![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/3134332e302e35322e302f32322d3234203d3e20323633393937.roa
File: 3134332e302e35322e302f32322d3234203d3e20323633393937.roa (raw, json)
Hash identifier: KFSiWBFPmsZqF5y/JgVhWyM8zBfMflKZnbvA6faYNbM=
Subject key identifier: 59:89:D3:FB:1C:A1:CD:C3:6A:04:54:62:F1:AA:32:60:2D:2A:3E:F8
Certificate issuer: /CN=00C65B86D207F9E0E311ECD95BDEFF56752084D1
Certificate serial: 71D348B9C2AF7CE871856E0265B81DF1EE6C88A7
Authority key identifier: 00:C6:5B:86:D2:07:F9:E0:E3:11:EC:D9:5B:DE:FF:56:75:20:84:D1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00C65B86D207F9E0E311ECD95BDEFF56752084D1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/3134332e302e35322e302f32322d3234203d3e20323633393937.roa
Signing time: Tue 17 Dec 2024 20:22:59 +0000
ROA not before: Tue 17 Dec 2024 20:17:59 +0000
ROA not after: Tue 16 Dec 2025 20:22:59 +0000
asID: 263997
IP address blocks: 143.0.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:d3:48:b9:c2:af:7c:e8:71:85:6e:02:65:b8:1d:f1:ee:6c:88:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00C65B86D207F9E0E311ECD95BDEFF56752084D1
Validity
Not Before: Dec 17 20:17:59 2024 GMT
Not After : Dec 16 20:22:59 2025 GMT
Subject: CN=5989D3FB1CA1CDC36A045462F1AA32602D2A3EF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c4:0a:48:b1:73:81:e9:8e:1d:5e:dd:b2:29:
e7:c5:ca:39:41:45:b9:b1:db:e9:ab:b5:00:84:d8:
d5:84:e2:a1:4c:e6:ed:e6:b4:b4:a3:cb:d0:be:5f:
d8:92:85:59:f5:46:87:c9:cc:3e:50:ba:5b:4f:c7:
a0:c1:8f:eb:2d:cd:7e:f7:14:89:74:25:85:6f:fa:
ba:4b:f7:6f:77:03:3d:2c:3e:f8:9d:71:62:ea:50:
44:e4:fa:4d:24:58:d6:6c:37:cf:06:de:10:2d:ea:
49:01:9f:c8:76:9b:56:ad:42:fb:e1:bf:a5:1a:22:
c9:65:39:28:a6:f4:78:80:84:cb:c3:90:ac:d3:77:
cd:e1:64:07:98:90:e0:48:56:5c:76:4a:2c:03:57:
95:50:88:bd:01:0a:65:c8:2d:b2:60:ed:37:de:f0:
d9:e7:50:61:b0:f9:9f:93:68:a4:6b:14:01:3a:c9:
fb:e9:36:d8:0c:96:05:c0:ba:99:4f:2e:be:90:9e:
b2:6d:44:b7:96:7e:81:ce:13:1e:dc:31:ed:ac:72:
7c:1d:1f:74:4d:81:4a:6d:cc:d8:8d:ae:d4:f9:b4:
17:1c:23:d5:88:e9:92:62:09:e0:4b:d6:6d:32:61:
2c:24:e5:2c:c2:52:3f:17:5e:88:41:7b:eb:3c:66:
93:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:89:D3:FB:1C:A1:CD:C3:6A:04:54:62:F1:AA:32:60:2D:2A:3E:F8
X509v3 Authority Key Identifier:
keyid:00:C6:5B:86:D2:07:F9:E0:E3:11:EC:D9:5B:DE:FF:56:75:20:84:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/00C65B86D207F9E0E311ECD95BDEFF56752084D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00C65B86D207F9E0E311ECD95BDEFF56752084D1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/3134332e302e35322e302f32322d3234203d3e20323633393937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.0.52.0/22
Signature Algorithm: sha256WithRSAEncryption
88:b2:00:f7:ad:8e:6e:cc:b3:b2:d6:4d:ba:50:ac:36:1d:53:
f6:76:93:8d:a7:3a:eb:52:01:fd:f6:9c:94:e6:17:30:e8:b1:
db:9e:2f:7a:a2:03:a8:b8:5f:b8:d8:55:74:6a:03:b3:ee:4a:
17:09:c0:a5:59:3a:c9:29:32:84:26:27:e9:d2:0f:4b:b9:47:
57:51:48:6a:dc:0e:ad:4b:57:ab:ac:46:22:f7:39:db:da:42:
3b:3a:5b:e4:98:ce:62:ab:1f:c5:ae:68:50:39:df:37:a5:9f:
5f:22:9e:b9:f9:82:8f:de:5a:dc:5a:0d:1e:5a:bc:c4:ce:af:
cc:25:f5:61:3f:32:aa:62:a0:a6:65:9f:54:2e:27:6a:fe:9c:
89:5b:38:4f:b5:89:77:06:d2:9a:69:a9:43:1f:14:cd:c3:b1:
5f:9d:20:bd:ae:51:8e:05:78:2f:21:38:3d:be:36:2e:9e:27:
11:90:a9:25:ab:c6:30:ff:85:6d:af:e5:03:0a:b0:db:57:c4:
01:ea:00:d9:ec:cb:59:38:cf:01:0c:61:f7:c8:ce:a3:fa:66:
bd:9f:06:cb:c8:e2:85:94:86:e0:cb:38:40:62:bd:90:f2:b9:
55:f0:75:8d:02:b3:a0:1d:f7:b9:af:d9:2c:e5:67:6a:86:5e:
b0:09:19:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:01:10 2025 by rpki-client