![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e302e302f32322d3234203d3e20323633363633.roa
File: 3139312e3234312e302e302f32322d3234203d3e20323633363633.roa (raw, json)
Hash identifier: Z2F+GdhMVXZ3doAcGpH2xqBsSjMLmE0j42hvgf4vO/s=
Subject key identifier: B3:A3:94:92:44:F1:91:1E:61:9B:3B:27:99:DA:FA:AB:5E:0A:AB:60
Certificate issuer: /CN=9CC5CFF7E9D168495B51D83F3C355F10409474FF
Certificate serial: 4163FBE9AAAE37E365A9D583BC0BEFE572C10D78
Authority key identifier: 9C:C5:CF:F7:E9:D1:68:49:5B:51:D8:3F:3C:35:5F:10:40:94:74:FF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CC5CFF7E9D168495B51D83F3C355F10409474FF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e302e302f32322d3234203d3e20323633363633.roa
Signing time: Fri 22 Mar 2024 14:31:34 +0000
ROA not before: Fri 22 Mar 2024 14:26:34 +0000
ROA not after: Fri 21 Mar 2025 14:31:34 +0000
asID: 263663
IP address blocks: 191.241.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:63:fb:e9:aa:ae:37:e3:65:a9:d5:83:bc:0b:ef:e5:72:c1:0d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CC5CFF7E9D168495B51D83F3C355F10409474FF
Validity
Not Before: Mar 22 14:26:34 2024 GMT
Not After : Mar 21 14:31:34 2025 GMT
Subject: CN=B3A3949244F1911E619B3B2799DAFAAB5E0AAB60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:07:ad:15:02:33:73:7f:aa:9f:5f:a7:0b:36:
b5:8b:4c:2a:15:29:1b:83:9c:52:bb:cf:3e:da:04:
12:86:69:62:62:93:36:2d:53:57:fa:cf:0d:ee:14:
a8:e5:f9:8b:e2:4c:0d:1d:af:c2:12:70:d8:8c:f5:
6f:22:54:6e:4b:59:95:dd:71:13:21:6e:f1:ad:35:
1e:d8:0d:65:22:8b:74:7d:57:9e:24:cd:1b:be:98:
9b:b8:fc:f2:be:cb:bd:f2:7f:b9:30:a7:71:13:6f:
10:28:b0:55:12:d7:95:97:eb:49:8b:19:fd:f4:00:
80:e8:1c:05:0b:c9:f1:5f:d4:ea:f0:72:f7:87:c3:
01:00:69:08:85:f5:95:2b:59:46:29:39:9f:59:17:
ff:28:32:b5:33:b9:bb:04:52:05:63:34:df:dd:ef:
08:aa:f9:3e:2f:59:99:8a:b9:e0:24:d6:ef:02:ed:
32:b4:d2:67:ae:fe:cd:f3:c9:68:ae:a4:9c:13:56:
57:dd:26:98:42:e6:ac:1f:2d:f2:e7:e7:8d:f2:78:
b3:05:09:e0:1c:75:4b:85:3b:1f:77:9d:de:51:c3:
2a:8f:c5:bb:67:05:89:fb:20:73:ab:ed:e6:1a:8c:
56:75:9b:06:4e:28:79:37:7d:fe:88:a2:f8:dd:78:
b4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A3:94:92:44:F1:91:1E:61:9B:3B:27:99:DA:FA:AB:5E:0A:AB:60
X509v3 Authority Key Identifier:
keyid:9C:C5:CF:F7:E9:D1:68:49:5B:51:D8:3F:3C:35:5F:10:40:94:74:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/9CC5CFF7E9D168495B51D83F3C355F10409474FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CC5CFF7E9D168495B51D83F3C355F10409474FF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e302e302f32322d3234203d3e20323633363633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.241.0.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:02:fb:7f:44:bc:a7:df:c0:13:b1:c5:49:50:67:d0:a5:f7:
ed:8e:8c:7d:23:fc:d6:57:7d:25:b1:ac:b8:11:46:d3:a7:f3:
f8:86:49:59:f2:26:f4:55:ac:e5:3a:0c:bc:89:ff:52:5a:4c:
0e:f7:41:4b:04:5f:62:44:f7:a8:60:9c:09:18:f5:dc:53:26:
37:e1:c5:cc:97:5b:c7:65:e4:93:2a:87:2e:f8:22:4c:03:90:
d8:b7:89:e8:17:2c:1e:81:08:a3:82:e8:46:60:cf:99:ad:0a:
fb:52:61:99:4f:60:a4:e8:96:6b:64:c6:3b:ed:c3:39:98:1c:
56:ca:02:ba:2d:7b:f9:57:8e:15:96:2c:5d:b1:a4:9d:37:e5:
b4:04:e6:01:f8:cf:5d:3f:95:7f:37:3a:90:67:f7:a2:5b:f9:
27:d2:ab:9e:b0:61:ee:db:29:05:13:aa:dc:49:7d:85:52:ae:
05:86:49:38:35:75:39:af:f7:54:4d:b1:8d:5d:c0:67:e9:6a:
ce:45:7a:a5:6a:5d:f8:df:a7:5a:3a:f9:f0:df:fe:cd:19:1b:
6f:f0:af:f6:35:52:df:23:c4:e0:35:d8:88:30:dc:8f:a8:cc:
99:f3:68:52:47:40:29:06:b0:b6:0e:12:91:9f:27:62:67:11:
9d:57:bc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:51 2025 by rpki-client