![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/34352e3136312e35302e302f32342d3234203d3e20323638343437.roa
File: 34352e3136312e35302e302f32342d3234203d3e20323638343437.roa (raw, json)
Hash identifier: IlqWLYGghODrqO6TkJN2yhiBrt18XiwSj1NCRz8cS0Q=
Subject key identifier: B8:1D:A8:48:F1:24:19:F7:F7:1D:BC:92:2A:21:74:A9:7C:49:0C:41
Certificate issuer: /CN=3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B
Certificate serial: 702D9A303F237A32C5E7D228BB5AE88D9542171A
Authority key identifier: 3F:F0:A5:DF:EC:FD:F8:D0:6F:63:C2:BA:6B:24:8B:FC:D4:B9:3B:4B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/34352e3136312e35302e302f32342d3234203d3e20323638343437.roa
Signing time: Tue 08 Oct 2024 22:43:23 +0000
ROA not before: Tue 08 Oct 2024 22:38:23 +0000
ROA not after: Tue 07 Oct 2025 22:43:23 +0000
asID: 268447
IP address blocks: 45.161.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:2d:9a:30:3f:23:7a:32:c5:e7:d2:28:bb:5a:e8:8d:95:42:17:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B
Validity
Not Before: Oct 8 22:38:23 2024 GMT
Not After : Oct 7 22:43:23 2025 GMT
Subject: CN=B81DA848F12419F7F71DBC922A2174A97C490C41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:80:f6:c9:63:82:66:f9:7f:52:08:df:2e:9f:
a6:9f:46:a4:e1:cf:83:ca:da:73:b7:9d:81:65:75:
86:9e:8d:b5:31:25:32:9d:d1:87:09:6f:88:2e:df:
07:0e:94:57:9b:a7:f1:fc:7c:1a:98:be:b8:17:94:
f9:aa:7c:47:e5:8d:a5:98:64:ae:71:64:66:0e:80:
59:13:aa:56:dd:f0:25:84:9d:e6:68:3c:2c:b1:77:
84:61:98:e7:0b:64:c7:97:65:4e:b9:ae:82:8e:7e:
a8:69:e5:41:67:b7:e5:a8:05:99:b3:de:16:4e:52:
a1:e3:3e:93:de:72:2d:78:16:74:f7:59:48:fb:ec:
25:43:6b:fd:ba:6b:b2:0a:19:09:25:f5:da:f0:0f:
29:8c:61:b1:e3:86:69:ee:23:ef:5a:08:00:45:a2:
45:b0:79:09:04:e2:18:92:c6:5b:87:97:f4:ff:80:
9f:bb:fb:93:7d:e0:d5:a7:a8:1d:b9:7d:7b:d5:1d:
ac:b3:41:9d:ad:83:68:a6:e5:82:c6:14:a7:77:f4:
72:af:d2:ea:26:30:a6:c8:05:fb:a0:18:8f:9a:e0:
f5:cb:b5:c5:01:02:e3:29:72:fb:03:e6:eb:e4:6a:
17:25:7e:f4:7b:d7:48:f4:eb:d5:9d:ed:a1:c1:d3:
bd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1D:A8:48:F1:24:19:F7:F7:1D:BC:92:2A:21:74:A9:7C:49:0C:41
X509v3 Authority Key Identifier:
keyid:3F:F0:A5:DF:EC:FD:F8:D0:6F:63:C2:BA:6B:24:8B:FC:D4:B9:3B:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/34352e3136312e35302e302f32342d3234203d3e20323638343437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.161.50.0/24
Signature Algorithm: sha256WithRSAEncryption
29:95:fd:ad:42:e6:46:e9:64:92:a8:88:10:fd:12:5f:e8:11:
af:46:29:a8:21:ce:99:ab:09:70:50:d5:6c:c0:ba:7c:36:32:
34:df:58:2c:f5:74:53:bf:36:5b:c2:0c:ad:7a:31:74:3d:64:
eb:10:1a:a5:f9:db:5a:ea:51:a5:17:d2:a7:3a:87:f9:27:f4:
c6:9c:a7:91:52:31:82:95:03:75:b6:8e:37:40:9e:f8:27:aa:
21:8f:20:52:2f:07:5b:99:13:e4:48:fa:2f:22:40:e2:b7:05:
ea:a9:28:b8:06:14:56:bb:74:53:20:66:f5:32:49:1b:a7:ea:
8f:6b:ab:d5:91:b1:44:60:7d:44:45:14:64:41:09:86:13:b6:
64:01:39:9e:4d:d9:9c:21:eb:e7:64:76:9d:14:33:ab:fc:67:
de:ea:17:05:37:21:31:09:11:82:9a:e3:6b:09:b6:22:7a:92:
4c:6d:8e:37:e1:8f:d3:c3:8b:97:0b:04:fb:e0:bf:6c:44:14:
c5:49:6d:9b:77:00:69:31:03:76:cc:2a:eb:2c:96:ea:98:6e:
22:87:b5:d6:c9:b4:34:25:ad:08:7b:ae:50:bc:72:f3:e3:64:
d3:97:51:7a:82:7a:25:fe:85:78:20:5e:37:0d:ce:84:4c:1b:
c9:a4:96:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:28:05 2025 by rpki-client