![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/34352e3136372e3134302e302f32342d3234203d3e20323638303131.roa
File: 34352e3136372e3134302e302f32342d3234203d3e20323638303131.roa (raw, json)
Hash identifier: bRTwcGlI4NLggTdzBA/iGlzodiNCMpCvUVTOOPwAhD8=
Subject key identifier: AD:80:6C:E7:E3:DD:DD:81:C4:08:87:D6:E8:EE:F9:4F:99:1E:4D:72
Certificate issuer: /CN=8414455E5995EE7C674A31A6E51442E29CB60FB5
Certificate serial: 1F570E2F6917FD47D2B466BF6EB9126935659467
Authority key identifier: 84:14:45:5E:59:95:EE:7C:67:4A:31:A6:E5:14:42:E2:9C:B6:0F:B5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8414455E5995EE7C674A31A6E51442E29CB60FB5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/34352e3136372e3134302e302f32342d3234203d3e20323638303131.roa
Signing time: Wed 22 Nov 2023 17:53:00 +0000
ROA not before: Wed 22 Nov 2023 17:48:00 +0000
ROA not after: Wed 20 Nov 2024 17:53:00 +0000
asID: 268011
IP address blocks: 45.167.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:57:0e:2f:69:17:fd:47:d2:b4:66:bf:6e:b9:12:69:35:65:94:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8414455E5995EE7C674A31A6E51442E29CB60FB5
Validity
Not Before: Nov 22 17:48:00 2023 GMT
Not After : Nov 20 17:53:00 2024 GMT
Subject: CN=AD806CE7E3DDDD81C40887D6E8EEF94F991E4D72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:43:a2:02:27:70:84:24:bd:38:7f:ee:a7:db:
d6:49:6d:aa:14:a0:0a:8f:50:ed:e2:50:d6:ba:f7:
90:f8:78:48:f8:1f:7e:af:5b:e2:e5:01:4e:c6:7c:
ca:c8:16:2d:8c:37:ca:7c:a4:01:7b:bc:aa:db:df:
df:bc:b4:ef:d5:43:da:98:64:c7:66:a8:4f:14:bd:
d0:1a:76:76:32:7b:33:97:7c:6c:27:83:f3:22:9b:
2c:2c:ea:b8:0f:b2:25:2f:84:d6:3c:0d:30:0e:54:
91:94:03:b3:23:32:33:d9:45:5f:7f:4f:6e:96:32:
06:8d:6e:67:0d:1f:16:f9:0c:69:53:00:60:6e:69:
3c:14:dd:8d:bd:72:43:d3:cf:92:b0:a2:d4:9f:05:
55:61:76:8e:97:54:22:6d:f8:1a:cc:a8:cc:32:2d:
4d:66:f2:89:91:06:ba:6c:07:67:28:f0:11:91:19:
32:81:f2:59:67:ac:16:7b:f6:03:50:95:53:00:7b:
e2:b6:05:dd:cb:e2:40:7f:c4:57:f1:44:5a:2b:df:
b0:3c:d6:f1:47:91:a0:21:79:b3:80:7d:11:bf:1f:
46:fa:18:3b:7f:64:65:32:cc:51:73:ac:6a:7e:ad:
ec:24:58:a0:aa:fe:bc:44:4b:7c:06:05:32:23:67:
27:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:80:6C:E7:E3:DD:DD:81:C4:08:87:D6:E8:EE:F9:4F:99:1E:4D:72
X509v3 Authority Key Identifier:
keyid:84:14:45:5E:59:95:EE:7C:67:4A:31:A6:E5:14:42:E2:9C:B6:0F:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/8414455E5995EE7C674A31A6E51442E29CB60FB5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8414455E5995EE7C674A31A6E51442E29CB60FB5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/34352e3136372e3134302e302f32342d3234203d3e20323638303131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.167.140.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:4b:95:f9:36:57:29:43:72:73:f8:88:3c:98:97:4d:e0:47:
19:c7:28:d5:47:b1:8c:41:cc:28:cf:5f:70:9d:12:aa:94:a2:
a1:18:f6:67:72:45:c2:ed:06:dc:f7:f8:9d:51:b1:eb:f5:dd:
98:28:8d:f8:42:f2:58:ac:26:0d:63:dc:21:b1:1d:98:09:c6:
d6:9a:36:57:c7:9f:0a:e2:20:7c:05:76:98:f8:99:05:f9:37:
cd:0a:c1:2b:ad:5c:6f:3b:d1:a6:f2:1f:82:34:26:bb:c2:99:
9a:a1:b8:25:95:ee:ea:d1:b3:c2:32:47:63:f9:59:49:d5:57:
af:0d:4f:8b:05:f4:50:1c:9b:27:05:b1:b5:6d:a5:c1:49:e6:
76:f3:d4:70:36:86:da:08:6f:eb:8e:9a:0f:d3:b3:af:f8:1a:
82:82:9a:b3:d1:11:e1:b0:1c:92:63:7e:99:bb:86:43:b4:c9:
42:4b:d2:94:35:fb:53:de:47:98:ee:f1:05:a5:5a:de:2e:b0:
87:65:25:0f:67:3a:32:d9:32:e8:80:d3:4b:52:d4:07:b3:a8:
bf:47:b6:68:46:96:6d:02:61:e9:ca:e8:fe:d4:2f:1e:b8:b0:
8a:ba:e2:8c:59:9e:88:78:42:71:99:16:fd:c4:b0:16:7b:63:
3e:5b:72:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:11 2025 by rpki-client