![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3139302e3130392e36342e302f32322d3332203d3e20323634323238.roa
File: 3139302e3130392e36342e302f32322d3332203d3e20323634323238.roa (raw, json)
Hash identifier: ksvdYdpLtd9vuSN1D6zHg/y1C2LIm63ZjjKkhgLWGoc=
Subject key identifier: 1D:79:BB:4B:18:88:6F:64:5A:BB:C7:B0:89:B6:3A:BD:5B:0E:9B:72
Certificate issuer: /CN=3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA
Certificate serial: 4EF1A57FBBB90E537F5AE28036F2F5EE708DB887
Authority key identifier: 3C:FE:E7:CF:39:A3:16:A9:0F:BA:59:02:55:22:0C:BC:EB:5B:BE:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3139302e3130392e36342e302f32322d3332203d3e20323634323238.roa
Signing time: Sun 26 Mar 2023 22:09:26 +0000
ROA not before: Sun 26 Mar 2023 22:04:26 +0000
ROA not after: Sun 24 Mar 2024 22:09:26 +0000
asID: 264228
IP address blocks: 190.109.64.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:f1:a5:7f:bb:b9:0e:53:7f:5a:e2:80:36:f2:f5:ee:70:8d:b8:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA
Validity
Not Before: Mar 26 22:04:26 2023 GMT
Not After : Mar 24 22:09:26 2024 GMT
Subject: CN=1D79BB4B18886F645ABBC7B089B63ABD5B0E9B72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:97:22:31:8b:b6:9e:ff:7d:92:44:64:c1:cf:
55:d6:bf:3b:35:be:1e:cb:fa:d9:55:9e:69:99:79:
e4:cd:4b:ac:16:78:06:4b:bf:48:49:bb:3f:33:a1:
e0:69:c9:93:c4:f5:6a:c4:2c:16:4b:c3:47:ff:48:
83:a0:90:fd:28:18:12:2f:5a:f0:c8:20:ad:c6:1a:
b7:82:6b:77:6b:20:52:cb:a6:1a:91:09:8d:57:19:
0b:c5:ee:ab:19:0d:78:94:fe:41:79:a9:7c:fa:88:
ad:03:d4:db:10:fc:b1:18:2a:8a:72:22:70:d2:69:
73:d3:1f:49:54:10:62:83:7b:da:ef:f4:4e:20:e4:
60:dd:ff:34:6d:c9:e5:89:f7:ee:d6:4b:32:05:70:
99:71:2d:46:ac:98:ba:d1:fc:84:2a:9a:5d:63:13:
d4:19:90:f9:18:95:70:73:3b:84:b9:1c:21:c6:c5:
e9:9b:44:7c:2b:d6:39:23:bb:76:d8:2a:27:c9:18:
0a:37:12:a7:a2:92:7e:80:34:2a:db:9b:66:61:b3:
ee:99:f2:2f:48:68:5e:51:54:8f:0e:6a:f3:15:93:
4a:f7:45:42:ab:95:db:7c:fa:91:4f:66:5d:20:bf:
91:da:d9:89:d8:cb:4c:3d:dd:ae:b6:a3:08:06:7a:
0b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:79:BB:4B:18:88:6F:64:5A:BB:C7:B0:89:B6:3A:BD:5B:0E:9B:72
X509v3 Authority Key Identifier:
keyid:3C:FE:E7:CF:39:A3:16:A9:0F:BA:59:02:55:22:0C:BC:EB:5B:BE:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3139302e3130392e36342e302f32322d3332203d3e20323634323238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.109.64.0/22
Signature Algorithm: sha256WithRSAEncryption
68:f5:c3:e5:7b:57:bf:38:35:51:a8:42:b4:d7:13:97:63:ba:
6d:19:3e:f4:d5:ca:f4:cc:b7:e4:7a:84:67:29:83:76:32:85:
b0:78:8d:e9:d0:e5:63:2e:ba:80:ed:32:05:31:20:14:ef:eb:
5c:68:d8:ed:8f:17:91:5c:0a:37:94:df:91:b7:63:a7:86:07:
a4:76:95:98:e2:c1:05:8b:fb:a3:18:f3:ee:cd:f7:76:53:38:
bb:8b:d5:c0:d2:80:bd:2a:3a:83:ce:f7:84:2d:8c:ef:4d:90:
24:b6:55:09:9c:00:3c:02:20:66:86:ff:01:26:fa:be:12:05:
04:d2:0f:28:6f:83:10:12:02:aa:d0:f4:e3:20:63:65:d9:98:
62:19:65:77:39:f1:b8:eb:4a:5b:5a:6c:80:b9:07:85:43:6f:
24:74:6f:5f:98:e2:66:3d:dd:3f:f6:d8:a1:ab:78:7c:83:37:
ee:be:50:f8:12:88:92:39:9b:cd:a5:93:a9:2a:f8:9e:58:5f:
86:45:7a:5d:3a:cd:fe:e1:5f:ff:1b:93:90:69:5b:c3:4a:80:
3b:5e:4e:ac:0e:53:c4:43:81:94:af:00:68:65:29:20:95:9e:
16:3d:c6:8b:bb:21:fc:0b:56:3f:e4:d8:9e:ef:b6:7d:62:de:
47:10:b9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:29 2025 by rpki-client