![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8Zc1khj4cMeUVCWbGVojY1UnppfecwpeXtBcqas7eF1B/0/3137372e3132382e3134302e302f32322d3332203d3e20323633313331.roa
File: 3137372e3132382e3134302e302f32322d3332203d3e20323633313331.roa (raw, json)
Hash identifier: ZoxWvcWhvPMfZzZ9KKwP+KK8rYjaVBIXZPTbFMpZBlc=
Subject key identifier: 14:D7:FE:2F:23:BA:28:78:2D:E5:6C:6C:94:F5:B0:19:E8:4E:3B:EA
Certificate issuer: /CN=C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5
Certificate serial: 67AAD2E012D3401CC8C54735E6772D7B2D4F86DA
Authority key identifier: C0:1E:7B:A6:EB:CA:7F:BC:62:59:C9:6B:99:1D:32:95:C8:46:B7:B5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8Zc1khj4cMeUVCWbGVojY1UnppfecwpeXtBcqas7eF1B/0/3137372e3132382e3134302e302f32322d3332203d3e20323633313331.roa
Signing time: Tue 25 Jul 2023 20:08:08 +0000
ROA not before: Tue 25 Jul 2023 20:03:08 +0000
ROA not after: Tue 23 Jul 2024 20:08:08 +0000
asID: 263131
IP address blocks: 177.128.140.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:aa:d2:e0:12:d3:40:1c:c8:c5:47:35:e6:77:2d:7b:2d:4f:86:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5
Validity
Not Before: Jul 25 20:03:08 2023 GMT
Not After : Jul 23 20:08:08 2024 GMT
Subject: CN=14D7FE2F23BA28782DE56C6C94F5B019E84E3BEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1d:bc:ff:0f:04:29:9c:ed:02:cb:dd:53:51:
89:87:66:52:a8:64:f2:af:af:31:8c:6d:26:dc:12:
78:51:62:8d:fb:45:ae:cd:88:da:c4:a0:84:6d:a5:
c4:3e:b8:be:33:35:71:3c:73:9a:43:1d:7d:ad:8d:
01:6c:80:4d:96:5e:bb:7d:65:a0:7c:bc:c4:ce:eb:
3e:0b:62:4f:2b:94:34:84:2b:4a:53:16:fa:d7:a8:
d5:53:5b:ed:d7:07:30:1e:01:45:37:cf:c0:8b:9f:
cf:88:8a:22:81:45:32:05:52:08:8c:62:9f:06:7e:
64:36:d6:7b:46:58:82:ae:0b:a9:1d:76:d3:bc:6f:
d4:ef:dc:25:8e:30:1e:12:3c:37:f9:8f:4f:8f:65:
e4:d4:7c:82:d9:ad:1f:be:26:32:bb:57:78:19:88:
35:40:cd:af:b5:e4:24:6f:ab:3a:93:e8:eb:02:94:
cc:a6:56:2d:e5:8a:52:41:2d:d0:b1:55:19:e2:d2:
eb:98:28:48:ee:e7:de:d0:cf:ad:33:4f:44:3f:88:
69:be:c0:71:3a:23:e5:0b:65:cd:b8:e1:04:e9:74:
05:16:ff:4e:7c:a6:75:18:4e:6e:6a:e8:8d:ff:98:
fa:00:ba:a7:12:d7:6d:e3:fd:49:bc:78:6f:a2:6f:
e6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D7:FE:2F:23:BA:28:78:2D:E5:6C:6C:94:F5:B0:19:E8:4E:3B:EA
X509v3 Authority Key Identifier:
keyid:C0:1E:7B:A6:EB:CA:7F:BC:62:59:C9:6B:99:1D:32:95:C8:46:B7:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8Zc1khj4cMeUVCWbGVojY1UnppfecwpeXtBcqas7eF1B/0/C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Zc1khj4cMeUVCWbGVojY1UnppfecwpeXtBcqas7eF1B/0/3137372e3132382e3134302e302f32322d3332203d3e20323633313331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.128.140.0/22
Signature Algorithm: sha256WithRSAEncryption
14:30:a6:23:9f:ca:b8:12:71:06:ee:14:46:2c:7b:a2:64:33:
b9:85:9d:40:f3:3a:32:5e:12:8f:14:d0:b9:34:cd:76:ef:a6:
ed:a3:f1:dd:39:dd:d3:f2:7f:62:48:d7:44:2b:a3:aa:c8:73:
21:7e:9e:19:75:73:37:3a:55:05:9b:52:9b:bc:47:92:6a:61:
5e:5e:d0:2e:05:ed:60:c7:fe:68:7b:d4:02:e7:71:38:8b:14:
1d:5f:56:e1:5e:c8:f4:93:ef:56:f3:66:0f:b2:a4:67:02:de:
68:45:cc:8b:01:62:b3:a8:0c:41:15:56:38:d1:a3:85:3a:f0:
e5:09:df:c8:1c:ef:55:00:c9:87:d6:44:b6:4e:bf:99:24:55:
00:62:ff:fe:31:c9:e7:67:1c:d0:53:19:8e:4c:d5:05:05:f8:
39:d4:b6:f5:3d:e6:99:15:e7:2e:a6:b0:c2:23:25:e1:5c:b9:
32:07:17:9c:28:99:4e:df:cd:8a:3e:a6:9a:49:70:f5:f5:81:
97:d2:8d:ea:b0:c6:a1:62:dc:c2:bb:2e:a5:f6:ee:1b:b0:9f:
b7:22:b9:fb:ae:36:c9:76:37:14:59:f1:5b:3a:bc:53:fb:a5:
ff:57:b1:2c:82:81:9e:ba:c9:49:1a:fd:51:33:1d:d7:fb:c2:
0f:9e:cc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:24:47 2025 by rpki-client