![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3230382e3231352e302f32342d3234203d3e203238323230.roa
File: 3138362e3230382e3231352e302f32342d3234203d3e203238323230.roa (raw, json)
Hash identifier: FfXiVKDhz9y+1m/9hzS1gUQpHr5Os38XkFSTruniQsE=
Subject key identifier: 78:84:BF:88:DD:E3:AE:38:57:16:11:0A:5C:03:CE:D2:86:5D:E2:97
Certificate issuer: /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial: 5107DA20CC3AEADFC03E5891711D1E591A8D2013
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3230382e3231352e302f32342d3234203d3e203238323230.roa
Signing time: Mon 08 Apr 2024 20:05:30 +0000
ROA not before: Mon 08 Apr 2024 20:00:30 +0000
ROA not after: Mon 07 Apr 2025 20:05:30 +0000
asID: 28220
IP address blocks: 186.208.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:07:da:20:cc:3a:ea:df:c0:3e:58:91:71:1d:1e:59:1a:8d:20:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Validity
Not Before: Apr 8 20:00:30 2024 GMT
Not After : Apr 7 20:05:30 2025 GMT
Subject: CN=7884BF88DDE3AE385716110A5C03CED2865DE297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:67:20:d9:02:22:9c:d5:44:7a:92:17:19:fb:
8c:3a:fc:48:1b:da:39:1a:40:15:0d:67:58:66:7d:
2c:38:14:ac:01:31:f5:b2:ab:ff:d7:af:11:e3:83:
18:8a:9b:67:54:46:c5:b7:36:6a:f8:d2:2f:05:f4:
06:40:9d:6c:3f:e7:59:7c:86:ae:79:b8:13:7a:ab:
9c:31:93:45:65:e6:0c:15:c3:45:2e:54:2c:e0:0c:
1c:3b:fe:d9:55:44:c4:ac:0c:98:58:8e:d1:11:85:
4d:a9:ff:95:a2:7a:05:eb:b0:75:1a:d2:bf:d5:b3:
e9:c9:33:a9:2f:8c:a2:56:d2:e0:66:81:c5:19:dd:
ea:a7:78:36:1a:b5:fb:0f:af:50:f2:85:ee:4f:d8:
cb:02:d7:ce:d3:c3:3a:0e:4c:94:3c:0a:ad:0f:6b:
dd:03:3f:34:e6:a3:f6:64:0b:94:2c:09:5b:99:ba:
14:fd:cf:24:d8:ba:23:ac:6e:b0:0d:ab:fc:48:44:
1b:6c:36:ce:c0:92:21:c7:59:62:09:91:fc:ce:7a:
79:2b:9d:f5:8d:30:b5:ec:b0:9f:53:03:64:38:3f:
3b:5f:5c:06:be:cc:d0:c0:08:61:ed:8f:4b:e4:c0:
ec:8b:ff:dc:14:8a:da:1a:73:b6:38:a6:13:06:0d:
12:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:84:BF:88:DD:E3:AE:38:57:16:11:0A:5C:03:CE:D2:86:5D:E2:97
X509v3 Authority Key Identifier:
keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3230382e3231352e302f32342d3234203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.208.215.0/24
Signature Algorithm: sha256WithRSAEncryption
64:19:78:4f:9b:25:04:89:b3:0d:c7:40:9a:27:bf:b6:f0:a2:
43:19:27:da:f1:59:ba:75:fd:14:5b:2a:88:c0:5b:d0:60:2f:
70:98:d8:41:a6:0a:3c:8a:a5:7f:25:d8:2c:70:37:32:49:0c:
e7:9e:2c:58:33:79:0c:c0:ec:8b:6f:2b:38:5a:cb:aa:15:94:
ab:cf:b3:36:9e:65:59:f3:b5:97:36:05:59:2d:96:09:34:82:
30:4b:dd:a0:b9:2d:b7:81:77:70:37:b5:9a:74:71:55:5a:5b:
95:04:9e:b7:94:65:55:e2:08:8a:81:93:64:42:c7:41:29:4f:
4c:a9:7d:d2:6b:b5:22:88:2a:9e:06:1c:d3:83:9e:3d:ed:b2:
44:bf:cc:a7:03:df:61:6f:ba:46:3e:7a:e1:f0:5c:a7:3d:b3:
71:fe:d7:12:7b:f1:51:9a:5f:f3:7c:02:aa:bb:4c:a8:d5:6f:
49:fa:19:4b:08:ea:31:3e:6c:0b:4d:3b:89:b2:54:f6:62:95:
6f:cd:8c:d6:da:ef:da:de:90:cf:37:ff:03:16:99:f4:ce:0c:
fa:9d:bd:ab:02:fb:6f:20:3d:d3:12:45:4d:77:6d:06:2a:b5:
59:7f:e9:f0:13:19:a2:b2:2d:d3:97:6c:28:16:39:51:04:8e:
ad:56:b2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:08 2025 by rpki-client