![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/34352e3136312e3132382e302f32322d3234203d3e20323638343539.roa
File: 34352e3136312e3132382e302f32322d3234203d3e20323638343539.roa (raw, json)
Hash identifier: is+M7hB3H4QCSTPtKmeAfAkhnRVpxj3QUxS7DlTItfM=
Subject key identifier: E9:BC:99:16:E3:1C:97:A9:57:21:F2:36:6B:34:53:19:54:BD:D5:A1
Certificate issuer: /CN=4AD23F69FEB6F0C4185CED1CD33614808371B5CA
Certificate serial: 38C289060EE67B0AE73D5B99DD9FBD367810D32A
Authority key identifier: 4A:D2:3F:69:FE:B6:F0:C4:18:5C:ED:1C:D3:36:14:80:83:71:B5:CA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AD23F69FEB6F0C4185CED1CD33614808371B5CA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/34352e3136312e3132382e302f32322d3234203d3e20323638343539.roa
Signing time: Wed 14 Dec 2022 19:23:00 +0000
ROA not before: Wed 14 Dec 2022 19:18:00 +0000
ROA not after: Wed 13 Dec 2023 19:23:00 +0000
asID: 268459
IP address blocks: 45.161.128.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:c2:89:06:0e:e6:7b:0a:e7:3d:5b:99:dd:9f:bd:36:78:10:d3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AD23F69FEB6F0C4185CED1CD33614808371B5CA
Validity
Not Before: Dec 14 19:18:00 2022 GMT
Not After : Dec 13 19:23:00 2023 GMT
Subject: CN=E9BC9916E31C97A95721F2366B34531954BDD5A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9f:3f:ab:ef:27:83:21:2c:10:51:11:13:7f:
9d:57:69:16:2a:79:08:91:d8:cf:e7:e1:57:19:51:
2b:96:53:b2:e1:99:bc:c4:ee:9a:3f:ea:e8:ec:cb:
9a:08:64:eb:ad:40:6d:59:f2:bc:d5:ab:a2:bd:24:
aa:56:62:61:27:b3:46:70:16:b3:b5:9e:53:30:95:
66:36:72:8f:06:e7:c7:4d:f4:1f:25:ae:76:9b:44:
3f:90:36:40:ef:a1:a2:4d:41:a4:44:30:32:5c:3f:
62:2d:9c:8b:0a:1d:a9:c6:32:5e:a8:13:1d:7e:c5:
86:b2:2e:a7:e4:f2:e4:8c:3a:ce:be:8b:00:41:d7:
64:18:97:00:0c:eb:91:93:52:50:8b:59:c4:1e:df:
be:03:3a:f7:71:ea:31:23:23:7e:4e:0e:72:b0:04:
18:f2:3f:95:17:e7:d2:e7:be:2d:40:b8:e6:b1:4e:
7f:eb:07:f2:89:08:26:fb:63:3c:b2:fe:2b:70:c1:
87:dc:d2:3f:af:97:bd:21:bd:bf:5a:c4:ea:a6:c0:
6c:e4:c9:1a:4b:f2:0a:23:75:7f:f0:16:39:5b:be:
ed:45:69:5d:80:13:64:85:78:c1:99:9e:35:9c:3b:
a1:9d:12:bd:95:44:99:14:3c:51:62:32:f9:c4:f5:
50:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BC:99:16:E3:1C:97:A9:57:21:F2:36:6B:34:53:19:54:BD:D5:A1
X509v3 Authority Key Identifier:
keyid:4A:D2:3F:69:FE:B6:F0:C4:18:5C:ED:1C:D3:36:14:80:83:71:B5:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/4AD23F69FEB6F0C4185CED1CD33614808371B5CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AD23F69FEB6F0C4185CED1CD33614808371B5CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/34352e3136312e3132382e302f32322d3234203d3e20323638343539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.161.128.0/22
Signature Algorithm: sha256WithRSAEncryption
d3:76:32:74:fb:26:53:17:d1:0b:74:b8:c4:dc:22:66:a4:83:
2f:fa:9d:0f:52:92:c6:78:f9:59:fc:50:4c:c6:f6:eb:80:81:
07:73:f7:f6:00:99:fe:00:0b:02:9e:0d:e1:64:d8:77:0c:9e:
3a:7d:ad:fa:fb:3e:63:27:af:b5:89:7f:f6:0e:8f:9c:0d:b8:
40:1a:25:95:71:79:18:2e:97:c0:ab:f4:29:6f:98:01:a1:1f:
cf:56:68:46:c3:c3:dc:9e:51:45:a5:a3:5a:00:80:a9:5d:08:
0e:f2:a3:2b:67:c7:ff:8e:07:6a:63:2f:c8:bb:df:2b:db:fb:
8a:06:4a:d2:32:e1:a4:ba:97:69:ce:d7:8d:48:23:6c:74:f7:
c2:9e:cd:91:b5:80:4f:e8:ba:43:6a:1f:ce:f1:fb:29:ff:d7:
68:9e:c3:af:2a:84:6b:83:c3:d6:ab:21:c9:f1:28:e7:6d:e5:
67:d3:ec:de:bd:93:f0:3b:bb:d2:b1:50:6a:cf:b0:bc:d0:c0:
0b:34:4b:e6:29:c1:04:c5:44:f4:54:cd:96:01:0e:62:cb:89:
73:50:4c:58:27:ff:65:8d:26:d2:c0:bb:94:9e:7c:5c:22:f2:
d1:37:cd:ae:b4:7a:97:ae:0f:98:dd:8e:47:f5:95:7a:a4:bb:
cb:67:a1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:19 2025 by rpki-client