![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/0/34352e3136302e3132342e302f32332d3233203d3e20323638343038.roa
File: 34352e3136302e3132342e302f32332d3233203d3e20323638343038.roa (raw, json)
Hash identifier: Zq/nJKS6dcPBSSZcQ1DsgFnI6TbJ4EsmNbCRyGnZDE8=
Subject key identifier: 74:12:96:37:96:22:42:40:5B:EB:C1:B4:A1:55:87:79:DC:5B:2C:3A
Certificate issuer: /CN=BE34597B7ABF76EF20D214D43F25E2579F560E78
Certificate serial: 1DE63C9296F1ECF9BDEA895B728DD95195876664
Authority key identifier: BE:34:59:7B:7A:BF:76:EF:20:D2:14:D4:3F:25:E2:57:9F:56:0E:78
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE34597B7ABF76EF20D214D43F25E2579F560E78.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/0/34352e3136302e3132342e302f32332d3233203d3e20323638343038.roa
Signing time: Mon 08 Jan 2024 15:07:55 +0000
ROA not before: Mon 08 Jan 2024 15:02:55 +0000
ROA not after: Mon 06 Jan 2025 15:07:55 +0000
asID: 268408
IP address blocks: 45.160.124.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:e6:3c:92:96:f1:ec:f9:bd:ea:89:5b:72:8d:d9:51:95:87:66:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE34597B7ABF76EF20D214D43F25E2579F560E78
Validity
Not Before: Jan 8 15:02:55 2024 GMT
Not After : Jan 6 15:07:55 2025 GMT
Subject: CN=74129637962242405BEBC1B4A1558779DC5B2C3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0f:d7:37:bb:6b:2b:66:a3:a4:27:83:39:60:
19:45:5e:00:9f:62:e1:82:16:20:47:db:9b:dd:6a:
ab:e9:84:26:e0:5c:ab:36:98:ea:6b:d4:fc:99:62:
c8:28:f0:35:c0:c6:a7:0e:a2:38:4b:9d:66:ec:41:
ae:87:26:a9:1b:2c:b0:8c:31:d4:5d:16:53:a6:93:
9f:0c:81:d2:5b:1f:79:92:ac:67:d8:b1:22:16:10:
52:90:4e:fc:a2:8d:c7:19:b6:33:1e:f3:d4:f6:45:
ff:a7:ad:52:3f:02:d3:c2:db:4e:d3:8d:bf:21:50:
3c:73:6a:f9:73:ed:7d:ce:a7:d3:97:c1:49:10:43:
7a:8a:2d:c7:99:89:01:4a:09:9a:a5:8f:46:15:ff:
0e:83:92:c8:51:41:1d:e6:9a:64:02:79:44:62:f0:
fb:c5:c7:cf:c4:dc:0c:14:33:b3:11:ee:98:ee:db:
54:5b:b8:e3:b5:89:55:f6:8c:be:bc:eb:df:c0:3f:
cb:99:7d:36:0a:9d:c7:3f:5f:89:0a:02:22:50:a0:
b5:7e:d3:93:fc:fd:21:d6:c6:99:fd:77:1d:10:b3:
24:e1:c1:c7:fc:59:3c:10:b0:a5:93:2a:2d:b0:c7:
2d:69:47:95:55:9a:f5:f5:7c:04:90:4f:1e:16:ca:
ea:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:12:96:37:96:22:42:40:5B:EB:C1:B4:A1:55:87:79:DC:5B:2C:3A
X509v3 Authority Key Identifier:
keyid:BE:34:59:7B:7A:BF:76:EF:20:D2:14:D4:3F:25:E2:57:9F:56:0E:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/0/BE34597B7ABF76EF20D214D43F25E2579F560E78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE34597B7ABF76EF20D214D43F25E2579F560E78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/0/34352e3136302e3132342e302f32332d3233203d3e20323638343038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.160.124.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:4e:b4:2a:aa:6b:2c:d4:91:43:78:b4:b0:3e:20:d5:8b:04:
d0:43:98:db:20:d6:e4:1a:44:d6:a4:fb:52:91:ae:ff:83:54:
81:9b:91:13:90:40:74:e3:5c:28:1e:d3:3c:75:fa:4e:05:cf:
a4:bc:17:a4:5c:d6:12:89:16:fa:60:da:00:0f:6c:c5:8d:5c:
f6:4f:4d:f2:33:d8:d2:88:50:3b:43:e7:aa:a2:62:f4:f9:6e:
72:48:14:b4:10:4d:c3:a4:76:50:4e:26:50:cd:8e:89:47:0b:
61:5d:4c:4f:c0:5a:ee:88:61:bc:42:30:8d:9b:86:8c:2c:9d:
2f:c0:eb:5b:c1:67:26:ff:d4:33:91:1d:da:43:1c:96:8e:cc:
c1:55:90:9a:f8:d9:e4:c2:b9:06:43:b1:49:5e:3e:6d:f0:ec:
a7:ac:c2:c1:dc:8a:ca:6e:20:f8:cc:b3:a9:4b:9e:55:48:c9:
6f:12:a2:18:01:79:df:37:b8:14:cd:2d:2f:95:3c:eb:49:d3:
7d:d7:a6:29:a5:a6:11:1b:26:f6:35:35:62:f4:24:b2:1b:7f:
91:59:ad:e8:a8:97:46:02:9f:82:09:dc:57:79:c2:f7:20:f6:
c7:1b:76:78:46:23:d2:7b:2e:73:70:88:a9:13:b8:02:06:e6:
07:4c:85:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:35 2025 by rpki-client