (raw, json)
Hash identifier: noaHPEvcvAkXJCZ7QgwpIM2Bv04TJUCHQuLxhFuvTvs=
Subject key identifier: D4:2A:4D:AD:FD:C7:5B:E5:42:63:F5:73:A5:82:34:1C:BD:1A:5C:3B
Certificate issuer: /CN=0946ABC0E4F85CE0FC04F4D0512F90597B724859
Certificate serial: 1294B51B16E2B2422D121E6E10CBAFF43DD636C0
Authority key identifier: 09:46:AB:C0:E4:F8:5C:E0:FC:04:F4:D0:51:2F:90:59:7B:72:48:59
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0946ABC0E4F85CE0FC04F4D0512F90597B724859.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/1/3136382e3139352e342e302f32342d3234203d3e20323635343036.roa
Signing time: Tue 02 Jan 2024 15:47:37 +0000
ROA not before: Tue 02 Jan 2024 15:42:37 +0000
ROA not after: Tue 31 Dec 2024 15:47:37 +0000
asID: 265406
IP address blocks: 168.195.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:94:b5:1b:16:e2:b2:42:2d:12:1e:6e:10:cb:af:f4:3d:d6:36:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0946ABC0E4F85CE0FC04F4D0512F90597B724859
Validity
Not Before: Jan 2 15:42:37 2024 GMT
Not After : Dec 31 15:47:37 2024 GMT
Subject: CN=D42A4DADFDC75BE54263F573A582341CBD1A5C3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:21:53:97:7d:50:66:30:8c:94:97:40:8c:19:
83:c8:e8:78:20:b3:bb:1e:47:7b:7c:52:31:7f:e8:
42:19:57:0c:80:96:82:1a:7b:d7:74:39:c1:b9:5a:
8e:61:42:4b:d5:73:f1:f3:ab:59:fa:b0:96:6f:3a:
68:0a:6c:7b:3c:ad:d3:6b:18:a8:ca:3a:df:07:5b:
79:9c:c0:a0:b3:eb:50:30:f0:0b:62:d1:b4:cb:28:
2f:18:5e:3b:62:1b:57:1b:f5:31:0f:fc:ee:a6:c5:
64:c2:a1:13:a9:a2:38:16:45:30:e9:bd:67:a4:87:
7a:1b:3c:a7:05:c5:6b:ac:7c:67:b4:38:a1:fd:d9:
a1:36:71:55:da:d0:70:eb:57:78:76:44:86:7c:73:
7c:36:7b:6f:3c:1a:e5:1a:14:30:35:a2:8b:16:80:
fc:08:15:68:f3:44:ae:9c:a6:ad:a3:2e:5c:7b:da:
35:7f:03:21:79:97:22:9f:e4:d8:20:4f:52:81:b7:
ed:02:ee:e7:71:35:21:0a:fc:1e:68:c9:b1:f3:17:
a8:64:84:71:e7:27:31:b3:cc:46:22:a1:07:f2:7a:
bf:da:c8:16:09:f3:2b:0b:e9:6b:bb:bc:4e:96:ea:
9c:1f:ee:3e:cd:05:5f:bd:1c:0d:0b:e7:30:08:77:
51:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2A:4D:AD:FD:C7:5B:E5:42:63:F5:73:A5:82:34:1C:BD:1A:5C:3B
X509v3 Authority Key Identifier:
keyid:09:46:AB:C0:E4:F8:5C:E0:FC:04:F4:D0:51:2F:90:59:7B:72:48:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/1/0946ABC0E4F85CE0FC04F4D0512F90597B724859.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0946ABC0E4F85CE0FC04F4D0512F90597B724859.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/1/3136382e3139352e342e302f32342d3234203d3e20323635343036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.4.0/24
Signature Algorithm: sha256WithRSAEncryption
50:77:b3:8a:38:dd:82:70:b2:1c:0a:e3:52:df:e6:92:e7:9d:
12:62:88:87:c0:20:96:c6:48:e8:10:f3:51:a9:42:20:ea:ce:
d3:15:02:bf:33:51:55:b9:49:ee:ca:b2:a2:f4:81:b5:a8:a4:
ff:09:8f:cd:76:79:48:67:67:bd:65:89:fb:53:0b:2a:14:2b:
ee:bb:7f:d0:de:aa:d7:ca:27:cc:a6:8f:d5:4c:7b:59:a8:07:
66:5c:43:e2:bb:35:f4:9c:ff:63:86:87:ff:ee:c8:15:ee:8a:
0a:c9:ce:ef:2e:e6:25:1a:ac:9f:43:b1:76:5a:fb:8b:b6:5d:
79:9d:23:c8:30:21:ec:18:cc:0c:ff:e5:fe:80:66:99:f8:7f:
6d:1d:bb:ff:4b:7b:27:93:14:2d:ba:27:75:3f:3f:d7:ff:64:
fc:25:d0:0c:ac:b7:f9:69:d4:ed:b2:f7:f0:20:49:9e:1f:85:
46:1c:6b:d5:f3:93:f0:41:11:2c:f9:af:7a:b4:ef:97:13:f0:
60:5d:7e:05:be:28:68:ec:86:2a:9e:84:60:ae:78:d6:75:99:
45:6a:45:53:2c:ae:45:f4:28:7b:ad:7e:15:fc:18:a1:91:07:
fb:5f:83:eb:1e:6e:b9:d4:22:90:d9:e8:10:98:47:81:ed:e3:
78:0b:45:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:22:00 2025 by rpki-client