![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/3136382e3232382e3232312e302f32342d3234203d3e20323634393135.roa
File: 3136382e3232382e3232312e302f32342d3234203d3e20323634393135.roa (raw, json)
Hash identifier: VVOaYN7t4Q5Ed6FQ4XEvcK9AqXtCfaAr0VUlOuoYEuI=
Subject key identifier: 92:BF:E2:B2:D0:9D:C2:79:D7:AB:20:1F:DE:12:79:8C:C7:84:36:2E
Certificate issuer: /CN=41A86F24F08AA1689D41C0058E1D1EF36578625D
Certificate serial: 151576FF65F3831DFA0DB6FDD0CAF54C8EFE4158
Authority key identifier: 41:A8:6F:24:F0:8A:A1:68:9D:41:C0:05:8E:1D:1E:F3:65:78:62:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41A86F24F08AA1689D41C0058E1D1EF36578625D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/3136382e3232382e3232312e302f32342d3234203d3e20323634393135.roa
Signing time: Tue 13 Feb 2024 15:54:21 +0000
ROA not before: Tue 13 Feb 2024 15:49:21 +0000
ROA not after: Tue 11 Feb 2025 15:54:21 +0000
asID: 264915
IP address blocks: 168.228.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:15:76:ff:65:f3:83:1d:fa:0d:b6:fd:d0:ca:f5:4c:8e:fe:41:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41A86F24F08AA1689D41C0058E1D1EF36578625D
Validity
Not Before: Feb 13 15:49:21 2024 GMT
Not After : Feb 11 15:54:21 2025 GMT
Subject: CN=92BFE2B2D09DC279D7AB201FDE12798CC784362E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3b:4f:11:2d:9f:a0:4f:ec:26:c0:8c:ad:43:
bf:cf:60:0e:5b:56:6a:4d:e9:07:11:83:49:b5:0c:
ee:f5:6d:9a:c2:30:2c:e0:1f:3a:07:62:d8:be:5b:
40:2d:cb:76:87:b3:bd:e5:8c:3b:8b:39:88:7c:d8:
cb:07:4c:9d:8b:a4:1d:03:e8:3d:fa:04:dd:d5:e0:
6c:c7:a3:91:ff:63:f8:95:70:eb:a6:09:53:97:6e:
1b:85:22:ab:08:ac:5a:1f:9d:0f:ed:e6:f3:ab:40:
93:c5:ae:53:cb:79:32:8f:8b:06:99:82:0c:6e:9f:
a4:ec:03:1c:ee:6e:56:b3:66:c0:59:19:0f:28:e2:
55:39:6b:ff:25:45:f5:be:f5:b9:e6:f3:61:54:0a:
82:21:1f:f3:54:71:83:70:1e:51:cf:0f:ac:27:01:
2f:32:db:f8:2a:db:75:a3:5b:6e:4a:e7:1b:2b:14:
4c:e5:5e:13:56:14:64:25:7b:d0:bf:9e:0d:df:b0:
8f:31:6b:f4:e7:13:85:e8:a9:c3:e4:d3:0e:a4:ee:
e4:30:d7:b8:a9:c2:24:5f:25:6f:e3:1b:73:65:5e:
05:5f:7b:93:52:85:08:d9:0f:48:de:c5:15:14:d0:
de:57:76:cd:ae:6f:73:90:a6:4a:70:61:1a:00:25:
0e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BF:E2:B2:D0:9D:C2:79:D7:AB:20:1F:DE:12:79:8C:C7:84:36:2E
X509v3 Authority Key Identifier:
keyid:41:A8:6F:24:F0:8A:A1:68:9D:41:C0:05:8E:1D:1E:F3:65:78:62:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/41A86F24F08AA1689D41C0058E1D1EF36578625D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41A86F24F08AA1689D41C0058E1D1EF36578625D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/3136382e3232382e3232312e302f32342d3234203d3e20323634393135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.221.0/24
Signature Algorithm: sha256WithRSAEncryption
52:5d:49:c1:ed:ce:1c:c1:a1:b2:4e:bb:ba:d3:c2:6c:24:1d:
4e:5d:1c:63:4b:af:4a:7c:dc:1e:3e:c9:bc:be:1d:f3:8d:1b:
48:c7:fa:6a:f7:b6:b2:f9:e1:fc:7c:45:6a:f1:84:bf:12:28:
37:37:c1:db:39:1e:6d:c8:b6:ec:6a:2b:9f:01:d0:5c:0e:6c:
98:67:61:7a:67:74:58:85:36:6b:29:8a:46:c2:c0:4c:40:6b:
d3:aa:e8:b9:a9:b6:c3:8c:3d:80:e0:c3:d2:66:8f:e6:84:26:
07:54:62:4b:ca:93:98:a8:85:48:7e:c5:05:25:b2:5d:10:4c:
0c:ce:6d:24:25:25:d2:4a:bb:57:86:f8:68:50:f4:d9:82:21:
ab:f7:53:8d:db:94:ac:44:00:46:16:3c:cd:0b:0a:d1:d9:df:
d8:c0:c8:00:50:57:7e:b9:ed:ef:c6:ac:8f:0a:e3:5a:f5:55:
47:52:5d:b0:3e:43:d0:af:cf:aa:9f:f6:d8:72:fb:9f:31:b7:
91:0f:b2:bd:82:70:fd:fc:39:96:9a:35:1c:cf:b1:36:be:3b:
4e:8a:6a:93:39:47:2a:02:dc:25:51:30:5a:09:9f:cf:03:88:
d0:4b:0a:1a:77:e7:33:f0:ff:82:22:81:f8:70:9c:69:b1:d4:
04:5b:d0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:37 2025 by rpki-client