![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/3132382e3230312e3135372e302f32342d3234203d3e20323636363335.roa
File: 3132382e3230312e3135372e302f32342d3234203d3e20323636363335.roa (raw, json)
Hash identifier: uC8qrugRPrmw2aL0VOaN+mge/WIUhrsvT1fu9aVsPPM=
Subject key identifier: B6:99:B7:BE:6A:75:71:1F:DB:2A:B2:7F:B2:33:9C:09:BB:7E:12:D9
Certificate issuer: /CN=BCBE7BC3A7506B733BF9EF192E7ECF334970777B
Certificate serial: 2CF985BE6763E0444F60F5DCAFF6DF9449D620AE
Authority key identifier: BC:BE:7B:C3:A7:50:6B:73:3B:F9:EF:19:2E:7E:CF:33:49:70:77:7B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCBE7BC3A7506B733BF9EF192E7ECF334970777B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/3132382e3230312e3135372e302f32342d3234203d3e20323636363335.roa
Signing time: Mon 30 Oct 2023 18:04:39 +0000
ROA not before: Mon 30 Oct 2023 17:59:39 +0000
ROA not after: Mon 28 Oct 2024 18:04:39 +0000
asID: 266635
IP address blocks: 128.201.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:f9:85:be:67:63:e0:44:4f:60:f5:dc:af:f6:df:94:49:d6:20:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCBE7BC3A7506B733BF9EF192E7ECF334970777B
Validity
Not Before: Oct 30 17:59:39 2023 GMT
Not After : Oct 28 18:04:39 2024 GMT
Subject: CN=B699B7BE6A75711FDB2AB27FB2339C09BB7E12D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f0:0f:b1:b1:e7:a0:f7:d9:aa:e8:87:29:62:
ed:99:d0:fb:a0:76:16:75:bb:87:2c:38:41:18:ef:
fd:3c:e1:17:ab:6f:b4:25:f6:fc:02:27:7a:44:81:
ab:17:60:1a:9d:d3:a0:45:c5:54:ca:f8:b7:07:aa:
83:23:73:b6:26:b6:66:cd:af:48:71:ea:bc:2c:07:
4e:2f:05:33:e4:d2:ec:f8:b8:74:96:4d:28:d9:7f:
26:88:95:a5:d8:bb:fb:f6:1f:1b:6a:da:5f:d2:ab:
96:38:bd:94:1f:aa:7d:ca:4c:9b:63:b5:38:da:a8:
1f:d5:2d:aa:cf:b5:bf:69:09:c0:6b:77:84:4a:b5:
54:94:a6:ce:e2:3d:8b:26:0e:ad:b8:87:67:90:7b:
ae:2a:ea:bc:a9:e4:63:e2:2f:23:df:cf:1b:87:42:
a1:fd:5a:1d:47:3e:d1:87:15:64:c5:4c:2a:21:50:
1f:80:6d:e4:26:63:53:ec:ba:fe:2a:79:d9:02:41:
9f:1c:9f:d9:86:23:69:4d:b0:36:2e:93:6e:00:6f:
b0:ea:1e:e5:68:a3:39:93:be:a8:24:bb:f9:c7:c4:
8c:41:e3:28:80:71:63:ea:55:74:32:ab:72:b2:01:
23:b2:30:7b:31:82:e5:a4:68:77:91:e3:1c:9c:b5:
61:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:99:B7:BE:6A:75:71:1F:DB:2A:B2:7F:B2:33:9C:09:BB:7E:12:D9
X509v3 Authority Key Identifier:
keyid:BC:BE:7B:C3:A7:50:6B:73:3B:F9:EF:19:2E:7E:CF:33:49:70:77:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/BCBE7BC3A7506B733BF9EF192E7ECF334970777B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCBE7BC3A7506B733BF9EF192E7ECF334970777B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/3132382e3230312e3135372e302f32342d3234203d3e20323636363335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.157.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:27:0b:47:53:fd:a3:13:9a:6c:eb:a1:1a:b0:0c:bc:7c:33:
6e:13:2c:52:5e:31:5a:ce:ee:e8:55:be:71:47:7c:c0:c5:a0:
21:2a:33:6e:18:a5:26:50:b3:f8:c7:65:f5:f6:74:6a:1c:48:
f4:af:f0:77:d5:94:a5:66:42:82:73:ad:7f:3e:4c:dd:92:9a:
6e:bb:01:33:d5:24:80:0a:96:12:0d:b2:d0:27:40:7d:5f:f1:
a4:9e:44:42:93:30:f7:54:6a:43:10:a0:41:99:8e:4d:0f:1b:
4f:07:f0:1a:a9:14:42:82:3e:bc:d4:12:29:70:03:7b:c5:a5:
f4:c0:03:89:5b:db:91:b7:27:56:a8:34:46:fa:21:67:e1:14:
60:5d:5f:68:bd:b5:f0:cd:a5:8d:b9:6c:30:e6:f6:b1:d0:e8:
b0:bf:c0:40:4f:81:8c:88:b3:a2:0f:16:f2:5b:a9:b1:07:4d:
d8:98:8e:82:98:91:03:fa:2b:d8:77:d7:87:a3:86:4d:55:2b:
f1:9f:48:63:dd:84:0e:d3:aa:3c:f5:1c:23:26:c0:18:b9:a8:
4d:dc:0b:4a:0c:da:1c:19:ea:90:4e:e5:6f:74:53:89:3b:40:
be:c0:bc:66:d5:69:72:72:7c:b7:a7:20:cf:49:ad:34:2f:e8:
32:18:42:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:55 2025 by rpki-client