![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/34352e3232342e3131312e302f32342d3234203d3e20323636393131.roa
File: 34352e3232342e3131312e302f32342d3234203d3e20323636393131.roa (raw, json)
Hash identifier: cIwNG8TkI2NTh/902gAiMdBIeEhW+niK+IAgH86pugY=
Subject key identifier: 25:0F:91:D8:0B:39:E0:09:C3:FB:4E:69:FD:9E:1C:A8:98:4F:9F:38
Certificate issuer: /CN=2970A36B0D430502A569554FE4F85E73508EA7CF
Certificate serial: 10F5477461808D51CC512E3CC80AB376C6DE1662
Authority key identifier: 29:70:A3:6B:0D:43:05:02:A5:69:55:4F:E4:F8:5E:73:50:8E:A7:CF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2970A36B0D430502A569554FE4F85E73508EA7CF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/34352e3232342e3131312e302f32342d3234203d3e20323636393131.roa
Signing time: Wed 16 Aug 2023 13:48:10 +0000
ROA not before: Wed 16 Aug 2023 13:43:10 +0000
ROA not after: Wed 14 Aug 2024 13:48:10 +0000
asID: 266911
IP address blocks: 45.224.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:f5:47:74:61:80:8d:51:cc:51:2e:3c:c8:0a:b3:76:c6:de:16:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2970A36B0D430502A569554FE4F85E73508EA7CF
Validity
Not Before: Aug 16 13:43:10 2023 GMT
Not After : Aug 14 13:48:10 2024 GMT
Subject: CN=250F91D80B39E009C3FB4E69FD9E1CA8984F9F38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e1:ce:e6:42:10:79:b6:08:16:12:06:79:5b:
ba:c4:ff:51:13:4c:e3:9f:b4:5f:c5:55:14:12:55:
a0:d5:88:60:ca:67:9e:f5:f6:f9:c3:b3:82:dc:54:
42:25:02:ee:14:dd:34:b7:e1:63:47:63:20:5d:88:
cc:7d:63:2b:a2:36:2a:41:5f:97:c1:5e:9e:5f:e4:
21:c5:62:16:4b:34:68:f5:d3:fe:f9:64:2d:96:ff:
66:e0:3c:80:dc:a7:a1:0f:ad:9e:5e:43:a7:7d:af:
32:72:c7:fc:83:fc:36:b7:b0:ff:8e:19:30:57:a5:
90:a5:70:d6:09:fa:b9:7e:12:24:0f:5c:fa:d7:91:
30:a4:5e:46:19:6c:83:05:61:38:55:c2:51:8e:d3:
33:51:2f:f0:ca:22:4b:5f:7c:3a:fa:47:4d:fc:c0:
88:80:99:7e:30:70:0e:0f:d2:a7:e3:4e:7f:12:11:
db:bc:03:29:26:91:3b:f3:6b:7e:1e:dc:f8:2b:d4:
6b:1b:9d:98:3b:59:a2:df:7b:ed:0e:5f:ab:b2:91:
68:5e:d6:ac:42:7f:c8:50:d6:60:bc:1f:bd:34:a2:
33:49:5a:a0:d8:40:45:96:c2:a5:0b:cd:47:ef:39:
1d:85:e7:1e:bd:53:42:ae:13:18:c2:75:a1:fd:6e:
a7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0F:91:D8:0B:39:E0:09:C3:FB:4E:69:FD:9E:1C:A8:98:4F:9F:38
X509v3 Authority Key Identifier:
keyid:29:70:A3:6B:0D:43:05:02:A5:69:55:4F:E4:F8:5E:73:50:8E:A7:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/2970A36B0D430502A569554FE4F85E73508EA7CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2970A36B0D430502A569554FE4F85E73508EA7CF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/34352e3232342e3131312e302f32342d3234203d3e20323636393131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.111.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:85:5a:02:4d:b5:48:17:43:00:eb:43:1d:d9:9f:21:71:e9:
d0:1d:c0:62:b1:87:bf:28:bd:9d:fc:c3:ae:5d:b4:d9:35:63:
56:aa:fb:77:8c:66:8b:3f:bf:e0:bb:64:42:d0:6b:ae:9e:06:
cb:23:25:f2:c4:da:e9:8a:39:97:76:6e:35:1f:78:b4:2a:c7:
af:c3:a6:14:5f:26:fa:73:6c:99:79:bf:7f:41:b6:51:18:10:
cc:a4:b8:05:7f:e0:6a:0c:51:7c:71:7a:29:f2:65:3f:4a:c2:
94:de:b4:6f:57:72:45:27:8c:fe:3f:26:08:69:87:97:64:9c:
05:be:0d:a3:69:5d:dc:ee:35:67:73:71:fa:88:29:b2:af:a2:
54:3d:70:3a:1d:a1:64:eb:c7:56:dc:76:5b:a6:95:ce:42:db:
17:d7:c5:b5:2c:3c:45:49:57:03:45:a3:21:3a:28:73:36:02:
2e:b5:18:4d:42:03:0a:3a:9b:dd:bc:85:20:19:6a:85:19:a7:
e3:ec:2c:17:05:93:41:f1:01:ed:be:6b:5c:88:a4:07:53:fd:
5e:a0:bc:f1:78:32:45:cf:13:8f:ae:dd:ae:6c:6b:8f:9d:8b:
f3:f7:88:15:53:c4:7c:32:f5:c1:a4:4a:c7:de:77:0a:d3:e1:
6e:18:27:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:27:14 2025 by rpki-client