![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/79N9KPPgS43ARULBCja3ZF6roFAze7ESt5u4kxgtP2mi/0/3136382e3232382e3231382e302f32332d3233203d3e20323634393239.roa
File: 3136382e3232382e3231382e302f32332d3233203d3e20323634393239.roa (raw, json)
Hash identifier: gd86BIg8LA7ytehtJcD7bjybT9bTwuwCykfGof+denY=
Subject key identifier: CF:69:AF:25:F1:20:55:64:90:61:77:9E:52:E4:8B:5F:D8:D2:6C:8A
Certificate issuer: /CN=CB3B7616863B2F05AD85E6493F4FEA0906E4A07A
Certificate serial: 638BFAC355995503E8B6D9FF4D479AD9FA05860A
Authority key identifier: CB:3B:76:16:86:3B:2F:05:AD:85:E6:49:3F:4F:EA:09:06:E4:A0:7A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB3B7616863B2F05AD85E6493F4FEA0906E4A07A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/79N9KPPgS43ARULBCja3ZF6roFAze7ESt5u4kxgtP2mi/0/3136382e3232382e3231382e302f32332d3233203d3e20323634393239.roa
Signing time: Fri 13 Oct 2023 04:05:14 +0000
ROA not before: Fri 13 Oct 2023 04:00:14 +0000
ROA not after: Fri 11 Oct 2024 04:05:14 +0000
asID: 264929
IP address blocks: 168.228.218.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:8b:fa:c3:55:99:55:03:e8:b6:d9:ff:4d:47:9a:d9:fa:05:86:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB3B7616863B2F05AD85E6493F4FEA0906E4A07A
Validity
Not Before: Oct 13 04:00:14 2023 GMT
Not After : Oct 11 04:05:14 2024 GMT
Subject: CN=CF69AF25F12055649061779E52E48B5FD8D26C8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:57:a2:48:dd:b0:dd:10:98:40:58:20:e8:de:
71:7c:92:6d:86:e9:ba:44:8d:39:f2:2f:0a:b8:1c:
38:f7:0b:ef:39:da:ff:93:fa:e2:83:35:d2:b2:56:
01:83:9a:02:9c:27:04:47:1a:7a:e7:92:85:30:e0:
8a:69:6c:28:5e:a5:53:8e:2a:92:b6:e2:71:19:68:
8e:39:1e:4f:1b:28:cd:da:84:b8:20:2b:a0:eb:9e:
87:89:91:fe:df:c5:da:83:a2:f6:bb:9b:98:c5:84:
7a:08:80:72:9f:c1:b5:6b:d1:39:72:ee:48:6b:33:
55:d0:00:f0:74:89:15:3c:dc:41:60:6b:bb:0b:39:
72:d9:9f:81:ce:d4:67:d9:2c:c7:cc:4e:4c:d9:a1:
2e:e0:ac:8e:e9:a0:03:47:f1:81:d1:4f:3f:56:af:
63:13:aa:6e:c0:fa:58:32:f1:c2:14:89:c5:41:5a:
88:5c:dc:e0:17:3d:68:d0:aa:47:a5:6f:05:a9:57:
88:1d:ed:0e:e9:a7:21:52:ac:c5:ac:7b:26:2a:13:
a5:5c:5d:28:19:29:4e:2a:1d:f2:17:69:82:76:ed:
78:79:55:8b:da:2d:e0:5a:08:c3:fd:bf:95:ed:63:
73:50:fb:d9:28:24:3d:11:e7:c3:c5:c6:11:7b:1c:
bd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:69:AF:25:F1:20:55:64:90:61:77:9E:52:E4:8B:5F:D8:D2:6C:8A
X509v3 Authority Key Identifier:
keyid:CB:3B:76:16:86:3B:2F:05:AD:85:E6:49:3F:4F:EA:09:06:E4:A0:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/79N9KPPgS43ARULBCja3ZF6roFAze7ESt5u4kxgtP2mi/0/CB3B7616863B2F05AD85E6493F4FEA0906E4A07A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB3B7616863B2F05AD85E6493F4FEA0906E4A07A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/79N9KPPgS43ARULBCja3ZF6roFAze7ESt5u4kxgtP2mi/0/3136382e3232382e3231382e302f32332d3233203d3e20323634393239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.218.0/23
Signature Algorithm: sha256WithRSAEncryption
69:e4:61:9d:2b:16:1f:77:1d:79:97:52:33:40:10:d4:9c:64:
0e:65:22:d1:ab:9d:50:49:71:bc:a8:e8:91:a5:f9:b5:09:42:
9e:f4:aa:c4:1d:6a:65:52:a5:1c:15:5e:82:c0:07:b0:6d:a1:
9a:1e:a4:a3:f5:dd:1e:f4:4f:dd:e2:fa:73:68:4a:fb:f8:fb:
c4:88:b2:79:f4:76:c7:e3:7c:ef:2d:28:03:7e:91:77:bc:a1:
5d:45:a4:b4:d6:aa:64:6b:36:20:60:a3:19:1e:29:41:f0:31:
d4:ec:aa:58:fb:fb:a9:12:db:8b:ad:5d:cf:fa:a0:91:17:5f:
ab:a3:17:bb:b7:c9:c6:62:1a:b2:17:8e:43:27:37:57:0c:63:
4d:3f:45:01:6f:49:f8:9e:2b:cd:5b:4f:10:87:f6:1c:b2:a3:
c5:4b:c6:04:7c:81:ae:27:a7:9e:69:81:48:9c:84:40:77:23:
30:f4:d6:93:6a:9d:80:a0:41:ff:9a:be:99:8b:f7:17:5b:d5:
c7:de:ca:14:93:bb:e4:75:89:cd:25:63:9f:8b:43:96:f2:e4:
b3:20:4a:09:25:ab:c2:d2:49:46:4f:b4:d6:17:c2:5d:16:10:
96:f2:14:57:de:af:b9:8e:81:4a:42:a2:85:a1:61:ef:d4:ab:
8c:7a:ff:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:42:57 2025 by rpki-client