![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/3138392e3132362e3133302e302f32342d3234203d3e20323732323238.roa
File: 3138392e3132362e3133302e302f32342d3234203d3e20323732323238.roa (raw, json)
Hash identifier: OF9/qqhaBwZIdfCZqb3326jk5w8XgxQpWPm+IZzJP1M=
Subject key identifier: DC:97:E7:31:E1:15:D8:49:F8:F2:C4:BA:B0:2C:CA:00:2E:FC:49:22
Certificate issuer: /CN=5DEE3B7AE1F18672B6F50C8AB591AA75DBB4F060
Certificate serial: 3255EE1A13FE6E997B4156977DA7FE1DF8F4B0C5
Authority key identifier: 5D:EE:3B:7A:E1:F1:86:72:B6:F5:0C:8A:B5:91:AA:75:DB:B4:F0:60
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DEE3B7AE1F18672B6F50C8AB591AA75DBB4F060.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/3138392e3132362e3133302e302f32342d3234203d3e20323732323238.roa
Signing time: Sun 05 Nov 2023 18:06:57 +0000
ROA not before: Sun 05 Nov 2023 18:01:57 +0000
ROA not after: Sun 03 Nov 2024 18:06:57 +0000
asID: 272228
IP address blocks: 189.126.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:55:ee:1a:13:fe:6e:99:7b:41:56:97:7d:a7:fe:1d:f8:f4:b0:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DEE3B7AE1F18672B6F50C8AB591AA75DBB4F060
Validity
Not Before: Nov 5 18:01:57 2023 GMT
Not After : Nov 3 18:06:57 2024 GMT
Subject: CN=DC97E731E115D849F8F2C4BAB02CCA002EFC4922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:91:2c:3e:ec:cb:4d:8d:ce:63:95:a9:a4:53:
24:06:0a:31:3d:42:9f:fc:ba:6d:0e:07:1c:89:f0:
e4:19:66:23:8d:98:18:d0:29:b1:cd:9c:02:94:29:
c5:0a:82:dc:72:cc:3f:7f:10:55:0c:ae:89:32:27:
ce:2b:b4:bd:c3:f1:1a:f3:4e:31:e9:b2:a3:c1:0c:
10:2d:56:65:5c:db:40:31:6e:be:fd:1a:97:29:cd:
3f:aa:9c:67:47:37:ad:bf:eb:78:40:13:73:85:e6:
1d:c0:95:85:5c:6a:de:05:cf:46:6c:fe:e7:b4:ca:
02:85:eb:c8:25:63:f7:3c:5f:f0:6e:63:f2:68:6d:
e3:a3:e0:f8:d6:13:75:b0:d8:17:bf:0c:4b:fe:72:
d6:58:a4:0e:be:69:51:32:a0:d9:61:82:ce:62:d6:
7b:4e:65:84:60:95:18:50:3f:7c:6a:e9:17:c2:be:
4f:3f:d2:89:ee:0c:ec:dc:4e:b4:7c:85:d6:98:79:
a9:8d:99:dd:81:49:d7:69:c2:d1:69:73:70:b0:cd:
b6:bb:76:ef:b7:3a:09:9b:ce:15:cd:05:09:69:5d:
19:71:85:c4:b4:9c:a3:92:e3:91:88:60:97:86:33:
29:15:9b:28:d7:fd:88:50:aa:78:3b:52:85:25:5c:
71:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:97:E7:31:E1:15:D8:49:F8:F2:C4:BA:B0:2C:CA:00:2E:FC:49:22
X509v3 Authority Key Identifier:
keyid:5D:EE:3B:7A:E1:F1:86:72:B6:F5:0C:8A:B5:91:AA:75:DB:B4:F0:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/5DEE3B7AE1F18672B6F50C8AB591AA75DBB4F060.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DEE3B7AE1F18672B6F50C8AB591AA75DBB4F060.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/3138392e3132362e3133302e302f32342d3234203d3e20323732323238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.126.130.0/24
Signature Algorithm: sha256WithRSAEncryption
41:63:1e:dc:22:3c:eb:11:8d:6c:38:b4:d1:e8:7d:87:b5:26:
90:5f:a5:a3:21:0a:4c:01:c7:84:20:f2:1c:64:65:b5:6a:a3:
94:a7:f4:52:ce:f0:2c:b9:5a:b6:c6:06:2a:a8:ca:45:82:5c:
e9:fa:da:ad:6c:ce:84:bc:0f:cd:ba:f7:3b:13:61:10:a0:0d:
2d:1b:74:4a:4b:2c:e8:83:f0:6b:da:e9:e1:03:74:70:59:c1:
e4:48:6a:49:dc:37:6e:bc:a4:43:67:f6:9b:c8:5f:d4:e4:51:
08:5e:91:c2:c6:5f:32:6b:40:4f:5b:28:41:70:87:dc:78:d8:
41:fa:99:4e:07:f6:a8:83:67:27:7f:69:58:e2:37:61:d0:cc:
dd:54:b1:66:b6:6a:ea:e3:3b:bb:4a:64:a8:47:e8:35:16:6b:
fe:72:8b:a3:36:c9:08:23:08:cc:f0:cd:c6:03:1a:6c:bf:1c:
d6:ed:3b:09:15:1b:18:61:29:e7:3b:9f:25:3f:5e:6c:73:d9:
4c:9c:1f:8d:49:3c:9c:fd:47:ec:34:c8:20:4d:9c:a8:ea:93:
1b:46:b4:90:7a:71:a6:0f:d6:fe:f9:68:eb:8f:e6:00:34:a3:
5a:74:da:02:55:dc:52:c8:da:7a:80:f4:44:0e:65:c0:f0:e9:
d2:4f:9f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:37 2025 by rpki-client