![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3133382e39342e382e302f32322d3234203d3e203238333630.roa
File: 3133382e39342e382e302f32322d3234203d3e203238333630.roa (raw, json)
Hash identifier: FupiEYA/mIKzb7kM/qCgKj2b/8ZvFsVcMLahp2YHYJQ=
Subject key identifier: F0:0C:9F:DF:18:D3:7B:FE:66:53:D3:7A:63:39:13:4E:DA:93:3F:0F
Certificate issuer: /CN=06A6703BF770768B2EF441F46345E46D1CF107A6
Certificate serial: 0D57E8169996393F55F08630F303A86C627412C7
Authority key identifier: 06:A6:70:3B:F7:70:76:8B:2E:F4:41:F4:63:45:E4:6D:1C:F1:07:A6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A6703BF770768B2EF441F46345E46D1CF107A6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3133382e39342e382e302f32322d3234203d3e203238333630.roa
Signing time: Mon 12 Aug 2024 20:02:36 +0000
ROA not before: Mon 12 Aug 2024 19:57:36 +0000
ROA not after: Mon 11 Aug 2025 20:02:36 +0000
asID: 28360
IP address blocks: 138.94.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:57:e8:16:99:96:39:3f:55:f0:86:30:f3:03:a8:6c:62:74:12:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06A6703BF770768B2EF441F46345E46D1CF107A6
Validity
Not Before: Aug 12 19:57:36 2024 GMT
Not After : Aug 11 20:02:36 2025 GMT
Subject: CN=F00C9FDF18D37BFE6653D37A6339134EDA933F0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:41:72:7a:a9:92:0e:b3:f5:00:88:25:9b:cc:
bc:b8:05:11:84:7d:58:5c:c5:22:52:94:d1:5f:87:
53:4e:c4:98:9b:04:ff:31:1b:10:8b:cb:f7:66:8f:
44:4a:e2:8f:19:71:49:e4:19:ab:e9:4f:73:8f:e7:
cd:65:92:9c:0b:59:a5:1e:83:0f:04:f5:e8:fd:2b:
ad:57:33:0c:ed:9b:15:dd:68:b6:68:e4:58:1d:49:
cf:5e:3f:a8:1f:65:a3:c5:69:96:47:64:c7:f2:d8:
95:62:8f:02:9f:82:f7:c4:06:a0:50:19:4f:9e:f9:
01:36:32:f4:ad:12:05:26:e2:b5:a3:8a:89:b0:b7:
3a:dc:91:ab:b7:b7:e2:c5:37:cc:f6:4f:b0:fa:be:
1d:8f:09:46:d2:ec:41:79:68:d6:65:0f:85:28:31:
c9:49:30:08:17:a2:b9:27:07:b9:52:3f:4c:ae:53:
4f:d7:86:99:8d:22:96:32:a7:cb:23:97:d4:cc:ea:
d6:e6:f9:0b:c8:b4:44:12:08:f2:d4:38:c0:36:c6:
87:ff:a2:a1:32:09:34:3b:9a:e8:a0:12:09:3e:66:
b1:3a:dd:df:8a:71:55:10:13:ca:d3:ce:fa:91:bf:
27:bf:f9:f2:2e:52:80:76:f3:e7:de:fc:34:5f:09:
79:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0C:9F:DF:18:D3:7B:FE:66:53:D3:7A:63:39:13:4E:DA:93:3F:0F
X509v3 Authority Key Identifier:
keyid:06:A6:70:3B:F7:70:76:8B:2E:F4:41:F4:63:45:E4:6D:1C:F1:07:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/06A6703BF770768B2EF441F46345E46D1CF107A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A6703BF770768B2EF441F46345E46D1CF107A6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3133382e39342e382e302f32322d3234203d3e203238333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.94.8.0/22
Signature Algorithm: sha256WithRSAEncryption
34:5f:02:63:1b:20:7e:16:3f:5a:b6:16:63:42:2b:aa:a5:49:
ef:cc:3d:30:d1:7b:8a:25:3a:0c:c0:2b:40:dd:ea:ab:7b:c7:
fb:e5:56:64:b1:e6:8a:d3:41:32:ac:36:48:6c:e3:8a:8c:a2:
b4:0c:f1:ac:b0:2a:dd:62:b5:92:2d:2b:17:eb:9a:a5:61:01:
b8:7f:f0:24:05:4d:b5:76:f2:70:56:98:e6:a4:21:69:fc:09:
3b:06:6b:e4:a4:4f:53:3c:f5:64:03:a3:3c:09:5a:d3:d4:92:
10:f2:df:26:0d:99:fb:09:45:3b:d8:2d:3d:b4:c6:c6:d9:16:
1a:95:7b:35:09:bb:f6:1b:4a:8e:99:1f:c4:10:e9:cc:e7:59:
01:9b:ff:ff:05:80:33:04:c9:8a:ca:da:4f:79:3e:61:16:7d:
e2:7b:4f:28:2a:14:a4:e7:a7:7a:84:11:9a:d4:3f:25:e8:11:
de:ba:e5:d7:93:d8:70:84:59:f1:92:77:7d:af:52:bf:b2:f9:
19:a6:0b:1c:07:18:49:1d:a6:9e:7d:5c:28:52:6f:e4:08:3c:
58:4f:97:5d:29:30:05:7f:4c:13:c8:91:00:64:d2:85:e2:a0:
5b:8f:3b:d9:63:91:26:79:90:cc:29:91:f3:34:82:c1:02:bb:
2e:dc:39:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:33:47 2025 by rpki-client