![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3230312e34362e3132382e302f31382d3332203d3e203238363135.roa
File: 3230312e34362e3132382e302f31382d3332203d3e203238363135.roa (raw, json)
Hash identifier: QeLiG1fzFThDeZdm90rLOjJN2uBzazKcTK52iSp93+E=
Subject key identifier: 36:D7:24:9F:9B:72:26:3E:90:10:50:15:15:D1:39:D9:85:D1:5C:76
Certificate issuer: /CN=3F2F047713EE5C35F02ED01388508451431B1C44
Certificate serial: 2BE7FDEC0944FFFAA24A5B8790F0D209A9CA4A4B
Authority key identifier: 3F:2F:04:77:13:EE:5C:35:F0:2E:D0:13:88:50:84:51:43:1B:1C:44
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F2F047713EE5C35F02ED01388508451431B1C44.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3230312e34362e3132382e302f31382d3332203d3e203238363135.roa
Signing time: Tue 02 Apr 2024 13:13:27 +0000
ROA not before: Tue 02 Apr 2024 13:08:27 +0000
ROA not after: Tue 01 Apr 2025 13:13:27 +0000
asID: 28615
IP address blocks: 201.46.128.0/18 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:e7:fd:ec:09:44:ff:fa:a2:4a:5b:87:90:f0:d2:09:a9:ca:4a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F2F047713EE5C35F02ED01388508451431B1C44
Validity
Not Before: Apr 2 13:08:27 2024 GMT
Not After : Apr 1 13:13:27 2025 GMT
Subject: CN=36D7249F9B72263E9010501515D139D985D15C76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f7:c4:3c:30:56:36:4c:e6:1a:15:45:55:ec:
43:03:b4:6a:42:ce:73:82:63:e8:53:3c:99:f2:ff:
62:a3:b5:83:62:fc:7e:a8:98:b0:05:62:fb:19:70:
ac:a2:94:4c:9a:67:a8:e3:3d:f4:1e:99:10:5e:48:
c1:b6:be:91:7b:50:7a:b6:37:cb:bc:4f:ba:33:c4:
5c:fa:c8:2b:75:d6:79:20:4e:7e:1e:cb:6a:a2:77:
2e:34:31:b7:c7:83:62:09:1e:39:85:5e:b1:90:28:
8c:b6:75:a1:39:85:18:25:d9:b6:2a:fc:bd:b3:37:
c7:dc:fa:75:85:f4:14:73:0d:28:d0:19:5e:f0:d6:
a5:ff:30:3e:e6:1d:b2:71:18:e2:f4:72:58:85:51:
20:72:31:1c:7a:93:95:e6:b4:a8:3e:7a:01:4f:d0:
7c:db:85:62:88:ac:c7:f0:25:f5:94:36:1a:51:a6:
20:86:eb:3c:20:7d:33:82:8e:bd:60:87:f1:e8:20:
53:f1:a5:99:3a:64:3f:11:b9:19:c4:a9:60:c7:75:
de:34:b6:48:69:b4:f2:46:57:4d:9c:2f:63:6e:4b:
e5:8d:08:04:5f:84:c0:5b:2c:b3:99:cf:44:1e:4b:
45:b5:fa:a3:1d:2a:52:71:2a:2b:56:73:60:cb:71:
81:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D7:24:9F:9B:72:26:3E:90:10:50:15:15:D1:39:D9:85:D1:5C:76
X509v3 Authority Key Identifier:
keyid:3F:2F:04:77:13:EE:5C:35:F0:2E:D0:13:88:50:84:51:43:1B:1C:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3F2F047713EE5C35F02ED01388508451431B1C44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F2F047713EE5C35F02ED01388508451431B1C44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3230312e34362e3132382e302f31382d3332203d3e203238363135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.46.128.0/18
Signature Algorithm: sha256WithRSAEncryption
05:c5:fd:90:41:5a:5f:47:20:ab:4b:37:c4:b8:0d:a4:11:90:
17:e4:ea:cd:aa:eb:10:b8:14:13:b1:bc:7b:39:34:0c:60:55:
fd:27:57:b2:3f:db:84:7f:51:c4:99:e9:9e:77:26:cf:be:81:
1e:dd:24:d7:2a:e4:6f:1b:54:d7:b6:54:33:ac:13:ff:d9:b2:
0f:53:33:85:cf:14:a0:f0:8a:a9:80:c8:fb:0a:6b:47:ec:20:
6e:d5:5b:13:0e:ef:65:b1:9c:02:21:bb:43:bc:46:2c:41:cf:
a6:c1:93:b7:6d:64:d3:2a:36:d3:4b:9f:d0:5c:75:3e:69:b1:
0c:38:88:9e:38:6e:ef:c8:b6:bb:5f:ca:ec:52:99:e1:10:e0:
3b:b9:c5:19:40:c4:4a:60:78:47:e3:e7:9c:1d:27:09:d4:6c:
b1:c7:4e:db:46:4d:8b:6c:0e:96:28:ad:c0:db:cc:1f:b2:68:
c6:7f:8f:0d:d0:da:ef:8e:76:50:47:be:a4:17:a6:16:5f:03:
8b:8e:0d:b7:ae:9b:91:7d:1b:e5:57:70:56:e5:15:69:b2:40:
99:39:59:cb:e0:a3:10:25:f3:e7:96:2f:d2:4f:36:72:61:0f:
11:b4:b4:1e:76:e3:57:ae:75:4b:b2:30:e8:8e:6c:83:3a:d3:
8a:3e:a9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:02 2025 by rpki-client