![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38382e302f32342d3234203d3e203532363533.roa
File: 3137372e3232312e38382e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier: uXWYtQGCwSxoTYAoLj5R98rxX+5bZvHXISAxLVKPwD8=
Subject key identifier: E7:CB:A4:0C:02:35:98:58:93:38:B7:B9:29:63:C7:B1:57:79:F2:85
Certificate issuer: /CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
Certificate serial: 41D8D85233EE391BCD50E5A03F7123A104DD20F2
Authority key identifier: 49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer
Subject info access: rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38382e302f32342d3234203d3e203532363533.roa
Signing time: Tue 16 May 2023 14:25:12 +0000
ROA not before: Tue 16 May 2023 14:20:12 +0000
ROA not after: Tue 14 May 2024 14:25:12 +0000
asID: 52653
IP address blocks: 177.221.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:d8:d8:52:33:ee:39:1b:cd:50:e5:a0:3f:71:23:a1:04:dd:20:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
Validity
Not Before: May 16 14:20:12 2023 GMT
Not After : May 14 14:25:12 2024 GMT
Subject: CN=E7CBA40C023598589338B7B92963C7B15779F285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b9:45:ef:98:57:ea:1b:5d:15:38:61:af:91:
2f:09:a3:96:3a:0a:c1:36:6a:02:d5:a3:4a:e3:b6:
2a:47:28:0c:32:cc:31:00:f4:83:b3:5f:e1:71:f0:
ae:c5:bd:5b:91:1d:c2:7d:12:ac:c4:88:27:99:19:
87:92:19:0c:21:7f:b9:3a:c8:2c:d0:4c:eb:62:2c:
6d:a3:0a:2c:c2:70:86:4c:d4:0a:70:84:7e:8f:40:
68:a6:61:fd:7e:c9:d9:a7:7b:30:d3:d5:bd:d1:6a:
a8:91:cc:f3:82:ea:e2:43:92:03:c9:a2:b0:f4:b2:
85:20:1e:06:e0:75:ff:9f:b4:77:70:16:c7:73:cb:
84:95:1d:bf:4d:82:64:57:0f:e4:be:32:60:55:d3:
bc:b3:0f:8c:97:88:26:9f:57:e0:3b:3a:0b:ed:43:
3c:6e:a4:a8:0e:6e:0e:0b:fb:a6:d2:f7:83:f3:51:
4f:e5:7b:00:85:8f:84:cd:a3:f0:e0:0e:6e:00:b1:
1b:28:9d:a1:00:eb:4a:17:37:4f:2c:1c:21:c2:a2:
46:31:bd:37:2d:0b:b5:28:23:aa:c5:5e:85:fd:ab:
5c:fa:64:91:35:bf:52:2d:96:56:5d:23:04:1f:ca:
ae:0e:d6:69:66:64:be:b0:d8:7c:dd:2b:87:86:f3:
7b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CB:A4:0C:02:35:98:58:93:38:B7:B9:29:63:C7:B1:57:79:F2:85
X509v3 Authority Key Identifier:
keyid:49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38382e302f32342d3234203d3e203532363533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.221.88.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:a3:56:7a:12:23:54:cd:ac:d0:a5:16:62:2e:b9:dc:65:f2:
b5:59:37:45:c8:e0:c5:6e:6c:a0:e7:20:d8:6e:1d:df:f3:24:
21:ba:cd:40:65:92:2a:bc:d4:87:d6:2f:f7:18:9a:ac:1d:ca:
f9:41:6d:d9:cc:32:91:9a:5a:2b:35:c4:21:cf:66:a8:51:49:
4b:5e:d6:08:9c:67:5f:52:39:20:4c:42:1a:54:ca:20:50:f1:
f9:01:41:6f:44:6e:52:d5:cb:45:0e:91:ff:a1:6d:75:e5:96:
de:7e:17:29:79:a8:d2:6c:3d:e1:06:a1:53:05:1c:74:29:dc:
a2:8e:5e:cc:36:10:21:8f:89:7d:07:12:6a:cd:d0:88:80:f2:
97:c1:e9:50:95:5f:a4:85:9b:53:ca:bf:54:3a:c2:ed:30:9c:
c6:42:95:ca:81:04:bb:1a:37:5b:96:9a:cd:bf:20:f7:ab:08:
0f:2f:32:18:e8:a0:9f:a8:5c:1d:eb:96:01:42:3f:cb:7e:02:
2e:1d:28:fa:16:d0:c8:40:f4:b3:c1:3b:07:19:5d:3e:e7:ad:
90:0c:3e:6f:56:26:37:1d:52:48:e6:92:69:f6:3d:f4:a2:89:
f4:e5:f1:a6:6c:0c:b6:5c:f8:21:ac:a2:d1:99:b6:b6:ee:f3:
3d:8d:9c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:31 2025 by rpki-client