![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38352e302f32342d3234203d3e203532363533.roa
File: 3137372e3232312e38352e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier: OAYvTzGMe+RKe6BtZr4lAURHFCk0TC6rAH9oRy3bOKI=
Subject key identifier: B3:FC:22:24:BD:D9:62:DE:F6:90:38:22:3C:24:6F:27:60:CD:15:8F
Certificate issuer: /CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
Certificate serial: 133118DCF1812DF46D2A3CA442B3E675C3EB45A8
Authority key identifier: 49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer
Subject info access: rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38352e302f32342d3234203d3e203532363533.roa
Signing time: Tue 16 May 2023 14:24:58 +0000
ROA not before: Tue 16 May 2023 14:19:58 +0000
ROA not after: Tue 14 May 2024 14:24:58 +0000
asID: 52653
IP address blocks: 177.221.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:31:18:dc:f1:81:2d:f4:6d:2a:3c:a4:42:b3:e6:75:c3:eb:45:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
Validity
Not Before: May 16 14:19:58 2023 GMT
Not After : May 14 14:24:58 2024 GMT
Subject: CN=B3FC2224BDD962DEF69038223C246F2760CD158F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:cd:c2:4b:26:4c:53:9b:6e:69:c8:87:ec:42:
f8:5d:d3:01:15:2d:d5:76:1b:29:7d:f7:5b:99:ad:
0e:f4:59:ea:27:c5:a7:44:92:60:78:c7:ae:40:0c:
29:3e:38:03:3c:b6:ca:d9:0a:b6:b3:f0:d4:cc:23:
71:1f:9b:1d:a3:83:ed:24:e1:08:85:be:57:59:e4:
36:3a:e3:bf:65:1b:d3:c4:13:88:08:2e:e0:62:a1:
60:55:96:09:78:c4:b9:59:a3:d2:ad:4c:38:c9:97:
9b:ba:2f:44:7e:0f:7c:02:a7:72:2e:e0:98:f4:63:
f4:2a:50:78:a2:f1:0f:8c:cd:87:8c:1b:c4:fc:c6:
3d:99:0b:07:0a:53:df:14:75:fb:69:cf:cb:74:7c:
5d:ba:7e:53:f9:55:8f:b0:ca:40:12:89:aa:2f:41:
ed:d4:78:a5:4b:48:96:eb:c3:a2:69:07:59:5e:98:
56:aa:ab:04:0d:a3:ed:41:6b:dc:61:92:97:b1:59:
c4:34:3d:a6:81:2a:df:20:68:87:9b:1f:39:05:7b:
d2:f4:3d:49:5f:29:7e:7d:c9:f3:a4:53:d6:52:05:
7f:36:3e:d9:ac:41:d8:6e:1a:8e:0f:db:9c:52:e5:
fc:27:19:6b:eb:54:7f:9c:89:3e:75:20:bb:1c:13:
37:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FC:22:24:BD:D9:62:DE:F6:90:38:22:3C:24:6F:27:60:CD:15:8F
X509v3 Authority Key Identifier:
keyid:49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38352e302f32342d3234203d3e203532363533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.221.85.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:8d:4d:c8:1d:66:7a:df:ed:b0:6b:7c:22:d2:24:33:e8:0f:
0f:9b:58:13:87:7d:26:63:fb:09:5e:61:dd:70:06:75:ed:84:
b8:a6:a9:1b:a2:38:46:d0:f7:8c:c8:0e:3b:ae:0e:b7:4a:2c:
6c:6b:63:5f:bb:e7:67:d5:ec:1a:f3:09:f1:c5:69:5f:e8:e7:
c7:74:66:15:2c:d3:5f:19:00:83:53:23:55:69:60:d4:a1:32:
e8:60:0c:d0:49:b7:d7:e2:25:a6:35:1f:79:95:e1:d0:db:45:
ee:ec:43:77:c6:d4:e3:c3:c6:7a:ff:55:f0:25:c6:93:c0:78:
ae:a9:b6:7c:d1:a9:89:1a:18:a6:41:f4:a4:04:5f:ca:de:90:
a9:27:3e:a8:2d:36:dc:b5:5e:9e:41:2d:64:9f:57:26:36:0d:
70:fd:b5:a9:1e:99:c3:dd:80:07:2a:06:66:44:a7:ee:fb:de:
e4:b3:c7:d6:0f:e2:cf:a8:e2:63:e1:ed:99:66:35:e1:9d:ff:
84:52:eb:a0:50:92:d4:c2:03:36:11:d7:d6:22:44:5a:3f:61:
b4:10:f4:a0:f6:41:f8:83:1a:b9:81:e7:be:89:5f:36:31:d4:
69:f0:98:7d:21:2b:9c:d1:43:64:53:ec:90:58:27:b3:39:d7:
8d:b8:b6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:01 2025 by rpki-client