![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8C9zA9XZgpM4uV7xXDCFGiHdjujU4V54MYpfhJbSjXyn/0/3138372e3130382e3130362e302f32342d3234203d3e203533313036.roa
File: 3138372e3130382e3130362e302f32342d3234203d3e203533313036.roa (raw, json)
Hash identifier: eAt1k38pjwZIGP+h0MZOFoAQsxbr597Uv+7eADXgFDw=
Subject key identifier: 20:4C:97:75:27:91:F7:A7:8B:0A:FB:54:04:21:7E:96:0E:8F:32:B8
Certificate issuer: /CN=DDE58F6D57B9038A0A10AD486DF07E91EFE9D424
Certificate serial: 4CFE210ACA23A8C7C1C1FDC436CE68E88A10D903
Authority key identifier: DD:E5:8F:6D:57:B9:03:8A:0A:10:AD:48:6D:F0:7E:91:EF:E9:D4:24
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDE58F6D57B9038A0A10AD486DF07E91EFE9D424.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8C9zA9XZgpM4uV7xXDCFGiHdjujU4V54MYpfhJbSjXyn/0/3138372e3130382e3130362e302f32342d3234203d3e203533313036.roa
Signing time: Wed 05 Jan 2022 15:53:06 +0000
ROA not before: Wed 05 Jan 2022 15:48:06 +0000
ROA not after: Wed 04 Jan 2023 15:53:06 +0000
asID: 53106
IP address blocks: 187.108.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:fe:21:0a:ca:23:a8:c7:c1:c1:fd:c4:36:ce:68:e8:8a:10:d9:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDE58F6D57B9038A0A10AD486DF07E91EFE9D424
Validity
Not Before: Jan 5 15:48:06 2022 GMT
Not After : Jan 4 15:53:06 2023 GMT
Subject: CN=204C97752791F7A78B0AFB5404217E960E8F32B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a1:06:b2:52:23:9b:a4:63:89:57:65:0e:c4:
82:7c:a6:2b:d7:2f:c1:17:a4:8c:1a:57:a5:1d:8b:
e9:43:12:34:d6:62:e3:85:b7:33:dd:f7:05:ae:1d:
53:6c:10:13:00:2a:76:55:d6:24:b4:0e:f3:74:8f:
8a:40:cb:b8:bd:82:8c:5c:c5:1b:a8:55:f9:b8:9c:
b9:ef:80:4f:95:13:e2:31:d8:80:55:50:dd:65:8e:
4c:27:01:65:d2:23:ad:cf:50:9d:ae:ad:5d:3d:e7:
48:56:ea:ef:fa:18:61:a4:74:e2:5e:d8:24:85:76:
4a:78:98:f9:b5:ff:57:7e:a3:8a:78:5f:8d:5a:d9:
d2:f2:58:00:32:61:21:1d:a8:df:ab:35:4c:c3:1c:
aa:67:c2:6d:c1:ad:5e:29:23:47:2b:e1:8d:4b:bc:
bf:d8:ca:f1:ed:7b:99:20:ab:65:6a:ed:f1:e5:a4:
d3:ad:3a:e0:0e:fb:27:26:f2:ce:59:9b:6b:d5:6a:
4f:d8:0e:46:03:4b:79:65:24:bf:55:e9:49:ad:55:
04:ed:a6:45:55:dc:2e:30:df:6b:5b:05:cc:5f:69:
0b:4f:9d:0f:7f:e5:76:df:a6:e2:73:e0:1f:06:88:
16:ae:df:23:b1:76:17:23:e6:0c:19:90:c7:87:ca:
25:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4C:97:75:27:91:F7:A7:8B:0A:FB:54:04:21:7E:96:0E:8F:32:B8
X509v3 Authority Key Identifier:
keyid:DD:E5:8F:6D:57:B9:03:8A:0A:10:AD:48:6D:F0:7E:91:EF:E9:D4:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8C9zA9XZgpM4uV7xXDCFGiHdjujU4V54MYpfhJbSjXyn/0/DDE58F6D57B9038A0A10AD486DF07E91EFE9D424.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDE58F6D57B9038A0A10AD486DF07E91EFE9D424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8C9zA9XZgpM4uV7xXDCFGiHdjujU4V54MYpfhJbSjXyn/0/3138372e3130382e3130362e302f32342d3234203d3e203533313036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.108.106.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:ce:fc:88:d4:bd:90:c1:86:ae:6a:20:d8:f4:cb:ac:91:3a:
33:fa:90:3a:94:cf:d2:a4:48:ef:14:e2:da:d4:b1:cb:2d:fa:
be:cc:14:c2:9e:ce:8f:c6:67:36:90:7e:bf:54:d6:99:b5:bc:
43:ce:01:41:15:f3:34:81:94:b7:5b:ec:97:ea:0f:21:f6:a0:
92:33:18:d5:d9:cc:4a:25:f3:c9:96:57:c3:2d:3f:55:6b:c7:
cd:4b:b8:e4:37:ef:a5:17:0f:4f:a3:8d:1f:5f:29:91:0a:7f:
5d:c5:72:5b:9e:91:b3:54:76:e5:ac:2c:27:71:82:cf:db:cc:
46:65:10:2a:74:ff:db:dc:37:8a:ea:a5:d8:d2:83:91:6a:c2:
fb:b2:58:d2:9d:d1:8d:26:95:c7:23:d9:a8:10:3e:04:db:ba:
13:7f:1b:e1:97:15:75:8c:8e:e1:82:17:72:2b:74:93:70:8f:
10:82:b6:94:98:96:c8:1e:2c:dc:58:73:11:14:23:8f:63:4a:
aa:dc:7c:8e:d1:4f:ac:65:2b:cf:ea:4f:fc:6e:a9:db:f3:f6:
7e:60:80:17:5a:5c:f6:ad:ec:1d:12:37:b5:d3:94:1d:d3:e9:
e5:1a:16:8d:06:67:fd:1c:ca:6c:d8:8f:fe:1f:80:f3:0a:8c:
5c:e4:67:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:13:30 2025 by rpki-client