![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/34352e3138342e3134382e302f32322d3234203d3e20323632393037.roa
File: 34352e3138342e3134382e302f32322d3234203d3e20323632393037.roa (raw, json)
Hash identifier: S+Tlm1v49V8DpoF3dDbr7otciVFYANRYZVhV+SRd7Bw=
Subject key identifier: FC:9F:25:65:EA:F0:21:6D:99:6E:8A:2C:90:0C:FC:36:2F:3D:63:02
Certificate issuer: /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial: 433A1D61AED242C29BA071C38196758F29F20683
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/34352e3138342e3134382e302f32322d3234203d3e20323632393037.roa
Signing time: Sat 03 Feb 2024 12:53:23 +0000
ROA not before: Sat 03 Feb 2024 12:48:23 +0000
ROA not after: Sat 01 Feb 2025 12:53:23 +0000
asID: 262907
IP address blocks: 45.184.148.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:3a:1d:61:ae:d2:42:c2:9b:a0:71:c3:81:96:75:8f:29:f2:06:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Validity
Not Before: Feb 3 12:48:23 2024 GMT
Not After : Feb 1 12:53:23 2025 GMT
Subject: CN=FC9F2565EAF0216D996E8A2C900CFC362F3D6302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5c:b4:e1:b0:c5:d6:9c:ab:fa:cd:88:04:82:
bd:90:68:95:77:99:2a:f8:58:59:37:1c:01:50:bd:
18:a7:27:7e:6a:ca:6d:83:7d:ce:ce:ad:f1:a8:d6:
0f:30:4a:ab:d7:8c:ac:b9:9c:ae:79:65:91:70:d5:
0b:80:69:43:7e:71:30:53:95:80:3c:89:cf:2c:cf:
32:51:20:ba:6b:99:79:79:c3:aa:9b:b5:8f:6b:a7:
ce:34:88:48:5c:c7:b5:91:0d:f7:6d:7b:5d:b8:7f:
a6:90:8a:21:9f:ed:f4:d9:6a:3c:83:73:e6:84:fb:
ae:c3:da:f5:ee:db:e8:b5:34:bd:02:72:d3:2a:03:
77:ac:50:64:24:ca:ae:ac:9b:23:21:96:6f:13:f5:
b2:40:56:09:79:86:98:f5:be:11:77:ce:70:84:e0:
a6:53:af:8d:9b:6e:37:b9:1f:90:30:3e:ba:e2:32:
fa:20:c0:8a:7b:05:81:10:db:9e:46:3d:44:c3:f8:
0a:f8:6f:3d:2d:63:87:1e:6f:fe:5a:63:04:f3:89:
b7:90:f3:31:9f:6e:2b:c2:00:b6:a3:14:83:e1:0c:
62:37:ff:3f:a2:9a:9a:68:d0:de:1c:c4:fb:55:22:
ce:ba:be:5d:5a:9b:2e:51:a1:a0:61:e9:65:ed:fa:
3d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9F:25:65:EA:F0:21:6D:99:6E:8A:2C:90:0C:FC:36:2F:3D:63:02
X509v3 Authority Key Identifier:
keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/34352e3138342e3134382e302f32322d3234203d3e20323632393037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.184.148.0/22
Signature Algorithm: sha256WithRSAEncryption
09:22:59:5e:9d:b7:1b:d5:52:46:46:3f:88:14:a5:ad:32:5b:
2c:bf:90:2b:4e:4a:86:ad:ba:8e:ed:2c:ea:e6:32:e1:b7:ed:
b6:c7:03:3c:55:de:68:96:c6:8f:ef:26:65:6a:2e:81:eb:e5:
1d:e3:d4:19:2f:1b:83:bd:7c:c2:2b:1d:64:32:cf:9e:ce:d1:
6a:5d:97:68:b8:ec:43:23:c9:0b:6c:60:fb:e2:79:0a:6e:6a:
8b:74:50:e2:ad:ec:19:e9:dd:ec:a7:32:53:a3:d8:75:b5:8e:
f6:79:97:c1:d6:83:7e:bd:34:f4:1b:58:3b:70:29:46:ed:9d:
ac:0c:43:a5:44:0d:27:b6:db:ce:54:8d:9c:04:f8:c6:82:5e:
5b:f8:26:88:5e:7e:5d:eb:3c:f5:f7:e7:02:01:11:8c:37:f2:
64:b3:4e:cd:28:78:45:ec:40:00:57:41:c5:70:5a:9f:40:fd:
34:17:5e:ae:8d:ef:c3:31:7a:67:65:9f:7b:24:cc:c8:9a:84:
b0:3c:5f:b6:e9:8a:8b:70:52:3e:cd:a3:bc:06:18:5e:8a:d2:
20:e2:71:4f:e3:91:ab:cc:5e:d3:f3:c6:fa:dd:dd:2b:5d:46:
47:10:4b:a2:62:a0:0d:81:97:ac:71:bf:dc:05:55:aa:d8:c5:
32:be:4b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:50 2025 by rpki-client