![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/3133382e3131382e3232302e302f32342d3234203d3e20323634323733.roa
File: 3133382e3131382e3232302e302f32342d3234203d3e20323634323733.roa (raw, json)
Hash identifier: ni7C2M4n9aRp1D2eIDbSQFP4eNOD+VI7xOdNWeyHuDw=
Subject key identifier: 17:52:54:0D:BB:05:B1:49:9C:85:B5:D0:97:D2:42:7D:6A:AA:AA:C7
Certificate issuer: /CN=F42A0DCA25F30767A6CCA69324EE2356AC775DE7
Certificate serial: 0FAD54DEF7999F91E7FF15534C8F34BEB6754B90
Authority key identifier: F4:2A:0D:CA:25:F3:07:67:A6:CC:A6:93:24:EE:23:56:AC:77:5D:E7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F42A0DCA25F30767A6CCA69324EE2356AC775DE7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/3133382e3131382e3232302e302f32342d3234203d3e20323634323733.roa
Signing time: Wed 07 Feb 2024 12:58:38 +0000
ROA not before: Wed 07 Feb 2024 12:53:38 +0000
ROA not after: Wed 05 Feb 2025 12:58:38 +0000
asID: 264273
IP address blocks: 138.118.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:ad:54:de:f7:99:9f:91:e7:ff:15:53:4c:8f:34:be:b6:75:4b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F42A0DCA25F30767A6CCA69324EE2356AC775DE7
Validity
Not Before: Feb 7 12:53:38 2024 GMT
Not After : Feb 5 12:58:38 2025 GMT
Subject: CN=1752540DBB05B1499C85B5D097D2427D6AAAAAC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:73:00:12:99:d9:ea:1b:8b:72:5d:e6:90:1c:
47:ce:6d:2e:94:d8:c9:5e:32:a6:f3:22:8d:bc:0c:
2b:b0:5a:54:3c:92:26:20:19:4e:53:a7:31:80:aa:
36:4c:89:1a:92:0a:d6:5b:e9:8f:4d:92:ec:4a:64:
49:9c:69:3c:9b:e8:47:67:6b:85:5f:d8:68:e1:3b:
db:7a:c0:86:98:10:e1:b1:da:b9:cb:68:60:3d:80:
be:ec:96:26:13:9f:dc:d8:5b:21:9f:25:07:47:51:
be:f0:99:73:6a:10:d2:af:18:19:90:c2:d0:c6:3d:
f8:53:98:59:3d:bc:23:0c:23:da:1c:d3:3d:e3:27:
11:58:bd:6d:b6:81:9e:c5:0d:5b:9d:a5:c2:37:1b:
f1:22:24:b7:43:11:b1:9e:9c:54:fe:8c:4f:d0:1a:
a5:1e:0f:da:2b:94:33:65:e3:d8:87:89:48:e3:ef:
7c:29:6e:cb:c4:de:4f:92:18:23:1d:bf:6d:ab:99:
7d:f9:8b:1d:01:12:10:d1:e0:51:47:1d:e8:5a:a9:
53:3c:c5:d8:3f:ef:dc:b5:63:15:3b:72:b1:aa:2b:
42:56:32:45:cf:02:b1:2b:4d:12:c6:71:c7:df:52:
42:14:21:8b:d0:9f:eb:0e:d0:6b:e2:f8:89:29:d7:
99:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:52:54:0D:BB:05:B1:49:9C:85:B5:D0:97:D2:42:7D:6A:AA:AA:C7
X509v3 Authority Key Identifier:
keyid:F4:2A:0D:CA:25:F3:07:67:A6:CC:A6:93:24:EE:23:56:AC:77:5D:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/F42A0DCA25F30767A6CCA69324EE2356AC775DE7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F42A0DCA25F30767A6CCA69324EE2356AC775DE7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/3133382e3131382e3232302e302f32342d3234203d3e20323634323733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.220.0/24
Signature Algorithm: sha256WithRSAEncryption
81:2c:4c:43:f9:98:9e:31:f6:bb:c7:76:28:ed:b8:b7:b1:92:
3c:b9:27:a6:97:28:4f:d8:02:52:7a:09:0a:a4:48:30:54:d0:
1d:b9:8e:e8:ad:58:34:5e:54:ca:de:4e:1f:38:3c:c9:0b:05:
76:6e:d5:5c:b1:1f:a5:d1:34:db:a3:39:67:98:eb:ea:01:0c:
f7:e8:d8:44:7d:d6:e6:7f:5f:1b:83:5a:64:63:3f:1a:75:2e:
33:aa:81:4c:05:d2:a8:e8:9f:9e:54:26:7f:aa:60:77:f4:76:
e8:17:f7:bf:25:4e:e4:55:a6:5e:0c:8a:89:b1:08:f2:ed:b9:
b9:fd:52:12:90:0d:5e:1d:80:7c:80:9f:a7:67:a9:09:ad:46:
2b:ab:a6:e4:ca:ee:1f:85:3e:fc:ed:50:7f:14:a3:12:3e:53:
76:47:82:fb:96:46:f1:55:8a:a1:14:d5:8d:9a:a9:32:5a:43:
e5:72:57:59:b3:61:f2:d0:de:9e:69:c8:37:cc:bb:a1:5c:b8:
85:6f:e0:b0:52:5f:8a:37:63:b3:1a:1a:31:0f:8c:ca:7d:07:
42:ff:b2:e9:58:b1:dd:65:6c:b4:aa:2f:f5:9c:74:89:08:f0:
cb:17:6e:ee:77:06:2e:dc:08:a2:da:f7:69:ca:45:a3:6c:20:
40:72:b5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:48:07 2025 by rpki-client