![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137302e3234342e3136342e302f32322d3234203d3e203532393430.roa
File: 3137302e3234342e3136342e302f32322d3234203d3e203532393430.roa (raw, json)
Hash identifier: CCyNudAcTpzqqU7TP4lHpxckV1yQtDJLZrWJ6nbqjj4=
Subject key identifier: 1E:7A:08:1F:F2:56:3B:5E:89:C1:E6:A8:10:E9:47:0C:92:7A:7B:4F
Certificate issuer: /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial: 1E7F275F2B570B2DF1700D299FE2FA4DB74D4F83
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137302e3234342e3136342e302f32322d3234203d3e203532393430.roa
Signing time: Thu 31 Oct 2024 16:59:27 +0000
ROA not before: Thu 31 Oct 2024 16:54:27 +0000
ROA not after: Thu 30 Oct 2025 16:59:27 +0000
asID: 52940
IP address blocks: 170.244.164.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:7f:27:5f:2b:57:0b:2d:f1:70:0d:29:9f:e2:fa:4d:b7:4d:4f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
Validity
Not Before: Oct 31 16:54:27 2024 GMT
Not After : Oct 30 16:59:27 2025 GMT
Subject: CN=1E7A081FF2563B5E89C1E6A810E9470C927A7B4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3c:f4:9d:d4:fd:3d:44:e5:d1:06:99:fb:b7:
b5:70:31:79:08:be:6d:ed:8f:8b:10:3f:3d:66:73:
67:0b:00:4c:2f:33:f0:e4:1d:1e:e8:cc:56:62:1e:
98:d3:46:f0:34:33:e3:31:c8:42:50:7c:17:f2:33:
f6:4b:ea:70:2a:bf:66:d5:14:ae:56:b6:46:ea:ae:
8f:26:ed:fa:89:b2:3b:a5:72:77:67:92:eb:e4:c6:
4f:0b:ff:2d:8f:99:b3:8a:bf:6f:e1:03:2b:ac:b3:
a9:71:0a:14:6f:bb:80:73:94:c7:54:16:62:ba:a6:
a3:a9:f7:6a:76:fa:1a:5e:2a:7c:49:f8:e0:ba:8b:
2d:5a:8b:39:cb:4b:9f:4b:f3:27:e5:d0:b1:3a:a7:
e2:ee:e5:06:4d:da:e6:f6:fc:f2:a2:52:54:b8:52:
ac:9a:23:c7:d7:a2:c4:8e:e8:e2:65:ad:cf:62:b4:
a4:da:f7:01:e8:e2:70:f6:5e:26:c4:c0:a7:a9:fb:
82:c0:7a:11:f4:34:f9:2a:4c:e8:92:70:70:d4:54:
39:69:2a:97:57:72:a6:4d:7e:cb:8f:84:11:a9:54:
aa:6e:e8:0b:02:4d:db:f7:d8:ae:16:33:ae:b9:ca:
bc:1f:6e:00:e7:e8:1a:e0:98:6c:cf:f6:f0:e7:c2:
42:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7A:08:1F:F2:56:3B:5E:89:C1:E6:A8:10:E9:47:0C:92:7A:7B:4F
X509v3 Authority Key Identifier:
keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137302e3234342e3136342e302f32322d3234203d3e203532393430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.244.164.0/22
Signature Algorithm: sha256WithRSAEncryption
96:7a:8a:6b:1a:1b:1f:c7:75:a0:0a:70:44:1c:f6:c6:c6:e3:
29:70:c1:1e:f9:81:9d:b3:3e:d5:b2:b6:20:b8:06:f7:6c:04:
03:c4:9e:70:43:97:75:42:8e:82:32:dd:7d:b7:4a:0f:af:fd:
5d:22:38:0e:1f:55:ab:d8:e9:ed:f5:ee:15:7b:5c:9a:47:d1:
39:e8:fd:3b:c0:cb:41:c9:3b:a6:ea:e8:d3:6b:03:81:cf:4c:
32:a7:c9:5f:41:c2:1c:6e:78:c6:5e:a7:6f:b8:e7:45:fd:1a:
f4:69:17:12:bd:42:41:70:46:14:5b:ba:d3:08:b6:4d:1d:c8:
ec:9f:d4:21:75:b0:1d:0d:e4:84:9a:ab:fa:32:36:a9:25:83:
93:a6:18:90:d8:e5:a7:8c:34:6a:f5:ee:05:76:b9:b9:33:a2:
77:bb:17:9f:3f:82:3f:02:16:b7:6e:4c:eb:0a:79:64:9d:1a:
4f:57:e6:7c:99:3c:0a:be:aa:eb:0c:23:59:3d:ae:fa:b8:10:
37:c2:db:1e:47:de:b3:4b:26:a7:96:82:11:12:7c:cd:73:97:
ee:97:1a:93:bf:2b:1d:91:6c:bb:68:ad:11:a1:33:d1:68:14:
07:a5:04:c9:a0:e3:3e:2c:ea:6c:50:12:1f:38:37:3e:c5:c2:
fa:91:a3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:01 2025 by rpki-client