![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/3133382e3230342e3133322e302f32322d3234203d3e20323633383838.roa
File: 3133382e3230342e3133322e302f32322d3234203d3e20323633383838.roa (raw, json)
Hash identifier: mmIj65E0kyjnP7bUFrpAZE7zIdmCNx4JSShjnc+c9yI=
Subject key identifier: 92:48:3B:A9:F1:76:92:AE:B6:90:22:9B:37:E0:89:3F:6B:84:9B:AF
Certificate issuer: /CN=BB31F175410F355458BCA52FD0C920629720C520
Certificate serial: 2B6D56D555144BDDC0E6A2545CB94727E7086717
Authority key identifier: BB:31:F1:75:41:0F:35:54:58:BC:A5:2F:D0:C9:20:62:97:20:C5:20
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB31F175410F355458BCA52FD0C920629720C520.cer
Subject info access: rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/3133382e3230342e3133322e302f32322d3234203d3e20323633383838.roa
Signing time: Mon 01 Jul 2024 02:26:24 +0000
ROA not before: Mon 01 Jul 2024 02:21:24 +0000
ROA not after: Mon 30 Jun 2025 02:26:24 +0000
asID: 263888
IP address blocks: 138.204.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:6d:56:d5:55:14:4b:dd:c0:e6:a2:54:5c:b9:47:27:e7:08:67:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BB31F175410F355458BCA52FD0C920629720C520
Validity
Not Before: Jul 1 02:21:24 2024 GMT
Not After : Jun 30 02:26:24 2025 GMT
Subject: CN=92483BA9F17692AEB690229B37E0893F6B849BAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4f:79:c3:53:77:16:86:a4:c6:33:82:34:e6:
f1:01:ed:e3:90:cd:c1:13:70:e7:ca:0d:70:f1:15:
a9:36:63:43:98:0b:ae:f8:8f:fa:8d:ac:7d:22:0b:
77:7e:f9:59:db:0a:bd:47:70:c6:23:03:11:e0:25:
47:11:ce:20:fe:10:4c:c1:33:5b:0f:a6:59:64:2d:
2a:24:a2:ca:44:89:01:6a:24:7e:74:a0:2e:ef:8a:
f2:a6:8b:a8:3a:be:9e:cc:22:a1:58:d2:2f:51:49:
12:b5:b3:d3:5e:a3:a3:2d:aa:a7:b2:8a:ca:64:62:
f9:81:83:d2:2e:23:39:3c:6b:f9:9a:d2:5e:5d:69:
97:f1:66:d0:ec:6d:ce:1b:65:15:51:14:1d:54:4f:
30:1f:e6:1e:e0:55:c6:39:d0:1a:eb:ba:87:f4:0f:
3d:e6:ac:53:db:86:5e:6e:28:a4:78:2a:3e:94:9d:
48:6c:31:4e:ab:ca:2f:50:38:f3:49:fb:bc:c6:e3:
59:2c:43:ba:98:ba:2d:28:19:2e:51:36:0c:6a:11:
55:03:a1:dc:62:a8:94:dc:aa:bf:f4:12:87:f2:c0:
cd:91:45:e1:5a:c3:4d:49:c6:73:1e:f3:9a:9f:2b:
91:00:a5:90:cb:d8:3d:1e:ea:39:b7:3e:41:bb:74:
93:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:48:3B:A9:F1:76:92:AE:B6:90:22:9B:37:E0:89:3F:6B:84:9B:AF
X509v3 Authority Key Identifier:
keyid:BB:31:F1:75:41:0F:35:54:58:BC:A5:2F:D0:C9:20:62:97:20:C5:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/BB31F175410F355458BCA52FD0C920629720C520.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB31F175410F355458BCA52FD0C920629720C520.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/3133382e3230342e3133322e302f32322d3234203d3e20323633383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.132.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:dc:49:bf:7a:9e:66:1b:ba:4c:b0:22:6e:59:12:04:91:58:
24:ee:75:b8:da:a5:b7:18:05:82:d1:de:16:1b:51:f7:67:77:
11:4f:4f:e4:ed:69:d9:f2:99:e6:cd:fe:ce:53:d3:ed:46:fb:
fe:a6:e6:56:56:8f:77:de:40:68:7d:bc:c9:ce:f7:72:2b:7c:
18:08:6a:ba:b2:c6:b0:02:05:01:07:1e:9b:cc:e5:66:9c:aa:
b4:28:1d:ee:0f:0d:36:d2:02:31:18:70:dc:68:1c:9f:64:39:
83:1b:a6:94:a4:ed:c3:33:56:38:df:f4:ef:ce:5a:82:4c:75:
2e:a7:09:dd:3a:f0:2c:6c:47:ae:db:a1:4c:34:41:d8:f7:44:
8a:c3:87:b1:7d:da:1f:d3:28:da:50:53:10:1d:61:20:ad:db:
e3:57:fa:60:57:41:91:29:c6:3f:86:be:9d:de:5f:44:aa:93:
aa:5f:0a:be:73:fe:fd:a8:59:64:2b:a1:78:76:3d:ea:31:e5:
14:b0:7b:82:27:da:24:10:9c:c1:1f:f1:26:5e:66:06:1d:41:
65:e1:ad:c3:ce:34:c5:b2:6c:ce:6f:8c:8d:01:4f:90:31:b2:
06:44:e2:bf:72:78:a8:9d:67:2f:ca:02:3e:46:a2:1f:14:aa:
38:0e:f8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:13 2025 by rpki-client