![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/0/3133382e3235352e34382e302f32322d3234203d3e20323634353635.roa
File: 3133382e3235352e34382e302f32322d3234203d3e20323634353635.roa (raw, json)
Hash identifier: kEx6FlToApSdjxtSCF74FdMvNIDGF6XgDXp3SfCkr0E=
Subject key identifier: 08:E5:7C:D5:F8:E2:11:F2:97:2C:C2:CB:0E:99:1A:99:2E:41:AC:F7
Certificate issuer: /CN=71D7A8219CD2E4A732B4D5C8EDF0F163A5072EDB
Certificate serial: 326D0FE6DD4E2D2F54EE0C4556D6657A2D07B690
Authority key identifier: 71:D7:A8:21:9C:D2:E4:A7:32:B4:D5:C8:ED:F0:F1:63:A5:07:2E:DB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71D7A8219CD2E4A732B4D5C8EDF0F163A5072EDB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/0/3133382e3235352e34382e302f32322d3234203d3e20323634353635.roa
Signing time: Wed 03 Apr 2024 12:37:48 +0000
ROA not before: Wed 03 Apr 2024 12:32:48 +0000
ROA not after: Wed 02 Apr 2025 12:37:48 +0000
asID: 264565
IP address blocks: 138.255.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:6d:0f:e6:dd:4e:2d:2f:54:ee:0c:45:56:d6:65:7a:2d:07:b6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71D7A8219CD2E4A732B4D5C8EDF0F163A5072EDB
Validity
Not Before: Apr 3 12:32:48 2024 GMT
Not After : Apr 2 12:37:48 2025 GMT
Subject: CN=08E57CD5F8E211F2972CC2CB0E991A992E41ACF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:1b:ec:5f:0b:ef:13:71:09:ef:68:da:74:4f:
4b:93:92:59:eb:ba:a7:18:7c:90:47:a3:8c:0b:c6:
12:2b:26:38:1c:00:51:03:54:ed:7a:c7:ad:e6:3a:
c3:e9:92:75:c6:1d:af:21:7b:d0:9b:5b:e5:c9:7f:
74:c1:c8:d6:82:d9:46:c8:48:a1:ac:de:29:a3:ae:
7f:62:70:69:cb:11:6b:70:99:d0:52:9d:19:0f:76:
63:61:ea:c3:fd:1c:b1:15:77:e7:4a:d6:fb:bf:88:
da:42:c5:7b:61:10:6e:ae:84:f1:68:71:d6:e3:d2:
96:bb:d8:5a:da:f6:06:1a:9c:61:be:40:0a:dc:76:
c3:ae:84:23:b5:1d:e0:f5:18:10:e2:fb:53:d1:07:
44:bb:8e:af:54:12:18:ab:56:b4:10:6f:a0:e3:8e:
39:b5:db:a2:ad:0e:f6:b5:7f:c9:68:bf:be:39:29:
5f:68:9a:7f:11:96:b4:04:c9:c2:35:50:3c:2e:14:
88:e4:5f:39:0d:64:56:65:38:7b:15:43:48:d0:ea:
4c:52:f1:33:a8:bd:ff:d7:91:bf:b7:16:05:92:6b:
78:36:83:42:44:d6:4f:d3:89:39:ca:3e:7e:89:17:
b4:86:35:c2:f6:b7:99:b8:5f:ea:9d:70:f7:b7:bc:
ff:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E5:7C:D5:F8:E2:11:F2:97:2C:C2:CB:0E:99:1A:99:2E:41:AC:F7
X509v3 Authority Key Identifier:
keyid:71:D7:A8:21:9C:D2:E4:A7:32:B4:D5:C8:ED:F0:F1:63:A5:07:2E:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/0/71D7A8219CD2E4A732B4D5C8EDF0F163A5072EDB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71D7A8219CD2E4A732B4D5C8EDF0F163A5072EDB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/0/3133382e3235352e34382e302f32322d3234203d3e20323634353635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.48.0/22
Signature Algorithm: sha256WithRSAEncryption
60:74:6d:94:d4:85:ff:51:26:b9:24:f9:12:1d:5d:9b:59:c5:
3d:3a:5a:66:d8:1f:e6:8a:81:e2:78:d4:0d:df:2a:31:15:b5:
c1:60:fc:fe:d2:8e:ef:a0:11:b6:5f:5e:6e:a4:51:c9:38:50:
36:04:12:b0:a1:8e:ab:85:6a:da:fe:75:08:5c:2b:5d:60:e0:
de:e1:00:96:af:3e:41:6e:e8:93:9a:66:93:8a:37:79:21:c0:
e4:1a:ef:c8:51:05:a8:1b:af:e1:d6:47:ae:42:21:94:67:ad:
6a:47:bd:39:f4:a4:24:a3:f1:f1:6e:f6:5a:20:3f:16:2a:7e:
23:1d:4d:95:da:38:54:fd:ff:5f:1b:26:f0:80:da:2b:68:fc:
01:e2:61:fd:7a:dd:80:b0:04:15:8e:62:60:01:55:bc:28:0c:
ff:03:e0:f5:bc:31:2c:a5:53:f1:93:c3:35:27:b1:f5:e6:fb:
00:24:c2:1f:c6:43:eb:0e:67:0b:d9:2a:5f:85:53:41:8e:58:
b5:e9:bc:85:12:09:0c:bd:30:81:ad:3f:0c:80:f8:a4:2e:00:
ec:4a:e5:4f:21:ed:2c:80:29:6c:a1:a3:60:e6:04:1a:ba:bf:
32:6f:f2:ef:00:b4:49:59:9e:a8:5c:aa:c8:67:8b:e7:6f:e5:
d1:fa:aa:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:38 2025 by rpki-client