![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/0/34352e3136312e3231352e302f32342d3234203d3e2030.roa
File: 34352e3136312e3231352e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: XAvpdg/9BYIW22hyiuX2jLxnZJidQsDhEbWjSwK3Jpc=
Subject key identifier: B2:C9:91:06:91:D6:FA:80:20:EA:85:0E:3D:5B:ED:07:94:A6:42:5B
Certificate issuer: /CN=7D41250B864CCAC75BADB9B24712630BE0F9C265
Certificate serial: 5CB458AA1E2564BA6EE4B3FDD934ABFEB03C2841
Authority key identifier: 7D:41:25:0B:86:4C:CA:C7:5B:AD:B9:B2:47:12:63:0B:E0:F9:C2:65
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D41250B864CCAC75BADB9B24712630BE0F9C265.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/0/34352e3136312e3231352e302f32342d3234203d3e2030.roa
Signing time: Mon 24 Apr 2023 12:58:37 +0000
ROA not before: Mon 24 Apr 2023 12:53:37 +0000
ROA not after: Mon 22 Apr 2024 12:58:37 +0000
asID: 0
IP address blocks: 45.161.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:b4:58:aa:1e:25:64:ba:6e:e4:b3:fd:d9:34:ab:fe:b0:3c:28:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D41250B864CCAC75BADB9B24712630BE0F9C265
Validity
Not Before: Apr 24 12:53:37 2023 GMT
Not After : Apr 22 12:58:37 2024 GMT
Subject: CN=B2C9910691D6FA8020EA850E3D5BED0794A6425B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:77:ff:f8:61:86:16:cd:6e:47:15:d2:fb:d8:
c5:21:6d:9f:71:7a:1e:be:97:4a:20:ce:f2:2d:07:
dc:df:70:56:e8:39:81:15:c9:f7:cd:a3:55:6e:0a:
98:37:d7:87:07:c7:56:e1:08:42:c5:72:4b:58:40:
c4:af:7d:e0:58:39:19:e1:4f:15:56:a2:4e:83:6f:
2d:69:9f:5c:9f:65:28:6b:c9:cf:37:72:19:e4:fe:
34:28:6a:e4:cf:9e:21:02:ab:1d:85:d5:6d:2c:f5:
4e:5a:7e:be:98:da:70:02:0c:74:38:64:06:31:01:
6b:94:12:c3:17:63:99:33:57:c1:ab:6c:b8:c9:c3:
99:b5:e3:67:81:4c:2b:5f:ca:f4:41:bd:b1:3f:04:
53:88:cf:73:b5:93:db:92:f3:eb:a7:e5:69:93:d7:
2f:a4:84:83:4f:53:2b:3d:aa:df:f8:07:c5:98:11:
53:d6:60:9d:7a:00:02:4d:18:86:0a:41:b0:ee:1c:
3b:6d:24:da:1e:44:af:06:57:ca:17:2c:26:92:14:
d1:42:8a:27:50:2a:c2:15:35:83:39:09:e5:be:90:
48:f4:fe:4e:d0:c9:6e:40:7e:85:c9:05:de:94:a5:
d7:38:f3:80:d0:d9:81:b6:09:e9:9e:14:b5:a3:e6:
cb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C9:91:06:91:D6:FA:80:20:EA:85:0E:3D:5B:ED:07:94:A6:42:5B
X509v3 Authority Key Identifier:
keyid:7D:41:25:0B:86:4C:CA:C7:5B:AD:B9:B2:47:12:63:0B:E0:F9:C2:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/0/7D41250B864CCAC75BADB9B24712630BE0F9C265.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D41250B864CCAC75BADB9B24712630BE0F9C265.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/0/34352e3136312e3231352e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.161.215.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:7d:54:b0:df:0e:30:8c:c4:09:16:c6:53:93:16:5b:4d:c2:
ad:ee:af:4f:de:26:d0:7c:16:38:1e:e8:1b:73:6d:46:97:2a:
80:ec:8d:88:e9:b2:b7:01:bd:25:55:a8:17:31:dc:6d:f6:c4:
0d:27:bb:7a:30:a3:96:5a:0d:25:b8:b5:7b:07:34:c4:8b:d0:
fc:ed:7e:ec:80:b1:a3:82:40:e9:16:db:3f:19:f5:a1:9f:7b:
6f:44:3e:16:42:24:34:48:cb:e3:1f:d4:37:d2:5d:c8:b2:cc:
29:72:31:c7:b6:f3:a3:a2:50:91:39:50:7d:07:04:5e:4f:2a:
d3:7c:67:0c:63:53:68:9e:02:a9:51:7d:60:47:dd:46:81:0f:
42:2b:fa:47:92:0b:52:ab:44:a9:1d:5b:f0:4e:b7:4e:2b:76:
41:61:12:ce:e9:63:42:5b:51:eb:e4:50:7e:82:62:af:a1:59:
1c:ac:b6:34:d7:0b:16:ee:02:eb:16:7a:69:3c:5c:83:29:67:
f9:87:f2:08:60:df:19:e0:3f:11:36:d9:f5:c1:ec:ba:15:79:
26:b0:9a:9d:45:15:e6:f6:33:93:2c:b4:1f:f8:7d:d9:38:66:
0a:d4:c2:06:1e:3c:2a:60:ad:11:36:45:f7:f0:b4:15:bb:35:
e0:01:fb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 06:52:02 2025 by rpki-client