![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/0/3133382e39392e3135322e302f32322d3232203d3e20323634323035.roa
File: 3133382e39392e3135322e302f32322d3232203d3e20323634323035.roa (raw, json)
Hash identifier: 7tiLzCoBingb8THIVO8whAbzRT1G8G6eE5Ix5egDB8E=
Subject key identifier: D1:D6:7A:77:0F:70:49:E0:00:9D:D0:CE:EC:A6:E0:DD:C7:D8:3F:6F
Certificate issuer: /CN=F3D1F1F17A045541F859EF9EE3C95D32E062C66E
Certificate serial: 2A1CC8E3A83B3DBD986818A5FF5AF291374419BA
Authority key identifier: F3:D1:F1:F1:7A:04:55:41:F8:59:EF:9E:E3:C9:5D:32:E0:62:C6:6E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3D1F1F17A045541F859EF9EE3C95D32E062C66E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/0/3133382e39392e3135322e302f32322d3232203d3e20323634323035.roa
Signing time: Wed 28 Feb 2024 14:23:27 +0000
ROA not before: Wed 28 Feb 2024 14:18:27 +0000
ROA not after: Wed 26 Feb 2025 14:23:27 +0000
asID: 264205
IP address blocks: 138.99.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:1c:c8:e3:a8:3b:3d:bd:98:68:18:a5:ff:5a:f2:91:37:44:19:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3D1F1F17A045541F859EF9EE3C95D32E062C66E
Validity
Not Before: Feb 28 14:18:27 2024 GMT
Not After : Feb 26 14:23:27 2025 GMT
Subject: CN=D1D67A770F7049E0009DD0CEECA6E0DDC7D83F6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:88:27:b8:77:70:33:c7:d3:8b:69:25:14:3e:
1f:78:19:0f:c0:03:fc:4b:46:79:df:0c:57:4e:05:
3b:3b:bd:e5:ba:4e:0a:c4:a3:5e:58:0d:fe:2c:2c:
80:75:41:d7:5b:de:70:17:f5:0d:f5:89:36:44:40:
a1:1d:9f:b6:42:f4:11:93:b1:bf:b3:2c:e1:0d:ff:
00:9e:65:e3:56:55:26:e5:f0:f0:2b:6f:7b:2b:b1:
7b:4b:a9:27:7d:ce:48:fc:15:b0:97:3b:da:a7:46:
d5:06:06:e6:d4:b2:d4:47:d8:2e:d2:93:93:31:2d:
d0:7d:0b:d7:45:eb:ed:35:93:c4:5e:e2:52:94:ff:
60:d9:aa:56:41:74:81:86:a3:a0:35:7b:57:e7:bb:
50:8f:87:53:b1:b3:1e:df:c9:36:b1:11:be:5a:d1:
e6:cc:bd:d3:65:ef:a8:68:78:00:06:05:4f:f4:f9:
d1:b9:b3:ae:1d:9f:51:16:6f:e1:f0:10:de:55:c3:
bc:f4:63:90:e7:2f:2f:eb:95:76:74:0c:1b:05:50:
7f:61:d2:b6:8f:9e:1e:f1:ce:8b:25:f5:e5:ee:49:
83:dd:9b:31:32:22:14:3f:33:58:dc:1c:89:8e:8d:
55:72:d1:ae:df:3d:ab:7a:e2:a0:c1:5f:31:de:b2:
4d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D6:7A:77:0F:70:49:E0:00:9D:D0:CE:EC:A6:E0:DD:C7:D8:3F:6F
X509v3 Authority Key Identifier:
keyid:F3:D1:F1:F1:7A:04:55:41:F8:59:EF:9E:E3:C9:5D:32:E0:62:C6:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/0/F3D1F1F17A045541F859EF9EE3C95D32E062C66E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3D1F1F17A045541F859EF9EE3C95D32E062C66E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/0/3133382e39392e3135322e302f32322d3232203d3e20323634323035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.152.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:e3:b3:d3:a7:19:d2:38:41:1e:3f:96:0a:2b:37:ed:2d:2a:
c9:3e:57:38:af:d7:2c:05:76:c7:03:6c:63:00:ce:c3:4e:1a:
98:93:e5:97:d0:78:d7:9a:c5:c0:27:36:04:86:f3:46:77:49:
b4:f0:8a:fa:77:5e:2e:16:5c:e5:a4:cb:41:d3:17:5c:c2:03:
9f:1b:8b:8e:b4:21:09:99:e4:aa:06:c7:d3:c0:ca:25:2b:f7:
01:b2:ff:5d:3e:b0:99:fb:e5:82:ba:60:fd:dd:ed:81:5a:bf:
d8:a1:74:00:28:8b:9b:9e:42:c6:39:2a:f6:76:71:7b:cf:6e:
74:07:64:70:b9:20:ea:27:13:61:22:16:05:af:a4:40:e3:56:
22:4d:76:43:a5:bc:15:37:e3:35:a4:f1:51:d5:e0:79:44:ff:
e2:46:ce:e9:d6:22:b3:07:ce:fd:31:57:0f:a1:4f:15:3d:a7:
58:93:73:97:ae:ae:03:9d:cf:7e:59:1f:f8:3f:3e:da:53:62:
df:9b:ea:d3:bd:36:9e:fe:d0:a2:f8:6a:82:59:89:bf:bb:09:
3e:e5:4a:68:24:72:1b:94:7e:29:98:d7:c0:ed:b4:85:2c:52:
8a:85:4f:71:63:91:98:7b:cb:61:45:6c:49:b4:20:5f:df:97:
26:fd:46:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:09 2025 by rpki-client