![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e38382e302f32332d3233203d3e20323633343133.roa
File: 3137392e39372e38382e302f32332d3233203d3e20323633343133.roa (raw, json)
Hash identifier: Kq1k0K+hHksAFxS4kh7iFqcQAlMMvGHp7T9E5/pHzSo=
Subject key identifier: BA:72:08:F7:44:C8:B6:8F:5A:34:BD:C9:19:D5:0D:6D:BA:57:B3:D9
Certificate issuer: /CN=1F9EBA1C2567EA0F9ABC839BD5DEFAB0CC4A4AD6
Certificate serial: 354198E92DDAAC42F490C136B1F9DD8785CBEFD5
Authority key identifier: 1F:9E:BA:1C:25:67:EA:0F:9A:BC:83:9B:D5:DE:FA:B0:CC:4A:4A:D6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F9EBA1C2567EA0F9ABC839BD5DEFAB0CC4A4AD6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e38382e302f32332d3233203d3e20323633343133.roa
Signing time: Fri 01 Mar 2024 11:12:48 +0000
ROA not before: Fri 01 Mar 2024 11:07:48 +0000
ROA not after: Fri 28 Feb 2025 11:12:48 +0000
asID: 263413
IP address blocks: 179.97.88.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:41:98:e9:2d:da:ac:42:f4:90:c1:36:b1:f9:dd:87:85:cb:ef:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F9EBA1C2567EA0F9ABC839BD5DEFAB0CC4A4AD6
Validity
Not Before: Mar 1 11:07:48 2024 GMT
Not After : Feb 28 11:12:48 2025 GMT
Subject: CN=BA7208F744C8B68F5A34BDC919D50D6DBA57B3D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:58:d5:6a:68:65:1e:df:03:26:c5:03:9b:cb:
b2:a5:fc:68:a3:0a:3f:dc:30:9c:74:fe:f2:d0:cf:
dd:37:33:9d:6c:6f:5f:24:98:4f:fb:1e:50:af:73:
6d:0e:ec:32:92:55:bd:30:f7:ab:51:65:98:a2:19:
7e:47:5f:0f:e5:23:95:38:97:18:63:bf:c1:30:92:
2a:af:fb:f6:6d:16:6e:ec:82:39:4b:86:52:9b:9b:
04:6f:cb:f1:d0:b2:ef:3f:cd:c6:bc:63:ac:55:e6:
c2:61:7a:bc:69:0a:97:95:b9:d7:46:c8:8d:2d:f2:
fd:72:bb:ed:44:db:a4:b7:69:81:d7:ec:90:16:ed:
59:e4:35:c9:75:06:c7:fc:db:54:f5:da:aa:e6:dc:
ca:91:72:0f:4f:ea:e4:c7:f3:26:98:ca:30:ed:91:
c5:8e:6d:8d:3a:d2:54:72:c4:2c:0f:aa:72:90:12:
93:2e:0f:4c:fe:36:b2:da:9b:7d:bf:ae:5d:01:f8:
e0:f4:95:a5:38:99:40:d6:b5:a1:27:c0:40:7a:4d:
79:df:c8:a3:6a:be:6f:98:70:8e:97:96:e9:93:45:
98:73:67:66:7c:bc:48:bb:bb:7e:ef:5f:c5:a3:04:
ac:e8:29:26:9c:6f:ca:a1:35:72:1f:06:ab:bc:c0:
f1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:72:08:F7:44:C8:B6:8F:5A:34:BD:C9:19:D5:0D:6D:BA:57:B3:D9
X509v3 Authority Key Identifier:
keyid:1F:9E:BA:1C:25:67:EA:0F:9A:BC:83:9B:D5:DE:FA:B0:CC:4A:4A:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/1F9EBA1C2567EA0F9ABC839BD5DEFAB0CC4A4AD6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F9EBA1C2567EA0F9ABC839BD5DEFAB0CC4A4AD6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e38382e302f32332d3233203d3e20323633343133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.97.88.0/23
Signature Algorithm: sha256WithRSAEncryption
56:38:25:c2:bd:d8:46:db:38:ad:e9:7b:9c:29:02:96:b0:79:
cd:1d:2c:7e:19:0d:1a:eb:08:28:be:61:7b:d3:98:dd:03:ed:
b6:23:3e:4e:03:a5:f8:26:8b:a2:bb:38:8e:13:44:4b:9a:fe:
96:df:37:f7:e0:a1:5b:1f:0d:15:55:4d:08:7a:30:67:6b:c1:
cf:20:70:59:50:8b:ef:c8:e6:a4:8d:34:39:09:25:a9:fc:03:
f1:77:4a:2a:ba:b5:06:8a:77:f1:b2:a2:2a:32:6e:b8:15:39:
bb:39:74:dd:00:bf:3b:26:e2:7b:d3:f9:3a:94:6d:d6:1f:fd:
87:86:ad:01:2f:12:ad:28:39:aa:89:9d:37:66:24:60:4d:61:
f7:63:97:87:5c:e0:6d:31:e6:a3:39:ea:df:ca:bd:f8:7f:9c:
0f:60:7d:7f:c6:ee:fe:9f:f7:e6:a1:83:81:c8:b1:34:d2:73:
78:f0:5c:79:49:82:74:d2:6c:3a:83:39:d0:22:c3:74:b5:2f:
04:d2:7b:05:ea:7b:15:bb:19:c7:ae:aa:c9:2d:08:f0:ce:09:
69:bb:a9:ce:87:00:04:7e:a9:d2:5e:ae:4f:ab:19:6b:22:db:
39:a0:95:27:3a:71:3a:b0:28:75:6d:95:4b:6f:55:82:bb:71:
55:32:56:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:38:05 2025 by rpki-client