![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3139312e372e32382e302f32322d3234203d3e203532393430.roa
File: 3139312e372e32382e302f32322d3234203d3e203532393430.roa (raw, json)
Hash identifier: v3KaBxf4zX2neSjcyUbq+aXkgncp6zASsniywJ16DUY=
Subject key identifier: A8:D1:B6:98:8F:22:23:9E:08:07:55:1F:D3:B1:6D:73:6F:9A:D3:93
Certificate issuer: /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial: 0500B193FFC36D82B08D3046A71421C4D2AB888E
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3139312e372e32382e302f32322d3234203d3e203532393430.roa
Signing time: Thu 31 Oct 2024 16:59:41 +0000
ROA not before: Thu 31 Oct 2024 16:54:41 +0000
ROA not after: Thu 30 Oct 2025 16:59:41 +0000
asID: 52940
IP address blocks: 191.7.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:00:b1:93:ff:c3:6d:82:b0:8d:30:46:a7:14:21:c4:d2:ab:88:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
Validity
Not Before: Oct 31 16:54:41 2024 GMT
Not After : Oct 30 16:59:41 2025 GMT
Subject: CN=A8D1B6988F22239E0807551FD3B16D736F9AD393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:30:98:45:db:7e:3d:a6:94:67:7e:de:79:9b:
ac:fa:94:c0:71:e9:a6:5b:6f:b1:87:16:2b:75:54:
96:2b:45:04:6c:78:90:8a:16:4e:c7:6a:4b:8e:29:
be:4c:3d:9a:52:69:47:9f:90:7e:43:f9:42:b1:0d:
be:e4:a8:61:e9:c7:e8:b8:7e:5e:22:78:0a:04:f9:
c9:44:19:a6:8e:62:2f:cc:bf:7c:38:34:cd:da:21:
1c:8f:04:26:d6:c7:f5:6c:94:89:ad:55:08:9e:72:
db:b1:a5:11:a0:b0:06:75:b8:3d:c8:bb:cf:dd:0a:
1a:58:a9:ba:0c:fb:b7:71:f3:27:a1:ee:e2:d9:8f:
dc:6b:c9:be:94:93:6c:2f:ae:d6:5b:71:62:ac:1a:
ac:7d:12:c9:c1:56:a3:e6:6c:55:65:5d:9f:a8:ca:
65:ed:07:dc:3f:e5:b8:2c:88:7e:12:71:81:e9:b5:
0c:2c:49:0e:32:09:70:7e:0b:f4:de:d2:8b:3a:0c:
24:af:dc:57:25:8d:c1:28:8a:1d:91:1a:ba:4d:c5:
f6:49:6c:0b:81:4b:0a:ee:1e:1b:80:b9:eb:8d:03:
58:f5:32:fd:ee:57:cf:54:92:14:e4:d3:19:1b:6e:
a9:c9:9c:27:c4:28:35:c6:f0:1d:31:fc:c5:9e:e6:
21:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D1:B6:98:8F:22:23:9E:08:07:55:1F:D3:B1:6D:73:6F:9A:D3:93
X509v3 Authority Key Identifier:
keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3139312e372e32382e302f32322d3234203d3e203532393430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.7.28.0/22
Signature Algorithm: sha256WithRSAEncryption
02:3e:c3:75:03:97:72:ad:0b:27:94:b1:35:70:bc:36:1c:94:
88:dd:f5:9b:3d:84:17:51:0b:7e:cc:ad:3a:b2:84:a9:34:b9:
ad:a6:62:ea:01:00:66:fe:e0:f4:6e:1a:1e:d3:64:a8:46:4a:
22:ab:38:28:d3:6a:8a:e4:85:36:ec:ce:8b:bc:15:96:6b:4a:
87:6a:c0:5a:c3:e9:4d:79:04:9a:20:48:eb:bb:a4:f3:eb:bb:
45:26:1d:d2:9e:b0:9c:51:c4:c8:d9:e0:9d:71:27:b4:be:3b:
67:8f:ed:f1:d1:0d:7a:c9:53:53:72:23:25:46:41:dc:d8:b9:
ac:8c:b8:42:0c:47:32:a4:13:cf:28:0f:b0:48:7a:65:a3:e8:
98:d7:4a:26:73:03:29:f7:df:39:88:bd:fe:20:20:ce:6a:fc:
6c:d7:e5:5e:67:1c:aa:6f:d7:09:53:59:20:aa:33:42:76:9a:
09:33:16:e5:15:05:2b:08:d1:89:28:5c:97:c6:ce:a3:60:f0:
a3:be:ce:2e:cf:ac:79:fc:85:9e:b7:15:08:40:bb:ae:e7:9c:
14:85:56:67:30:2c:2e:c1:fd:08:c8:2a:de:ce:69:82:a5:fb:
93:c3:4e:22:ac:f6:69:c0:e2:4f:49:01:24:31:78:5f:0e:bf:
95:c9:e8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:33 2025 by rpki-client