![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9ef7dUe8sk6dR7sozNNLotRkeE5N5xs9QdBL66Rfjpoy/0/3133382e3132322e32302e302f32342d3332203d3e20323634333038.roa
File: 3133382e3132322e32302e302f32342d3332203d3e20323634333038.roa (raw, json)
Hash identifier: 8Uqq75l7jbLuWBL72LYM4jYdeTkbNRLYnhgsLJWkNng=
Subject key identifier: 36:E0:84:E2:13:F1:5D:1F:B8:0B:12:06:AE:08:29:51:DD:26:BB:83
Certificate issuer: /CN=5D1FAFB0B2A30D0A8DC0F6EFC105F6AEA89ED236
Certificate serial: 178397DD727CFC6C5C6F4A85317ED8A943C29E1D
Authority key identifier: 5D:1F:AF:B0:B2:A3:0D:0A:8D:C0:F6:EF:C1:05:F6:AE:A8:9E:D2:36
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D1FAFB0B2A30D0A8DC0F6EFC105F6AEA89ED236.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9ef7dUe8sk6dR7sozNNLotRkeE5N5xs9QdBL66Rfjpoy/0/3133382e3132322e32302e302f32342d3332203d3e20323634333038.roa
Signing time: Wed 07 Dec 2022 12:47:11 +0000
ROA not before: Wed 07 Dec 2022 12:42:11 +0000
ROA not after: Wed 06 Dec 2023 12:47:11 +0000
asID: 264308
IP address blocks: 138.122.20.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:83:97:dd:72:7c:fc:6c:5c:6f:4a:85:31:7e:d8:a9:43:c2:9e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1FAFB0B2A30D0A8DC0F6EFC105F6AEA89ED236
Validity
Not Before: Dec 7 12:42:11 2022 GMT
Not After : Dec 6 12:47:11 2023 GMT
Subject: CN=36E084E213F15D1FB80B1206AE082951DD26BB83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0f:a2:60:e8:1c:92:37:9c:84:fa:7c:65:73:
b8:31:58:bb:6a:c3:2b:5e:38:dc:3c:89:e4:4a:4f:
9c:d0:3e:57:61:a7:f5:bb:35:93:62:f9:c9:e3:0b:
57:31:e4:91:2b:48:fa:07:92:b7:21:2e:1a:98:64:
f4:31:af:0f:fb:31:d2:f3:38:02:e4:74:95:63:e3:
1b:62:b3:8b:4d:ed:d9:f4:f5:a6:df:a1:e3:00:5b:
28:19:32:dc:38:10:6d:81:62:b0:a0:19:a8:44:22:
05:f8:f6:d3:f3:3b:f5:14:13:a3:ca:42:36:a5:3a:
39:6e:2a:85:68:9c:c2:a1:56:d1:34:c3:7d:22:47:
29:43:34:da:47:b5:8f:c7:5c:1d:47:88:d3:64:3d:
c6:8f:d0:58:ea:5c:74:da:5b:c2:5f:36:ce:36:c6:
7e:0b:38:8f:5d:d4:cf:14:a8:ca:37:b3:16:f4:4e:
95:15:d8:f3:c8:de:93:db:3e:bb:0a:67:66:8f:f0:
53:8c:e3:78:b6:d7:6c:c5:3c:35:4a:64:91:2b:39:
e0:80:dd:54:58:4e:85:1b:bb:47:f2:78:ed:f6:8b:
9e:a0:f8:2f:78:14:ee:7c:7f:c7:ba:fb:ae:ac:8b:
25:7c:f3:ef:77:ab:49:3f:ff:eb:56:99:79:6c:81:
a7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E0:84:E2:13:F1:5D:1F:B8:0B:12:06:AE:08:29:51:DD:26:BB:83
X509v3 Authority Key Identifier:
keyid:5D:1F:AF:B0:B2:A3:0D:0A:8D:C0:F6:EF:C1:05:F6:AE:A8:9E:D2:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9ef7dUe8sk6dR7sozNNLotRkeE5N5xs9QdBL66Rfjpoy/0/5D1FAFB0B2A30D0A8DC0F6EFC105F6AEA89ED236.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D1FAFB0B2A30D0A8DC0F6EFC105F6AEA89ED236.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ef7dUe8sk6dR7sozNNLotRkeE5N5xs9QdBL66Rfjpoy/0/3133382e3132322e32302e302f32342d3332203d3e20323634333038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.122.20.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:38:47:46:c7:ad:b2:0a:79:d9:40:3d:06:a9:65:a9:86:34:
ab:62:c6:c1:31:7e:4c:ac:a0:c9:76:03:66:8d:bc:a9:c1:ea:
70:f5:83:69:d7:ca:ba:55:17:82:1d:8c:25:dc:b0:19:c2:ae:
12:fa:c3:07:a8:e1:79:0e:f0:3b:96:c1:93:ba:b7:62:45:30:
c5:79:87:3e:9d:07:0c:4b:fa:8b:11:c5:90:16:03:cb:e3:5e:
0c:7e:4c:d0:50:19:56:76:69:47:6d:b7:e9:c6:38:18:e2:2f:
a2:e1:07:b7:a2:59:62:ac:54:58:8f:19:82:98:ac:73:d5:8e:
85:9a:f6:32:22:e5:ab:c2:49:92:e6:93:6a:86:f2:8d:cf:e2:
4f:65:e5:b6:68:1b:fd:00:57:7b:d2:26:76:ac:68:0a:a3:7e:
ad:e3:04:b1:32:be:20:31:f1:3f:d8:7b:8d:7b:75:47:44:bb:
2e:89:38:06:89:90:e9:d0:3c:18:10:69:91:9e:f1:45:b6:05:
cf:6f:58:ca:e3:7c:61:55:75:35:1a:60:e9:80:eb:55:d4:22:
39:52:88:6d:81:14:bd:f7:16:d4:4f:a7:97:01:29:41:25:54:
0e:89:78:a8:30:1a:47:6d:20:16:ad:3d:1a:71:79:1a:00:8e:
90:98:df:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:30 2025 by rpki-client