![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/0/3132382e3230312e3133392e302f32342d3234203d3e20323636363330.roa
File: 3132382e3230312e3133392e302f32342d3234203d3e20323636363330.roa (raw, json)
Hash identifier: mYfHPkMjgxDFAw6mbSYaUEm7DXZrv7XJGrPKhHlSvwo=
Subject key identifier: 7A:4B:8E:9A:01:F8:53:43:40:68:7C:1E:B7:56:78:34:62:37:D3:B6
Certificate issuer: /CN=8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F
Certificate serial: 78C6CB5EC258A8D449B08093E85DB35D913D37D8
Authority key identifier: 8F:D9:8C:D8:D5:7D:4B:25:4E:F5:B2:B6:D7:C4:6F:6B:00:26:36:9F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/0/3132382e3230312e3133392e302f32342d3234203d3e20323636363330.roa
Signing time: Thu 27 Jul 2023 23:03:53 +0000
ROA not before: Thu 27 Jul 2023 22:58:53 +0000
ROA not after: Thu 25 Jul 2024 23:03:53 +0000
asID: 266630
IP address blocks: 128.201.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:c6:cb:5e:c2:58:a8:d4:49:b0:80:93:e8:5d:b3:5d:91:3d:37:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F
Validity
Not Before: Jul 27 22:58:53 2023 GMT
Not After : Jul 25 23:03:53 2024 GMT
Subject: CN=7A4B8E9A01F8534340687C1EB75678346237D3B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:55:9d:be:e9:ca:e1:57:05:23:62:b1:23:37:
3b:03:97:6a:94:04:8d:7c:d1:6c:2c:36:4d:81:1c:
1b:22:db:ae:8f:f7:b0:70:2b:6b:4e:3c:0b:85:5c:
d5:56:62:1f:34:0b:0f:e2:e6:53:37:a5:e5:d2:66:
93:c1:ab:4c:b6:fe:e7:b0:46:77:f9:ba:35:bd:07:
6e:72:1e:5a:e5:d5:ab:65:6c:e0:f2:04:c5:ac:23:
f4:6c:73:54:e3:63:2f:ae:31:be:73:8c:05:d7:14:
d3:3d:73:2e:96:d8:df:ea:c1:bd:20:94:66:99:31:
db:9e:5b:bc:38:e0:4b:af:88:58:08:31:a4:ef:db:
2d:42:66:1b:05:a0:8c:e4:2b:e2:9a:90:b1:45:a8:
78:80:73:bf:75:76:06:7f:32:b8:cb:a0:f0:06:db:
bb:8f:d4:28:fb:05:33:77:2e:fa:5d:a1:6d:11:50:
1d:14:a3:d5:e6:62:f5:a3:78:9c:ac:28:ea:f1:31:
98:2b:35:40:29:18:6a:72:d6:a8:cb:b8:63:1d:ca:
e9:b9:e5:56:46:9c:f8:87:99:aa:d6:5c:cb:3a:77:
32:3b:b4:40:37:7f:c0:87:1a:a8:87:ca:3e:f8:dc:
80:35:ea:27:82:82:f8:43:3e:a1:5a:56:78:7f:76:
88:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4B:8E:9A:01:F8:53:43:40:68:7C:1E:B7:56:78:34:62:37:D3:B6
X509v3 Authority Key Identifier:
keyid:8F:D9:8C:D8:D5:7D:4B:25:4E:F5:B2:B6:D7:C4:6F:6B:00:26:36:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/0/8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/0/3132382e3230312e3133392e302f32342d3234203d3e20323636363330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.139.0/24
Signature Algorithm: sha256WithRSAEncryption
04:0a:8d:2f:78:6d:ec:7b:c2:a5:55:77:01:09:82:3c:65:82:
13:b5:8a:d9:81:3b:01:37:b3:e9:e2:99:fa:15:fa:2f:c7:2b:
b7:c9:0f:2b:38:8b:9c:60:1c:00:7e:4c:d2:d6:b4:8b:9b:2f:
b1:19:70:a3:2d:1e:20:4c:f3:d0:49:fe:6b:09:9d:8d:9a:5a:
d2:67:7e:92:de:2f:b7:b2:5c:73:6b:5e:0f:8b:01:62:52:58:
6d:65:76:6e:1f:dd:50:d2:f9:dc:fd:7f:bc:a3:64:85:4d:31:
3f:0c:f9:65:b9:d3:9a:96:1a:e4:5d:09:81:9e:e4:5d:ed:49:
9c:51:77:1f:a5:eb:09:35:cf:d7:1d:82:8a:78:d0:b4:52:9c:
70:99:90:22:d3:d9:45:51:ac:7a:d0:60:a4:5b:82:6e:6c:45:
ec:3e:45:4d:cd:ff:01:02:ed:8c:14:4f:7a:9d:f5:70:2d:28:
d6:72:56:27:64:4d:e8:3e:ee:5d:33:1b:d2:fc:55:92:4c:b6:
3b:61:99:4e:4e:95:ab:5b:e9:a8:87:c9:79:83:7c:f3:5d:df:
dc:1e:1b:90:98:3f:22:0c:c6:33:db:0e:98:d9:9d:5e:fd:30:
74:bd:7c:97:84:9e:2e:14:1a:65:1c:cb:ee:03:4c:f3:86:1f:
ca:9c:2f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:44:07 2025 by rpki-client