![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/3136382e3139362e3232302e302f32322d3232203d3e20323635343632.roa
File: 3136382e3139362e3232302e302f32322d3232203d3e20323635343632.roa (raw, json)
Hash identifier: zy9uVnWD4B5SPnReHTV/2ZLJkKKEBV8Z7PT810GSsOA=
Subject key identifier: 36:58:E6:F2:A3:B0:8B:12:8D:3E:96:69:68:52:4C:9C:6A:61:FF:79
Certificate issuer: /CN=1BD78CF68D71E5E540716C9B42A8969E9BE28F22
Certificate serial: 111A6FC49835BB9AC5C8BD4B9DBC30F8E8B2AD33
Authority key identifier: 1B:D7:8C:F6:8D:71:E5:E5:40:71:6C:9B:42:A8:96:9E:9B:E2:8F:22
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BD78CF68D71E5E540716C9B42A8969E9BE28F22.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/3136382e3139362e3232302e302f32322d3232203d3e20323635343632.roa
Signing time: Mon 26 Jun 2023 13:08:05 +0000
ROA not before: Mon 26 Jun 2023 13:03:05 +0000
ROA not after: Mon 24 Jun 2024 13:08:05 +0000
asID: 265462
IP address blocks: 168.196.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:1a:6f:c4:98:35:bb:9a:c5:c8:bd:4b:9d:bc:30:f8:e8:b2:ad:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BD78CF68D71E5E540716C9B42A8969E9BE28F22
Validity
Not Before: Jun 26 13:03:05 2023 GMT
Not After : Jun 24 13:08:05 2024 GMT
Subject: CN=3658E6F2A3B08B128D3E966968524C9C6A61FF79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9b:8b:5f:7c:35:6c:79:93:4e:95:be:8f:e6:
0b:7d:ba:84:2b:9d:96:8c:ca:42:34:a5:b0:68:a8:
15:0b:4e:3a:06:70:49:73:c4:52:f7:70:e6:b5:da:
6e:aa:e5:a5:21:15:13:9c:a6:74:24:c2:33:8b:08:
e4:b1:5d:4d:5e:d7:a8:1e:9a:63:d0:12:00:de:ea:
6c:0e:55:7c:0d:94:f8:29:d5:e5:ab:94:43:49:5d:
bc:de:ff:40:47:ba:aa:cf:7d:27:3b:33:7e:c4:66:
38:e7:59:e9:88:0e:c6:a6:a5:35:ad:6a:15:46:82:
7a:a2:fe:bd:2a:45:fd:07:44:10:98:49:50:81:64:
af:d0:8e:80:9e:ae:c4:77:99:63:48:94:c4:f3:30:
d4:6e:8e:cd:aa:dd:a2:a9:a0:f5:da:ed:83:2c:69:
e4:85:ee:00:83:0e:62:2a:f5:63:8a:80:f0:10:3e:
7b:e7:0e:9c:13:67:a6:ee:94:29:fb:60:7d:67:58:
83:a6:68:0d:ca:2d:7f:af:06:29:6c:ab:6e:92:5b:
79:5b:c9:94:31:52:44:fc:d3:88:32:1d:be:35:44:
96:5c:82:be:ac:c0:da:bc:94:0d:62:b2:c5:1e:b4:
ad:c8:df:77:72:53:c4:3b:14:0d:f0:00:0f:59:62:
9a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:58:E6:F2:A3:B0:8B:12:8D:3E:96:69:68:52:4C:9C:6A:61:FF:79
X509v3 Authority Key Identifier:
keyid:1B:D7:8C:F6:8D:71:E5:E5:40:71:6C:9B:42:A8:96:9E:9B:E2:8F:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/1BD78CF68D71E5E540716C9B42A8969E9BE28F22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BD78CF68D71E5E540716C9B42A8969E9BE28F22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/3136382e3139362e3232302e302f32322d3232203d3e20323635343632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.196.220.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:d8:57:07:54:0b:0e:cc:bc:ca:52:9b:67:ef:e7:be:0e:2e:
8c:e7:43:df:91:20:e1:8a:a5:dd:00:4c:3c:38:cc:5d:61:cd:
d3:4e:8c:f1:e0:25:8e:9b:65:10:3f:c1:52:04:85:da:95:ee:
7b:9e:03:e3:1f:e9:cc:f9:82:96:a2:b5:5f:9d:ec:63:ee:10:
96:59:de:fc:fc:b6:3b:fc:c1:a0:b1:c8:16:70:06:44:1f:f2:
9c:ef:16:07:19:29:f3:6c:57:89:12:33:b0:a9:90:8f:ae:50:
1e:a4:ca:c8:66:f3:f9:dd:ef:ea:2c:24:df:9a:96:14:90:62:
a5:5c:41:5f:f6:06:ed:ee:83:08:a8:fd:ed:63:b7:92:52:ad:
65:75:29:de:e6:5f:59:3e:71:9c:7a:57:4d:be:14:89:24:5b:
2d:1e:54:d8:5d:b7:3e:cb:75:d0:63:58:ed:9d:9a:35:1a:ed:
bd:c6:08:76:33:b5:90:6d:74:28:ff:ab:47:36:8a:c3:ee:81:
43:c6:b0:25:d9:b3:97:d0:12:74:ee:da:37:20:f2:ae:6a:98:
6d:ea:58:10:11:78:45:14:94:73:58:dd:3e:e5:27:37:2c:39:
b1:33:e5:7f:64:10:83:96:74:3c:f9:a1:2b:84:32:70:02:a8:
cd:05:e5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:51 2025 by rpki-client