![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/0/3137392e39362e3230302e302f32312d3234203d3e203532353730.roa
File: 3137392e39362e3230302e302f32312d3234203d3e203532353730.roa (raw, json)
Hash identifier: CEiM5YiFgmh7ut0cB3HzdRoczcHsLNWlZkldBvg3UzM=
Subject key identifier: 38:CB:8C:95:D0:61:DD:F0:DF:59:7C:83:D2:3A:01:9A:03:B8:C6:85
Certificate issuer: /CN=2D5C6CACD311321B2E91159DD9A5CD72FCBDD966
Certificate serial: 7806E8CDB711E177AA206DEA7F9A9EE49F76948A
Authority key identifier: 2D:5C:6C:AC:D3:11:32:1B:2E:91:15:9D:D9:A5:CD:72:FC:BD:D9:66
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D5C6CACD311321B2E91159DD9A5CD72FCBDD966.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/0/3137392e39362e3230302e302f32312d3234203d3e203532353730.roa
Signing time: Fri 08 Mar 2024 10:04:09 +0000
ROA not before: Fri 08 Mar 2024 09:59:09 +0000
ROA not after: Fri 07 Mar 2025 10:04:09 +0000
asID: 52570
IP address blocks: 179.96.200.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:06:e8:cd:b7:11:e1:77:aa:20:6d:ea:7f:9a:9e:e4:9f:76:94:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D5C6CACD311321B2E91159DD9A5CD72FCBDD966
Validity
Not Before: Mar 8 09:59:09 2024 GMT
Not After : Mar 7 10:04:09 2025 GMT
Subject: CN=38CB8C95D061DDF0DF597C83D23A019A03B8C685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:92:d1:44:dd:01:be:3b:1a:03:4b:ae:3f:53:
cf:c8:a6:31:be:24:57:88:db:37:35:17:d9:a3:3a:
0d:68:f7:79:6a:bf:53:32:b9:92:75:6d:5a:d2:c2:
46:47:26:53:d6:1d:7f:49:8b:65:c5:cb:bc:93:0f:
3b:72:16:93:7d:9b:e5:d2:bd:c0:81:ee:b2:7f:e9:
9b:8a:91:e0:54:5b:16:7f:68:50:df:73:8f:d5:82:
78:e5:98:a0:0e:bb:0b:d0:c4:15:d8:d8:4b:f2:88:
3c:26:84:94:f6:55:f2:cd:68:50:f4:cf:47:83:36:
6b:4f:3f:5c:c4:d0:b1:9d:7c:d1:19:82:a4:0c:e3:
ed:e9:a5:de:9b:40:06:9f:74:37:a8:7b:a7:89:a0:
fb:58:55:0d:e3:30:f9:0c:17:f4:f1:9e:be:e8:fb:
28:a6:d0:ea:3a:78:3d:30:25:64:04:07:7e:02:6a:
86:74:5e:33:93:5b:62:8f:43:65:84:2c:5a:14:a3:
07:61:ed:fe:04:99:a0:62:90:43:7c:98:3d:33:32:
b6:84:75:b0:f2:80:87:91:ab:8c:11:2b:65:b9:0a:
e3:bd:91:a9:51:d3:a6:de:29:69:a7:5a:17:0e:c0:
e0:de:fe:d3:d3:26:69:6d:71:5c:3a:b9:a4:5e:88:
45:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CB:8C:95:D0:61:DD:F0:DF:59:7C:83:D2:3A:01:9A:03:B8:C6:85
X509v3 Authority Key Identifier:
keyid:2D:5C:6C:AC:D3:11:32:1B:2E:91:15:9D:D9:A5:CD:72:FC:BD:D9:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/0/2D5C6CACD311321B2E91159DD9A5CD72FCBDD966.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D5C6CACD311321B2E91159DD9A5CD72FCBDD966.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/0/3137392e39362e3230302e302f32312d3234203d3e203532353730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.96.200.0/21
Signature Algorithm: sha256WithRSAEncryption
50:df:63:a9:a2:50:04:ee:27:2c:49:48:a4:57:1f:da:26:3c:
00:18:8b:ad:71:58:f1:72:ef:bf:15:69:09:ea:58:8a:6f:2d:
bc:71:60:bf:2f:d5:5d:1d:af:f7:ea:52:9e:aa:66:1c:18:89:
e1:49:b3:08:9d:90:a0:59:a1:57:ad:22:79:5e:a3:46:6c:ef:
6b:2d:81:51:72:16:fb:93:8f:07:1b:b1:cf:fa:a8:62:9f:bb:
5f:99:cc:2b:1e:02:87:5b:f5:26:e3:77:ef:a6:7f:38:1c:ff:
8e:f2:25:27:bb:9a:27:79:97:e8:50:11:38:39:52:cf:fc:e7:
94:6d:2d:bc:bd:e3:72:14:a9:06:a9:5d:e9:89:2c:d2:b3:a9:
e7:81:b0:0d:24:98:ef:c4:48:68:97:0a:3c:ae:8b:52:5c:37:
d0:06:80:36:d1:5b:cd:a2:6f:9d:1b:cc:44:eb:7f:48:19:5f:
e9:c3:c9:a0:18:e8:c9:7e:1f:bb:88:c8:fa:b0:bf:9c:23:47:
6a:66:6a:3f:31:19:a2:3e:57:1c:62:ee:f3:72:8f:e2:e4:9d:
a7:97:a2:d7:a4:0c:3d:34:b8:88:d8:13:77:94:dc:63:a1:58:
18:4f:7a:39:f9:3d:f1:4e:5b:e2:1b:03:07:54:39:e2:50:b1:
6c:7f:f7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:44:27 2025 by rpki-client