![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/3136382e3232382e3137372e302f32342d3234203d3e20323634393236.roa
File: 3136382e3232382e3137372e302f32342d3234203d3e20323634393236.roa (raw, json)
Hash identifier: nOYR6fkqSbBHfK+ZMPsxoOa6Tov3blnkUaIgRU36OCk=
Subject key identifier: B1:F3:CD:8D:DC:1C:59:DB:48:D2:2F:42:20:C5:65:FE:CF:99:07:0C
Certificate issuer: /CN=1D4B1E0F83937DB50136A86BC6213C3318CDF58A
Certificate serial: 5DC3A231C6602B8B10EE68CFA3018BADE1DA7754
Authority key identifier: 1D:4B:1E:0F:83:93:7D:B5:01:36:A8:6B:C6:21:3C:33:18:CD:F5:8A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1D4B1E0F83937DB50136A86BC6213C3318CDF58A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/3136382e3232382e3137372e302f32342d3234203d3e20323634393236.roa
Signing time: Mon 29 Jan 2024 09:00:58 +0000
ROA not before: Mon 29 Jan 2024 08:55:58 +0000
ROA not after: Mon 27 Jan 2025 09:00:58 +0000
asID: 264926
IP address blocks: 168.228.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:c3:a2:31:c6:60:2b:8b:10:ee:68:cf:a3:01:8b:ad:e1:da:77:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D4B1E0F83937DB50136A86BC6213C3318CDF58A
Validity
Not Before: Jan 29 08:55:58 2024 GMT
Not After : Jan 27 09:00:58 2025 GMT
Subject: CN=B1F3CD8DDC1C59DB48D22F4220C565FECF99070C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:27:59:50:f9:99:20:22:91:a9:6b:7b:66:6d:
0c:5a:54:12:f5:be:f9:9c:ae:a9:f3:4e:7c:d6:57:
b6:5c:b1:f6:b8:70:3c:83:2e:12:72:54:d2:e2:c0:
bd:35:57:8b:1d:a6:d8:94:a6:4a:3b:3f:3f:99:46:
37:f7:7c:ec:bc:82:7c:02:8f:f0:e0:64:10:57:e6:
5b:f5:e4:6c:fc:fc:cb:31:00:de:4d:dd:48:a4:87:
67:83:19:71:4d:16:d0:c9:d1:13:05:ae:49:8c:8d:
d1:a3:e3:18:5e:24:3c:14:19:21:5d:a2:24:40:f5:
6d:e6:a1:87:66:05:1e:53:32:96:3c:52:84:32:66:
59:c2:be:55:23:46:9e:1f:c9:10:a1:23:83:9a:b9:
68:f6:73:72:c8:11:ab:a9:e6:93:70:a5:00:0b:7d:
d2:34:83:41:d1:3d:a7:25:de:2b:56:12:fb:c2:ef:
09:16:a0:87:3f:7a:97:f8:bc:1c:53:27:56:1f:86:
25:8d:28:54:a3:d7:b2:fa:dd:12:12:c6:e4:5a:a6:
9b:45:6a:51:98:b8:a3:11:2e:eb:58:38:d8:62:24:
67:fc:3f:b8:de:39:70:f2:97:e0:a4:90:e6:d4:f8:
1e:d9:21:6b:34:2d:bf:ff:83:9b:2c:8a:1e:b7:35:
88:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F3:CD:8D:DC:1C:59:DB:48:D2:2F:42:20:C5:65:FE:CF:99:07:0C
X509v3 Authority Key Identifier:
keyid:1D:4B:1E:0F:83:93:7D:B5:01:36:A8:6B:C6:21:3C:33:18:CD:F5:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/1D4B1E0F83937DB50136A86BC6213C3318CDF58A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1D4B1E0F83937DB50136A86BC6213C3318CDF58A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/3136382e3232382e3137372e302f32342d3234203d3e20323634393236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.177.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:a8:a2:ec:c6:a0:f5:88:b2:b7:b7:46:e9:4b:12:67:d1:f4:
dd:a1:3f:7a:e1:fc:2c:30:3c:7b:d8:ce:19:3b:59:5b:77:2a:
af:af:e8:2f:d5:11:59:6c:7d:bc:d1:64:bc:97:4d:fe:50:3a:
c9:93:c8:de:10:66:fa:9d:69:26:ab:5d:ad:91:e0:54:e7:0e:
ce:fe:cf:cf:48:cf:3d:d7:8e:e7:f0:f0:78:56:0c:e7:e2:df:
f5:92:e3:d5:e9:5a:4c:4d:62:24:03:d9:df:87:df:07:39:bf:
83:f8:35:a7:cc:18:dd:36:5e:c2:0b:ef:32:44:f8:8c:b4:16:
46:24:1e:a1:05:4e:91:12:2c:6b:ca:96:71:5d:0f:20:4b:f4:
41:b6:47:a1:40:23:9f:70:42:68:d7:c4:9e:d5:fb:07:ba:a9:
f1:92:b9:9a:de:bf:26:ae:9e:05:bd:4e:7c:db:36:e3:1a:62:
dc:ed:42:bc:1f:35:54:d2:76:99:0a:23:be:2b:ee:8a:78:63:
01:a4:3f:81:e2:2f:7e:d4:20:e5:7f:69:a7:a3:bf:19:e7:85:
a5:98:9f:a9:a7:a0:d4:d1:1c:3e:1b:7b:a9:9f:1d:b2:e1:31:
20:fd:25:09:20:a6:3a:15:30:a5:18:ab:ef:a1:63:7d:20:3f:
ad:a2:99:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:14 2025 by rpki-client