![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/34352e3233332e3135342e302f32342d3234203d3e20323637333238.roa
File: 34352e3233332e3135342e302f32342d3234203d3e20323637333238.roa (raw, json)
Hash identifier: OuToLwCZKsAUponcbn4EkftSVgdON4omHGiZ2Q9sh+8=
Subject key identifier: 1C:B9:A6:AC:8F:D9:42:BD:F3:4E:A0:1F:22:E9:BE:B9:AC:EB:9B:C0
Certificate issuer: /CN=5302D22E25022C2AC70F9FFE36DEA4859889F443
Certificate serial: 485D71CCB99C7A18A51B2C7865A3AD3A365D71AA
Authority key identifier: 53:02:D2:2E:25:02:2C:2A:C7:0F:9F:FE:36:DE:A4:85:98:89:F4:43
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5302D22E25022C2AC70F9FFE36DEA4859889F443.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/34352e3233332e3135342e302f32342d3234203d3e20323637333238.roa
Signing time: Wed 03 May 2023 19:02:09 +0000
ROA not before: Wed 03 May 2023 18:57:09 +0000
ROA not after: Wed 01 May 2024 19:02:09 +0000
asID: 267328
IP address blocks: 45.233.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:5d:71:cc:b9:9c:7a:18:a5:1b:2c:78:65:a3:ad:3a:36:5d:71:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5302D22E25022C2AC70F9FFE36DEA4859889F443
Validity
Not Before: May 3 18:57:09 2023 GMT
Not After : May 1 19:02:09 2024 GMT
Subject: CN=1CB9A6AC8FD942BDF34EA01F22E9BEB9ACEB9BC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:69:e3:82:bf:f4:56:0a:6e:05:22:a9:30:e1:
fb:a4:f6:29:c3:ee:2e:15:ab:bd:90:a4:99:1e:44:
d4:51:99:3b:10:54:8a:3d:aa:e7:4b:ee:4f:1a:6b:
c6:73:da:32:ea:f0:46:98:21:92:43:ab:ce:f3:c7:
b0:a6:2a:d0:bf:18:51:23:ad:f5:41:f0:6a:64:3d:
95:78:76:f6:67:5d:a0:21:d9:71:ef:b2:92:bb:b2:
03:29:c9:bc:1e:ad:99:60:c5:e8:b0:fc:37:bf:0b:
ba:e4:91:31:82:bf:2e:59:b7:94:9e:95:8a:fa:d2:
39:75:6f:2c:4b:ed:e3:27:d2:02:53:6e:b5:0f:b9:
8f:1d:25:ab:f2:34:ea:d1:c6:44:72:0d:c1:e6:cc:
07:02:1a:3e:6c:18:20:02:39:d4:53:44:06:3f:0c:
ea:4d:89:ad:c2:cc:81:aa:89:d4:6f:67:8f:f2:26:
e6:bc:07:d8:6e:d8:96:e6:c8:08:b6:09:29:d3:8f:
29:76:37:b5:24:52:7c:cf:ed:3d:e6:b1:9d:86:30:
b6:09:95:a5:09:4b:d5:c6:e3:fb:68:33:c4:d3:5c:
f1:c1:17:31:5b:91:ce:ea:5a:ba:f1:fa:47:62:e2:
d4:4d:e5:0d:92:55:3c:6e:7d:29:31:0a:49:25:8e:
af:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B9:A6:AC:8F:D9:42:BD:F3:4E:A0:1F:22:E9:BE:B9:AC:EB:9B:C0
X509v3 Authority Key Identifier:
keyid:53:02:D2:2E:25:02:2C:2A:C7:0F:9F:FE:36:DE:A4:85:98:89:F4:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/5302D22E25022C2AC70F9FFE36DEA4859889F443.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5302D22E25022C2AC70F9FFE36DEA4859889F443.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/34352e3233332e3135342e302f32342d3234203d3e20323637333238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.233.154.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:33:0d:1a:a1:72:9c:90:2e:f6:68:e3:53:89:1a:55:7e:f4:
e7:7a:74:df:92:b2:c7:72:48:09:c0:f0:21:3d:63:67:08:f9:
ca:a3:5f:1b:49:a1:29:f2:e3:50:d3:ff:c9:fa:d0:cb:5e:4c:
66:90:cf:cb:10:17:32:bc:8c:cf:4d:d5:6e:b4:6d:d7:e6:45:
a2:54:71:1d:07:31:81:0f:e1:e4:51:aa:c4:df:43:9f:03:58:
53:3a:c7:2d:a2:21:d7:7b:82:94:da:6c:27:03:2e:20:ad:96:
aa:e9:df:3a:1b:ae:62:0f:b7:52:a3:fd:14:cd:f7:7e:8b:86:
22:8e:65:94:e5:00:5d:f3:61:0f:66:35:ef:69:ec:49:eb:2d:
8a:3a:3f:69:c7:a0:a1:86:95:43:0f:39:cc:5b:97:31:a2:ff:
c7:92:34:72:47:2f:d6:f5:4b:88:22:ec:b4:c6:d3:23:b1:dd:
00:f3:fd:1f:21:96:bc:b6:4b:62:3c:d7:57:59:c1:79:b8:6d:
08:3c:fb:f2:5b:33:aa:54:06:1c:c8:92:37:64:1b:c3:e7:6b:
6d:a8:ba:15:57:a6:3a:79:92:17:42:bc:3a:5a:2c:25:38:65:
39:ee:24:cd:37:d0:5c:ed:8f:4e:5b:f9:30:a8:7c:42:76:fb:
5b:10:01:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:20 2025 by rpki-client