![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/0/3133382e33362e3231322e302f32332d3233203d3e20323634353930.roa
File: 3133382e33362e3231322e302f32332d3233203d3e20323634353930.roa (raw, json)
Hash identifier: vGheHH0xp0LzYQuHmKnwcoLl4ZK13bRFPqiWMJ4Na8Q=
Subject key identifier: B9:83:28:15:DC:B8:33:5B:36:D5:40:6A:0D:8A:58:48:EF:26:B5:13
Certificate issuer: /CN=DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50
Certificate serial: 1E0AADE01E2E7058F2C616DF1BBC01F2A94BD669
Authority key identifier: DA:9D:8C:17:FD:EE:E9:2B:37:48:6A:9C:BD:AC:6E:B5:BA:7D:BE:50
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/0/3133382e33362e3231322e302f32332d3233203d3e20323634353930.roa
Signing time: Tue 10 Oct 2023 20:00:00 +0000
ROA not before: Tue 10 Oct 2023 19:55:00 +0000
ROA not after: Tue 08 Oct 2024 20:00:00 +0000
asID: 264590
IP address blocks: 138.36.212.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:0a:ad:e0:1e:2e:70:58:f2:c6:16:df:1b:bc:01:f2:a9:4b:d6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50
Validity
Not Before: Oct 10 19:55:00 2023 GMT
Not After : Oct 8 20:00:00 2024 GMT
Subject: CN=B9832815DCB8335B36D5406A0D8A5848EF26B513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ef:fb:89:cf:d0:a4:6f:e4:5a:96:9a:e7:da:
8d:81:ab:80:43:3e:53:60:fc:60:e2:c5:77:87:43:
83:4c:12:cc:0d:14:cb:4a:2d:c4:67:91:3a:f1:9a:
b3:b6:eb:66:9f:b1:94:00:a1:f7:91:ea:d7:d9:f6:
b5:da:64:c3:e7:6d:71:60:ee:40:0d:dc:47:22:a0:
fe:d5:d2:68:c8:0d:45:88:d0:30:e8:20:4c:d4:c4:
35:5e:ae:e7:5d:a2:53:0d:96:9f:31:7b:21:9f:5f:
cd:fb:62:a5:02:ec:58:5b:33:4c:88:87:6f:88:5a:
84:0e:df:e7:a8:c4:1f:b4:9e:6b:4e:8c:44:f3:e2:
d2:e0:4c:e9:29:94:a8:b7:65:4f:bd:bc:d3:26:3e:
56:37:c0:23:6f:03:c5:fd:db:c1:11:6e:e9:48:69:
ce:81:e8:8a:66:a7:93:a7:c8:2f:dc:cf:8e:68:43:
46:e4:49:e7:64:97:47:d0:62:ab:6c:68:c6:ae:79:
02:98:9b:0a:74:57:14:c5:8c:bd:dc:f7:8a:79:ee:
8a:f3:df:8b:2e:05:ce:3f:be:7f:d5:ab:a1:a2:6e:
6d:89:bd:d2:71:d0:e2:e2:64:3a:33:22:1f:72:f8:
e0:71:46:c5:22:3a:f3:4c:82:bb:85:88:68:1b:df:
3a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:83:28:15:DC:B8:33:5B:36:D5:40:6A:0D:8A:58:48:EF:26:B5:13
X509v3 Authority Key Identifier:
keyid:DA:9D:8C:17:FD:EE:E9:2B:37:48:6A:9C:BD:AC:6E:B5:BA:7D:BE:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/0/DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/0/3133382e33362e3231322e302f32332d3233203d3e20323634353930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.212.0/23
Signature Algorithm: sha256WithRSAEncryption
81:ce:71:79:1a:b9:ff:39:e2:eb:9c:dd:6e:2f:cc:b8:b4:92:
a6:2b:86:95:11:26:27:32:6a:58:75:91:41:43:05:bd:80:af:
fd:b5:e7:a0:ba:ff:17:0c:55:6f:32:fb:16:00:7a:48:67:08:
b6:00:61:84:9b:8d:3b:29:40:8c:dc:4d:40:f1:76:a5:e6:51:
64:68:f4:58:59:2a:3e:1c:a6:78:c6:73:ea:04:8d:71:99:e8:
19:ff:3c:87:a5:4f:07:fe:f5:f5:6d:d6:bf:d9:8c:ba:6b:7b:
87:10:22:0c:d3:11:e7:19:f0:42:4e:b8:29:05:f1:1b:cf:69:
05:55:b6:c4:7d:e9:55:55:0a:cb:eb:16:87:52:3d:82:70:32:
76:dc:8d:86:8f:03:10:56:42:60:14:b4:a7:aa:66:8d:86:0b:
2e:8e:82:ae:77:c8:0c:93:52:b4:02:49:10:fc:df:0e:84:00:
9c:f9:88:ed:07:d0:0a:5b:55:a0:e4:fd:1b:79:08:ad:62:9e:
9a:ce:a4:41:2c:91:45:34:c5:be:61:d7:20:10:dc:71:60:ea:
b6:4c:6d:c9:94:85:b0:3b:58:40:c7:fc:97:fe:49:16:03:c6:
6d:c1:98:53:26:f9:61:7e:ca:5f:93:e0:bc:23:40:ad:e9:89:
d0:9f:25:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:15 2025 by rpki-client