![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/3134332e3235352e302e302f32332d3233203d3e20323635313430.roa
File: 3134332e3235352e302e302f32332d3233203d3e20323635313430.roa (raw, json)
Hash identifier: HttFe8yNn9WHrVRt1Y5oR53KEFGFv+OmmKtPKtCo4QM=
Subject key identifier: EE:1B:AE:C4:2B:35:62:EC:9C:31:E1:12:51:9D:EB:9A:EF:7F:08:11
Certificate issuer: /CN=D7D91C254433170BCBEE3E88D95242D23B207E56
Certificate serial: 11299477B8253F801CA31B4735986574A099A470
Authority key identifier: D7:D9:1C:25:44:33:17:0B:CB:EE:3E:88:D9:52:42:D2:3B:20:7E:56
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7D91C254433170BCBEE3E88D95242D23B207E56.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/3134332e3235352e302e302f32332d3233203d3e20323635313430.roa
Signing time: Mon 29 Jan 2024 14:25:15 +0000
ROA not before: Mon 29 Jan 2024 14:20:15 +0000
ROA not after: Mon 27 Jan 2025 14:25:15 +0000
asID: 265140
IP address blocks: 143.255.0.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:29:94:77:b8:25:3f:80:1c:a3:1b:47:35:98:65:74:a0:99:a4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7D91C254433170BCBEE3E88D95242D23B207E56
Validity
Not Before: Jan 29 14:20:15 2024 GMT
Not After : Jan 27 14:25:15 2025 GMT
Subject: CN=EE1BAEC42B3562EC9C31E112519DEB9AEF7F0811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:53:99:eb:24:4c:db:a6:67:1d:77:c1:41:22:
38:76:f3:47:28:f8:79:f9:22:06:37:cd:1a:eb:4c:
19:2a:d7:f4:84:2e:5a:b7:3d:43:89:28:1f:a5:2c:
1b:87:69:2b:e8:24:96:d9:1d:fe:7d:09:39:c4:ec:
c8:5e:f2:56:e2:b1:ff:7b:9c:73:f7:cd:0e:50:cb:
b6:f6:e8:47:a2:ba:e7:8e:1c:43:3f:93:e0:d3:73:
b6:9c:95:fc:d2:67:01:de:4c:ff:65:40:56:7c:08:
9a:38:27:00:d6:b3:e0:6d:46:21:95:be:a2:e0:e1:
2c:cc:bf:69:93:de:fb:38:c1:58:5e:7f:9d:5b:ff:
dc:e6:b8:2a:f8:ce:6d:e2:b8:56:f6:02:84:62:75:
4c:9e:19:b7:88:70:a0:ec:5e:0a:03:3b:8a:11:d4:
d8:85:35:10:18:8e:1b:cf:0e:53:77:d2:3f:64:01:
ed:06:84:e6:a7:85:9a:a8:a2:6c:68:6c:e9:0f:ad:
7c:34:8d:3e:35:43:30:64:b0:9f:ce:09:53:e1:bf:
39:38:8d:b6:e1:8e:c0:f8:39:e6:fb:ab:ed:00:f8:
01:01:85:6e:e0:a7:77:fd:0c:d0:e7:26:24:9c:19:
0c:89:79:b1:16:55:62:59:5e:67:c4:7c:61:6c:1e:
4c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1B:AE:C4:2B:35:62:EC:9C:31:E1:12:51:9D:EB:9A:EF:7F:08:11
X509v3 Authority Key Identifier:
keyid:D7:D9:1C:25:44:33:17:0B:CB:EE:3E:88:D9:52:42:D2:3B:20:7E:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/D7D91C254433170BCBEE3E88D95242D23B207E56.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7D91C254433170BCBEE3E88D95242D23B207E56.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/3134332e3235352e302e302f32332d3233203d3e20323635313430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.255.0.0/23
Signature Algorithm: sha256WithRSAEncryption
01:ea:7d:d9:59:1f:96:94:97:c3:a7:ee:36:68:35:17:cb:ba:
45:3b:36:7c:79:69:ed:22:cf:fb:1b:1f:bd:42:e7:ac:aa:aa:
1f:69:37:43:12:f1:fd:5f:14:2b:f1:df:85:a1:2d:71:33:41:
26:69:42:83:e0:11:e9:35:22:d8:9e:9c:ec:a2:2b:10:d9:2e:
8f:82:a1:63:d2:f2:0a:94:93:d5:28:5f:ff:33:f3:eb:bd:c1:
fb:ff:43:97:47:0d:e4:b4:0f:f9:8e:0f:87:5c:26:92:2c:aa:
bb:6c:36:b6:b5:2e:ec:f3:3a:b0:1e:66:a5:c4:6f:59:f0:db:
f2:c6:6c:3a:18:7f:93:a5:2d:cd:5e:69:a0:86:a9:13:32:54:
4c:09:24:cd:f1:b1:0e:de:ef:60:5c:2a:3b:6c:5a:8a:7a:70:
90:24:c6:c7:e4:19:1b:68:b4:0f:59:68:80:5d:c1:41:82:b6:
52:b1:49:2e:34:75:f7:df:e4:2f:1b:fd:f3:2d:d2:1b:9b:1f:
89:d9:ff:89:3c:21:65:b1:9d:17:33:90:9d:ba:da:34:4c:8c:
91:2d:0c:ea:8a:06:c2:db:1d:c7:80:3e:b3:21:20:63:ea:c6:
6b:e6:85:b2:c0:72:72:6c:f3:a4:bd:47:d7:12:ea:0f:68:bf:
25:b4:a6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:50:45 2025 by rpki-client