![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3ryRE7VRKo2XYqkYuhiTvgzBHVL58xgofovLw6b8DdXe/0/3133312e3139362e3138362e302f32342d3234203d3e20323635393330.roa
File: 3133312e3139362e3138362e302f32342d3234203d3e20323635393330.roa (raw, json)
Hash identifier: CDhOz9eKyHFtsWakv37e2KUd4tMVP3oFZ2DKsJrHnB8=
Subject key identifier: A7:D7:9D:32:D4:55:CF:FA:DA:5E:28:CA:F4:6D:4A:48:43:C3:A0:0E
Certificate issuer: /CN=3233E2EDC348AC978221BFAE80C08A1A69277683
Certificate serial: 0E89AF385A87C7B2F3B08DB6E283B4E93948AB6D
Authority key identifier: 32:33:E2:ED:C3:48:AC:97:82:21:BF:AE:80:C0:8A:1A:69:27:76:83
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3233E2EDC348AC978221BFAE80C08A1A69277683.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3ryRE7VRKo2XYqkYuhiTvgzBHVL58xgofovLw6b8DdXe/0/3133312e3139362e3138362e302f32342d3234203d3e20323635393330.roa
Signing time: Mon 06 Mar 2023 19:07:20 +0000
ROA not before: Mon 06 Mar 2023 19:02:20 +0000
ROA not after: Mon 04 Mar 2024 19:07:20 +0000
asID: 265930
IP address blocks: 131.196.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:89:af:38:5a:87:c7:b2:f3:b0:8d:b6:e2:83:b4:e9:39:48:ab:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3233E2EDC348AC978221BFAE80C08A1A69277683
Validity
Not Before: Mar 6 19:02:20 2023 GMT
Not After : Mar 4 19:07:20 2024 GMT
Subject: CN=A7D79D32D455CFFADA5E28CAF46D4A4843C3A00E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:95:f7:d7:ac:05:18:d9:f3:c7:bc:d8:b3:cf:
ac:74:92:cf:16:fa:0f:d8:f5:eb:c9:b6:e4:5e:8b:
08:5f:2f:15:03:50:ba:4a:c2:7e:0b:f5:4a:29:d4:
0e:54:56:79:76:da:33:48:5e:52:06:50:e2:27:5a:
4f:ba:59:74:45:ef:2c:17:89:2f:4d:0e:44:54:c8:
43:f0:cb:63:6c:20:54:ce:4a:b8:d8:95:05:21:73:
f8:5d:73:93:2f:de:d4:fd:e8:ab:4e:0d:be:d4:a4:
c9:6f:c5:53:43:ec:8e:65:ec:e1:9d:48:ef:c6:d4:
4f:1a:9e:7c:8d:7a:fa:c1:e8:c8:93:74:cf:59:c9:
48:a6:2d:de:b3:08:28:57:ed:af:0e:9f:ff:1d:c6:
a2:83:eb:26:8c:c2:58:a8:ad:80:82:c8:ed:cb:1a:
4c:37:b2:fd:86:8a:79:b5:8a:56:ed:36:39:c1:9f:
da:74:50:09:31:de:63:43:f9:e7:db:23:0d:5e:16:
bb:f6:90:18:05:b5:0a:96:af:12:00:5a:46:3a:45:
2a:ef:b5:4e:33:01:14:7a:94:04:53:ea:1a:5d:d4:
c7:4e:c2:3b:97:cd:76:65:5d:78:c4:d7:85:9e:52:
66:4b:d1:65:2a:54:c4:5d:84:5a:0c:15:8e:0d:33:
bf:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D7:9D:32:D4:55:CF:FA:DA:5E:28:CA:F4:6D:4A:48:43:C3:A0:0E
X509v3 Authority Key Identifier:
keyid:32:33:E2:ED:C3:48:AC:97:82:21:BF:AE:80:C0:8A:1A:69:27:76:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3ryRE7VRKo2XYqkYuhiTvgzBHVL58xgofovLw6b8DdXe/0/3233E2EDC348AC978221BFAE80C08A1A69277683.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3233E2EDC348AC978221BFAE80C08A1A69277683.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ryRE7VRKo2XYqkYuhiTvgzBHVL58xgofovLw6b8DdXe/0/3133312e3139362e3138362e302f32342d3234203d3e20323635393330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.186.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:95:a3:8f:f2:56:38:4d:18:dc:2b:25:62:37:cf:2a:b3:ec:
0d:67:45:d3:18:86:65:80:f0:5a:5c:ad:78:c2:c4:6d:dd:26:
12:4e:60:e2:2f:f2:20:63:77:70:a6:16:97:98:49:e0:3f:16:
fe:86:c1:8c:ce:aa:9b:48:7c:95:eb:52:1d:47:b2:a8:53:ed:
73:fd:6b:28:29:ef:43:a4:58:c8:5f:0d:a3:93:d1:4f:5a:b1:
c6:8b:d7:99:d8:4a:8b:af:7e:08:bf:70:9a:b0:19:61:21:bc:
b0:30:52:cf:be:ec:0b:55:ab:41:79:9c:78:58:e2:e3:7b:d5:
fb:e1:50:cf:17:36:74:82:39:47:af:e1:be:ce:60:27:f4:43:
d0:1b:d0:4b:49:dc:ed:09:46:1c:ad:75:19:41:05:fa:63:52:
d2:40:17:4f:56:f1:a1:98:1f:1e:ea:17:bc:fb:b0:f1:b2:8a:
97:b9:86:2f:23:8c:83:25:91:20:0c:dc:5c:97:29:94:43:ce:
7f:d8:e2:b1:3d:6e:2a:6b:5d:17:ff:9b:1b:cd:92:7d:f7:93:
89:96:41:71:d0:fd:d5:fd:fe:8f:f1:7d:45:9d:64:6e:77:ff:
63:9f:b0:f7:65:53:2c:a7:29:2b:b9:3b:5c:2a:e4:f6:43:d1:
26:2e:30:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:27:28 2025 by rpki-client