![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3233322e3131362e302f32322d3234203d3e20323632393932.roa
File: 3136382e3233322e3131362e302f32322d3234203d3e20323632393932.roa (raw, json)
Hash identifier: WQFVwd2sAj7BR9VRKtwp238TpSboFmPai9vXP82L87w=
Subject key identifier: 7F:11:92:52:1A:6D:88:82:53:72:B9:5A:B2:F1:1A:D6:78:5F:C1:50
Certificate issuer: /CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
Certificate serial: 65E534296D59043B865DAC25D373FF64544A574D
Authority key identifier: AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3233322e3131362e302f32322d3234203d3e20323632393932.roa
Signing time: Wed 31 Jan 2024 14:31:15 +0000
ROA not before: Wed 31 Jan 2024 14:26:15 +0000
ROA not after: Wed 29 Jan 2025 14:31:15 +0000
asID: 262992
IP address blocks: 168.232.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:e5:34:29:6d:59:04:3b:86:5d:ac:25:d3:73:ff:64:54:4a:57:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
Validity
Not Before: Jan 31 14:26:15 2024 GMT
Not After : Jan 29 14:31:15 2025 GMT
Subject: CN=7F1192521A6D88825372B95AB2F11AD6785FC150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:e1:90:05:ef:84:8c:cf:75:e3:dc:1c:72:de:
d0:eb:45:d9:7a:d0:37:bc:ac:12:5b:ca:c5:b9:28:
9c:1c:b2:d8:03:7d:62:34:6b:f9:3b:d9:04:84:42:
3c:fa:61:d4:bd:c8:d7:a1:c9:d7:33:e0:f8:49:be:
47:8b:1d:4e:5a:35:22:1d:18:d3:4c:19:e7:09:f6:
79:22:e4:6c:66:96:15:da:45:7a:92:91:f4:d6:30:
31:f0:90:18:68:4b:a3:88:1c:72:b4:86:6d:48:5b:
a9:88:66:8d:2c:53:21:af:04:05:f3:c0:19:32:41:
91:2e:60:b3:d0:61:25:03:9a:5f:a5:af:16:2d:cb:
7a:a5:40:fd:f5:3e:dd:a4:55:3d:c9:58:f7:c6:ea:
c2:f6:9f:cd:3c:5e:9c:0c:b8:3d:ee:49:43:ff:a5:
be:f3:b1:de:7e:c6:90:aa:c8:cd:3b:62:08:66:9d:
9d:5e:ee:98:94:9c:07:e7:60:44:3a:cb:49:dc:57:
55:d9:b6:39:1e:c8:40:93:47:9d:09:9a:51:b4:76:
05:14:04:39:e9:da:1d:67:39:46:43:60:4a:3c:c0:
31:1c:fb:30:e1:8a:37:a1:eb:4c:25:6c:26:72:61:
87:50:2d:a1:f7:37:0c:2f:05:9b:3e:09:67:eb:38:
e2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:11:92:52:1A:6D:88:82:53:72:B9:5A:B2:F1:1A:D6:78:5F:C1:50
X509v3 Authority Key Identifier:
keyid:AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3233322e3131362e302f32322d3234203d3e20323632393932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.232.116.0/22
Signature Algorithm: sha256WithRSAEncryption
04:aa:ba:b5:f2:53:f3:e5:8f:c1:5b:95:0d:a8:03:4e:37:f5:
37:45:fe:fa:d8:ef:4c:aa:5f:0a:39:51:9f:a4:6b:09:5d:83:
13:44:2c:5d:f0:f3:96:96:0c:b5:58:eb:fc:23:b8:11:1d:c8:
2b:23:d3:fd:4a:13:29:fb:44:52:93:8e:a0:7b:26:e7:f0:6b:
ab:37:7d:20:1d:03:f9:66:26:11:4d:20:29:18:a3:3b:de:3f:
a7:c5:e2:87:e4:ab:be:fd:2a:93:63:f7:4b:79:b7:90:21:be:
ae:6b:11:ca:b7:ae:2a:bc:7b:ca:e7:ee:97:df:48:a7:43:61:
47:69:40:9c:1c:92:74:9a:90:86:46:d1:f3:d9:f8:73:21:22:
c1:e4:f9:9f:d7:2d:77:dc:bf:73:7b:fb:52:f3:8a:21:dc:2b:
e6:7d:eb:35:9c:e6:39:1d:10:54:1d:2b:14:0a:2b:4e:01:a9:
bd:99:cf:1c:4e:fd:5e:b9:71:a6:60:71:8f:26:92:ef:d3:2e:
e7:f9:d2:7b:af:39:73:f8:5c:c0:cc:62:cf:2c:b4:c9:c2:3d:
57:d6:1d:43:65:56:32:72:19:dd:ed:ff:0a:93:da:fe:33:73:
62:85:09:b2:cc:02:a3:7d:e8:92:2c:37:2c:d3:48:65:f3:82:
ab:7a:7f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:49:10 2025 by rpki-client