![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/93gYpDzS69L7rE9KxiqCg7PiSbyYsxZq5nW2ocFYAHXR/0/3138392e33392e39362e302f32302d3234203d3e203238333035.roa
File: 3138392e33392e39362e302f32302d3234203d3e203238333035.roa (raw, json)
Hash identifier: RxP9tLr565TIAKkKIJLxZkpUYh3Z18W9g7+eY7x1APc=
Subject key identifier: 07:28:08:06:AD:E0:15:43:90:02:7C:69:55:CC:AE:F0:ED:3B:36:B6
Certificate issuer: /CN=9C1B636737328489B2BBC1E208AF52B99A524C4A
Certificate serial: 122A3C6622297F59253514BD7FA0ED264BA12BAF
Authority key identifier: 9C:1B:63:67:37:32:84:89:B2:BB:C1:E2:08:AF:52:B9:9A:52:4C:4A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C1B636737328489B2BBC1E208AF52B99A524C4A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/93gYpDzS69L7rE9KxiqCg7PiSbyYsxZq5nW2ocFYAHXR/0/3138392e33392e39362e302f32302d3234203d3e203238333035.roa
Signing time: Wed 01 Feb 2023 21:00:00 +0000
ROA not before: Wed 01 Feb 2023 20:55:00 +0000
ROA not after: Wed 31 Jan 2024 21:00:00 +0000
asID: 28305
IP address blocks: 189.39.96.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:2a:3c:66:22:29:7f:59:25:35:14:bd:7f:a0:ed:26:4b:a1:2b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C1B636737328489B2BBC1E208AF52B99A524C4A
Validity
Not Before: Feb 1 20:55:00 2023 GMT
Not After : Jan 31 21:00:00 2024 GMT
Subject: CN=07280806ADE0154390027C6955CCAEF0ED3B36B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:75:16:16:3e:98:8a:3d:83:df:ce:32:3d:6c:
f5:ad:0c:ce:55:07:68:00:7c:ba:ef:6e:a1:24:e0:
6f:27:e1:2e:e2:25:45:96:ca:a2:68:08:9e:66:1c:
de:37:cf:b5:7a:97:25:de:35:84:ae:b6:cc:34:92:
3e:c7:7d:a4:ff:59:39:6c:b8:45:87:29:5c:28:e0:
ef:07:bd:87:72:6f:6f:f6:73:4e:d4:a9:7c:bb:7f:
27:8c:dc:b2:d3:87:cb:bd:93:76:ea:2a:bb:84:d4:
a1:7d:e1:05:ef:e1:8d:43:c7:e3:22:43:36:f0:56:
72:5c:d6:2f:6c:b8:bd:34:b6:d0:24:fd:97:68:43:
21:41:19:15:b9:03:7e:2d:35:a8:d8:97:2a:7c:d0:
ee:f5:4b:4c:cc:c1:9d:ff:41:58:ce:5b:0c:d4:ea:
0b:a1:9b:59:ef:53:ee:1b:26:0c:5a:c8:4e:90:b2:
f5:60:ea:65:af:bd:48:7c:55:50:81:21:0e:fa:f5:
20:63:87:f3:55:33:67:92:3b:d3:4a:d3:f2:ee:d6:
06:38:d7:15:0f:3a:97:c7:a8:68:1c:d4:33:26:9c:
39:02:32:85:7b:44:d1:28:d2:50:a1:04:15:62:d5:
bf:8d:65:04:3f:d4:d8:4a:d0:bc:15:25:86:9f:4e:
a6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:28:08:06:AD:E0:15:43:90:02:7C:69:55:CC:AE:F0:ED:3B:36:B6
X509v3 Authority Key Identifier:
keyid:9C:1B:63:67:37:32:84:89:B2:BB:C1:E2:08:AF:52:B9:9A:52:4C:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/93gYpDzS69L7rE9KxiqCg7PiSbyYsxZq5nW2ocFYAHXR/0/9C1B636737328489B2BBC1E208AF52B99A524C4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C1B636737328489B2BBC1E208AF52B99A524C4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/93gYpDzS69L7rE9KxiqCg7PiSbyYsxZq5nW2ocFYAHXR/0/3138392e33392e39362e302f32302d3234203d3e203238333035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.39.96.0/20
Signature Algorithm: sha256WithRSAEncryption
82:55:1e:55:aa:e5:b0:86:77:6f:23:45:56:1c:c4:a4:13:20:
06:40:9e:65:07:27:96:35:02:c0:aa:68:25:81:3b:e0:38:c3:
85:b6:3f:9c:26:d8:9f:5c:71:2d:11:bc:a5:2c:17:42:2f:6b:
14:f3:73:d5:a4:dc:19:7f:2e:59:37:4c:8c:ac:d2:fb:93:e2:
78:11:58:92:98:cd:3b:7b:d0:32:54:7e:cc:36:b9:e7:aa:0c:
af:c8:ec:4e:61:8f:35:d3:53:31:31:7e:bc:52:4a:38:cd:85:
37:bf:4d:98:cd:fb:18:e8:96:d7:07:1f:27:c4:77:82:b1:e4:
e0:c9:40:10:cf:f8:79:8f:36:6d:3e:41:3a:00:a1:6c:b6:1a:
1b:7a:3d:a8:bc:4b:b1:52:38:05:c0:50:6e:28:67:40:98:59:
4e:eb:25:3f:06:60:01:c4:d0:ed:ae:1c:85:2e:3c:d5:8f:0c:
fb:a3:90:63:a7:2a:99:c0:65:9a:98:d1:37:b5:9a:17:1a:c5:
7f:df:fd:6b:15:b2:4f:ad:4e:cd:55:41:bd:cc:1d:5a:56:0f:
42:cf:cc:50:81:04:13:99:20:a7:19:c8:88:78:fe:28:d7:65:
1d:ed:62:e4:bc:ad:a6:f6:12:dc:09:fe:a6:1b:76:c1:da:c5:
95:60:44:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:34:28 2025 by rpki-client