![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/34352e3136352e3230382e302f32332d3233203d3e20323638363932.roa
File: 34352e3136352e3230382e302f32332d3233203d3e20323638363932.roa (raw, json)
Hash identifier: HxOttbuit05O3l0G8TqY3knwGILLPkvLuXsxc9V459k=
Subject key identifier: FC:77:78:EF:96:0D:70:D0:68:03:1D:C2:CD:8B:73:60:FD:80:08:91
Certificate issuer: /CN=2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07
Certificate serial: 592C6489D95D6DE8CE656DE46F86FC62DAB6BA1C
Authority key identifier: 2F:01:25:A1:30:8A:C4:DE:6A:3A:CC:AF:CC:3D:AD:8D:0D:C5:2E:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/34352e3136352e3230382e302f32332d3233203d3e20323638363932.roa
Signing time: Fri 20 Sep 2024 18:57:37 +0000
ROA not before: Fri 20 Sep 2024 18:52:37 +0000
ROA not after: Fri 19 Sep 2025 18:57:37 +0000
asID: 268692
IP address blocks: 45.165.208.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:2c:64:89:d9:5d:6d:e8:ce:65:6d:e4:6f:86:fc:62:da:b6:ba:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07
Validity
Not Before: Sep 20 18:52:37 2024 GMT
Not After : Sep 19 18:57:37 2025 GMT
Subject: CN=FC7778EF960D70D068031DC2CD8B7360FD800891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ea:d9:79:59:20:de:33:b6:4b:62:0a:1f:3f:
46:61:a1:b8:35:32:0f:0a:53:90:c7:f2:c1:39:74:
e8:8f:77:99:22:48:1e:f7:cb:f8:b5:a4:ef:a5:32:
8e:99:7e:33:3d:cf:ec:a1:7f:03:23:25:28:0f:ce:
a5:b3:c7:09:28:55:34:f8:d2:c9:4b:d8:27:b4:c3:
d9:9a:df:1c:99:9f:60:d6:2d:76:85:fc:20:a5:e4:
e3:6c:a3:8a:e1:07:9f:14:c7:69:af:53:9e:77:e3:
22:19:79:82:38:d7:58:7f:16:f2:83:7e:e5:44:d3:
eb:c1:ea:2d:d7:8b:1c:82:e9:f5:86:80:d7:e0:f5:
98:79:66:14:ae:b0:df:b3:c7:3c:27:df:83:68:f8:
58:7e:a9:db:8f:05:8f:b5:c6:47:51:fb:31:39:21:
6f:63:b8:34:5e:52:cd:77:7c:8c:7b:e9:09:5d:75:
9b:ae:27:66:ac:8d:48:56:13:8e:8a:41:bc:aa:0d:
0d:5a:39:d2:3f:48:e6:04:f7:03:47:8d:3e:31:2c:
1b:a7:4a:35:f6:60:08:5a:85:db:e9:c5:4c:0c:48:
6e:3d:69:40:1b:c9:7a:ee:6f:87:24:b8:60:c1:8b:
2f:ee:c2:5b:2b:d9:6e:4d:bc:70:98:35:56:44:e0:
28:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:77:78:EF:96:0D:70:D0:68:03:1D:C2:CD:8B:73:60:FD:80:08:91
X509v3 Authority Key Identifier:
keyid:2F:01:25:A1:30:8A:C4:DE:6A:3A:CC:AF:CC:3D:AD:8D:0D:C5:2E:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/34352e3136352e3230382e302f32332d3233203d3e20323638363932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.165.208.0/23
Signature Algorithm: sha256WithRSAEncryption
66:6d:41:23:3a:42:0c:df:11:4c:bf:71:80:8a:0f:1a:83:53:
40:a9:28:90:9a:f2:15:dd:49:19:20:cb:b8:5b:25:47:58:1c:
db:00:5c:07:47:ec:d1:1f:34:1d:3f:75:77:c3:cf:8e:45:c7:
f6:b1:97:88:38:2c:ec:4a:4b:a8:ec:67:41:b4:a7:a0:fb:dc:
62:d5:3c:c9:5b:ed:53:13:6e:a0:2e:09:d8:3c:9f:20:0b:8a:
82:9e:40:d0:bb:b0:de:fd:82:ce:61:bb:ab:b0:97:82:7b:43:
15:78:7c:b0:f2:8e:b4:28:c9:b2:ac:71:bf:a0:7a:27:2a:22:
29:52:d4:ff:da:31:b4:8d:6f:e1:1e:bd:9c:8c:99:f2:38:6e:
c6:d7:4a:b3:6f:25:be:93:dc:02:2f:bd:df:b7:36:30:3c:3d:
78:e2:15:b8:73:e4:56:84:6a:1c:4e:73:0e:58:83:2d:f4:7c:
57:d3:86:5f:c9:67:54:a5:95:ef:33:17:ad:91:82:dd:23:df:
96:f2:1d:36:f4:c8:91:c2:9a:60:f3:b7:2a:84:c5:03:0d:80:
11:a8:7b:40:52:57:e2:77:2d:34:a5:db:b5:bc:26:b9:2a:e0:
06:4b:44:fa:66:1d:b4:cd:a5:ea:86:5a:c4:70:68:93:68:7d:
22:a5:9f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:19 2025 by rpki-client