![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3136302e3233382e3232302e302f32322d3234203d3e20323636353535.roa
File: 3136302e3233382e3232302e302f32322d3234203d3e20323636353535.roa (raw, json)
Hash identifier: 3UAJ+PJcb2ZWMBPepwUdJlsudoQ3Zr7IPgeivDjxLYY=
Subject key identifier: 35:82:70:8D:A9:14:27:F0:90:97:DD:15:2D:23:AF:B8:24:FF:84:7C
Certificate issuer: /CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
Certificate serial: 58F6D2F7B883E9D2BA2F47EB13510F661E622139
Authority key identifier: 85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3136302e3233382e3232302e302f32322d3234203d3e20323636353535.roa
Signing time: Wed 23 Nov 2022 12:29:50 +0000
ROA not before: Wed 23 Nov 2022 12:24:50 +0000
ROA not after: Wed 22 Nov 2023 12:29:50 +0000
asID: 266555
IP address blocks: 160.238.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:f6:d2:f7:b8:83:e9:d2:ba:2f:47:eb:13:51:0f:66:1e:62:21:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
Validity
Not Before: Nov 23 12:24:50 2022 GMT
Not After : Nov 22 12:29:50 2023 GMT
Subject: CN=3582708DA91427F09097DD152D23AFB824FF847C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e7:6c:f8:9a:73:71:bf:08:ac:e4:63:e5:81:
41:e2:01:36:20:9a:c9:a6:99:7f:dc:1c:78:65:47:
2c:06:70:80:a1:fc:52:1c:9c:74:2a:ad:61:2f:36:
ab:47:c5:e3:eb:87:01:81:28:e7:7c:dd:1c:85:a4:
ce:d2:2d:e1:5c:6b:ae:e4:98:21:8b:1f:42:94:b5:
f7:bd:a2:4b:49:3d:29:7a:b5:fa:46:5c:b8:e9:14:
f4:5a:15:fd:bc:34:be:25:c2:e4:b9:cd:64:78:71:
75:c1:c8:d5:a1:4e:fb:5d:dc:fc:52:5b:ed:97:32:
9d:20:23:08:50:b7:c6:f7:11:48:05:3f:4d:e0:07:
b9:1a:ff:3c:ad:0b:4f:49:00:08:ed:47:37:1c:f7:
b4:f4:c2:94:b1:f8:0a:b7:3b:b9:d7:9c:1b:58:e3:
e7:44:e2:79:dd:2e:b3:6c:8f:67:b6:c6:3f:9a:1b:
53:12:c6:52:28:25:33:13:e8:cc:fe:c8:b0:84:82:
d5:0c:e9:46:6b:b2:85:b9:e6:86:29:a3:c9:60:a7:
e9:b7:6e:10:f2:c4:d8:11:a7:7d:11:a7:04:68:f9:
f9:92:c9:a0:af:80:9b:b1:ea:39:eb:23:df:1b:a5:
3d:3c:ab:d3:8d:e0:0c:c5:6d:d1:fc:85:af:8c:99:
e7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:82:70:8D:A9:14:27:F0:90:97:DD:15:2D:23:AF:B8:24:FF:84:7C
X509v3 Authority Key Identifier:
keyid:85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3136302e3233382e3232302e302f32322d3234203d3e20323636353535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.238.220.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:de:2e:4b:30:a9:88:13:db:07:18:b8:46:ba:c3:0f:4f:f7:
ed:f1:86:c0:52:49:9b:a5:64:f1:5f:46:e1:9e:f4:5c:5b:8e:
53:3d:c6:4c:d6:e9:46:54:3f:92:5d:c0:1d:d4:5a:74:0e:bd:
c4:78:a5:df:9b:48:1e:57:ca:6c:c0:dd:e3:a0:49:64:f4:47:
df:2c:19:3a:92:fe:34:d4:ff:f2:5d:c7:8a:c6:e0:c1:9b:e7:
5b:c6:12:07:4c:f1:e3:d6:53:9f:4b:8c:a5:9a:56:dd:d2:37:
ef:2f:b3:b2:35:b4:4c:40:9a:9c:c8:73:d5:80:44:1f:67:77:
c9:3e:5a:ed:9a:72:0c:7d:c6:ae:83:d5:3c:85:d0:c2:a3:27:
2b:32:31:e7:c1:b4:7d:8d:25:a3:11:c7:3d:95:ca:a5:cc:33:
d0:48:62:ee:b5:41:80:5c:9b:7e:a0:d7:ec:12:61:16:fe:c2:
94:73:ef:be:39:1c:c1:3f:84:63:c2:65:65:c2:6a:fd:53:60:
dc:80:8b:ed:2a:dd:56:20:fe:b5:2c:46:de:73:a7:2b:92:14:
ef:9a:07:99:17:56:85:12:cb:07:f3:f6:26:48:d7:b8:41:a4:
c1:36:9d:92:92:08:70:3f:3c:34:03:aa:d1:08:8d:8f:48:fb:
b5:0a:de:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:35:07 2025 by rpki-client