![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/3133382e35392e3234382e302f32322d3236203d3e203532383538.roa
File: 3133382e35392e3234382e302f32322d3236203d3e203532383538.roa (raw, json)
Hash identifier: RtFANWGzecJThy0boFVaeujNNFXjTk3sFvIrhXOrVbQ=
Subject key identifier: E4:0C:B3:8C:EB:BC:7B:FC:0A:DA:7F:6A:2C:B2:44:A1:4C:71:30:7B
Certificate issuer: /CN=5B263F0F259C154495BFEADDE220CF73F0E6D7D0
Certificate serial: 78E14BFC69AC5A2B8A77B39D64C8A22D81E5B858
Authority key identifier: 5B:26:3F:0F:25:9C:15:44:95:BF:EA:DD:E2:20:CF:73:F0:E6:D7:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B263F0F259C154495BFEADDE220CF73F0E6D7D0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/3133382e35392e3234382e302f32322d3236203d3e203532383538.roa
Signing time: Tue 05 Dec 2023 15:44:38 +0000
ROA not before: Tue 05 Dec 2023 15:39:38 +0000
ROA not after: Tue 03 Dec 2024 15:44:38 +0000
asID: 52858
IP address blocks: 138.59.248.0/22 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:e1:4b:fc:69:ac:5a:2b:8a:77:b3:9d:64:c8:a2:2d:81:e5:b8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B263F0F259C154495BFEADDE220CF73F0E6D7D0
Validity
Not Before: Dec 5 15:39:38 2023 GMT
Not After : Dec 3 15:44:38 2024 GMT
Subject: CN=E40CB38CEBBC7BFC0ADA7F6A2CB244A14C71307B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6d:14:69:12:a7:56:72:52:34:e6:4a:9b:4c:
b0:fa:e9:c3:c7:56:fd:1f:f8:73:07:70:1f:dd:8b:
4f:8c:5b:2f:01:4f:71:cb:0c:df:c6:46:44:0a:16:
7e:1c:e7:1e:cc:ab:23:ce:2d:c7:aa:a8:9f:32:1f:
54:e3:ef:14:3e:a9:dc:49:19:c0:92:6b:47:ad:8e:
5c:d7:5c:33:49:6b:f0:ee:e5:cf:43:7d:fd:9c:9f:
73:10:96:b5:97:f8:02:46:58:2a:a4:b6:9c:e0:dd:
03:13:58:89:32:2a:e0:48:f8:e0:86:dd:43:06:ec:
5a:3d:de:b9:b2:95:e2:9f:6a:15:ca:a4:8b:d1:dd:
e3:5f:6d:a5:df:b1:a5:e6:c5:90:f0:a5:b5:1d:ba:
56:64:d5:56:c4:2c:d5:b0:4e:06:04:3c:27:ba:b6:
56:7a:55:7c:d9:8e:81:2b:e5:da:3a:16:a5:bc:67:
cb:53:4e:8a:b2:4f:c2:1b:e4:dd:89:ed:a2:65:85:
b9:ef:20:1c:cd:33:80:54:03:7d:b1:e7:4a:13:0f:
8f:2e:21:9e:5c:7d:04:ca:8e:fc:08:c4:be:52:8c:
d9:0e:c9:33:68:4e:00:15:b0:c7:2c:1e:c8:de:47:
ad:74:f9:af:57:30:c9:28:84:93:c6:81:ac:25:ca:
f6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0C:B3:8C:EB:BC:7B:FC:0A:DA:7F:6A:2C:B2:44:A1:4C:71:30:7B
X509v3 Authority Key Identifier:
keyid:5B:26:3F:0F:25:9C:15:44:95:BF:EA:DD:E2:20:CF:73:F0:E6:D7:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/5B263F0F259C154495BFEADDE220CF73F0E6D7D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B263F0F259C154495BFEADDE220CF73F0E6D7D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/3133382e35392e3234382e302f32322d3236203d3e203532383538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.248.0/22
Signature Algorithm: sha256WithRSAEncryption
56:32:24:8a:d7:46:dd:39:8b:ea:5a:ee:37:77:1f:c1:f6:89:
11:e0:b5:16:ce:9d:61:c6:97:87:82:4a:15:14:22:3b:bb:95:
a8:2c:71:c9:27:90:99:40:86:5b:c2:c8:75:3d:b7:00:8b:31:
d7:6f:be:84:7e:70:01:3f:34:c3:56:26:bc:95:31:b6:55:e2:
f7:f1:fa:34:b3:57:ba:6c:e8:f4:00:ac:85:42:82:8a:01:f9:
70:5c:f2:a0:0c:14:1d:52:89:63:a0:ac:69:ab:04:66:ce:5c:
79:20:a5:e1:5f:43:78:4c:c1:02:01:68:44:23:04:d0:61:90:
dc:82:23:7c:72:98:f1:fa:38:72:15:48:3b:49:ab:75:d1:fd:
5b:89:94:8f:51:01:c9:20:3a:59:09:26:2f:cc:38:71:b9:4d:
fd:f2:61:fb:d8:7a:5b:cb:38:cd:fa:48:5d:b7:b5:a8:a2:c0:
e5:fb:0e:5c:02:8d:3b:a0:58:63:6c:77:d8:41:0d:1f:23:fa:
7b:be:ed:30:88:31:c5:a9:57:61:7c:24:41:15:e6:be:85:4a:
ea:7a:bb:96:be:ef:ac:e5:92:f6:00:41:da:05:74:7a:f8:5b:
b1:26:f4:31:85:74:2d:64:78:8b:b3:ac:09:89:92:ce:fc:5b:
e2:9c:28:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:34 2025 by rpki-client