![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e32302e302f32332d3233203d3e203238333630.roa
File: 3137372e382e32302e302f32332d3233203d3e203238333630.roa (raw, json)
Hash identifier: 5AqqMP+0TM4NVTWjrocM6OVA/pecp0HOCf0ovAmVJXk=
Subject key identifier: AD:BC:93:6A:29:0E:22:98:0E:36:14:97:CE:46:7A:13:E3:88:88:BC
Certificate issuer: /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial: 340F5230F01EC4EA46CC815AA5AD52F249BE3004
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e32302e302f32332d3233203d3e203238333630.roa
Signing time: Sat 06 Apr 2024 02:45:42 +0000
ROA not before: Sat 06 Apr 2024 02:40:42 +0000
ROA not after: Sat 05 Apr 2025 02:45:42 +0000
asID: 28360
IP address blocks: 177.8.20.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:0f:52:30:f0:1e:c4:ea:46:cc:81:5a:a5:ad:52:f2:49:be:30:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Validity
Not Before: Apr 6 02:40:42 2024 GMT
Not After : Apr 5 02:45:42 2025 GMT
Subject: CN=ADBC936A290E22980E361497CE467A13E38888BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c4:df:c1:50:58:a0:6b:b8:4e:b2:ed:ab:96:
96:a7:e6:09:5a:87:1c:69:5f:6f:06:31:b7:67:01:
30:a8:84:4e:4d:97:53:9e:99:06:41:70:e9:c6:57:
82:2f:9d:bc:2d:0f:52:e1:39:34:a0:ea:db:75:53:
4c:67:cf:43:ad:82:6b:38:8a:bc:e5:92:57:89:7f:
6b:c8:a2:c7:5e:ae:04:89:1f:7e:f0:d6:8e:5a:58:
74:30:f1:8f:27:5a:38:a1:14:ea:cc:5b:b7:bb:84:
de:38:84:3c:b8:7a:00:69:47:ca:67:4b:7b:cd:be:
bd:7f:56:92:14:91:d6:17:a2:03:cf:59:9a:3d:1e:
e1:cb:58:de:1c:96:cc:f8:42:58:07:a8:72:c2:a9:
9b:2b:4a:a1:c3:7b:ba:6e:f2:be:ba:8a:d9:f8:6d:
51:7c:79:d6:58:7b:e2:9c:30:01:94:b6:ef:05:bd:
c4:43:2d:f6:64:da:39:49:b3:aa:39:bb:e6:37:57:
47:61:26:f5:b4:8b:12:97:e2:e4:78:a6:96:8a:39:
55:77:bd:bb:39:0f:4b:ea:b0:f1:8d:6a:aa:1f:8a:
81:d2:ae:24:da:c5:29:50:33:f3:bf:c7:37:00:4c:
35:25:1e:df:6c:53:23:c5:6e:b2:b2:75:03:2b:eb:
8b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BC:93:6A:29:0E:22:98:0E:36:14:97:CE:46:7A:13:E3:88:88:BC
X509v3 Authority Key Identifier:
keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e32302e302f32332d3233203d3e203238333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.8.20.0/23
Signature Algorithm: sha256WithRSAEncryption
04:f0:6b:38:5b:d1:da:37:02:ba:d2:f9:65:f2:63:7a:4b:2c:
31:18:2b:43:df:7f:c3:7e:d3:d8:ea:62:e2:6f:ef:2a:0a:32:
ba:ee:37:12:48:4b:d9:36:e7:9c:f7:59:02:91:30:87:a6:a7:
3d:2c:d6:c8:49:68:23:7e:b4:a0:23:7b:26:31:ab:6d:3c:30:
51:19:f2:9b:58:54:8a:b2:ad:3c:b0:a6:b4:a2:70:45:a6:40:
41:06:ed:56:8a:29:86:13:77:3b:80:32:83:98:d7:ef:d4:15:
cc:2c:0e:d6:52:5a:7d:78:63:cd:9a:e2:3f:6a:e5:0f:30:1f:
30:b4:26:57:1b:7e:06:e7:9b:ba:46:ad:1d:89:b7:be:dc:72:
78:bc:d5:6e:21:56:f5:e6:6e:a7:11:d2:f3:b6:55:55:b4:04:
3e:e9:2d:ea:66:4e:fa:ee:b3:aa:c7:52:e6:22:7e:0a:b4:4c:
9c:5c:5a:7d:12:67:aa:89:f7:09:91:32:9c:94:2a:d8:68:df:
d3:f6:48:0e:6d:d3:b9:c9:58:e8:e0:73:ac:6d:fd:fd:ff:18:
41:c1:61:a2:f1:10:3e:4e:07:58:b7:05:fa:ea:33:1e:a7:92:
e5:1b:ba:75:61:3c:30:85:da:39:e4:46:6b:8a:bc:01:2c:a8:
9c:a0:6e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:38:46 2025 by rpki-client