![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/3139312e3234332e3230342e302f32342d3234203d3e20323633353132.roa
File: 3139312e3234332e3230342e302f32342d3234203d3e20323633353132.roa (raw, json)
Hash identifier: iUSpErf22gJa641SBEuhOduax/ia+oEeM5jFNV3+JqQ=
Subject key identifier: 65:B7:CB:C4:E4:A8:17:A6:05:04:D1:23:96:52:B1:FE:89:D1:A7:41
Certificate issuer: /CN=8A5F6680E29DC886B52ADBE393C0313E3C310D32
Certificate serial: 224BECE7B2BAABBA171F0CD2B09D6474CE346F32
Authority key identifier: 8A:5F:66:80:E2:9D:C8:86:B5:2A:DB:E3:93:C0:31:3E:3C:31:0D:32
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/3139312e3234332e3230342e302f32342d3234203d3e20323633353132.roa
Signing time: Thu 25 Jan 2024 15:30:16 +0000
ROA not before: Thu 25 Jan 2024 15:25:16 +0000
ROA not after: Thu 23 Jan 2025 15:30:16 +0000
asID: 263512
IP address blocks: 191.243.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:4b:ec:e7:b2:ba:ab:ba:17:1f:0c:d2:b0:9d:64:74:ce:34:6f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A5F6680E29DC886B52ADBE393C0313E3C310D32
Validity
Not Before: Jan 25 15:25:16 2024 GMT
Not After : Jan 23 15:30:16 2025 GMT
Subject: CN=65B7CBC4E4A817A60504D1239652B1FE89D1A741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:32:ad:a1:b1:f1:7b:99:39:80:e5:28:c9:50:
b0:03:1b:6c:dc:f1:31:a9:52:e0:7b:75:5f:56:c9:
0f:d2:93:32:a7:37:7d:c9:1c:39:31:17:2e:7c:6d:
39:21:d2:5b:b8:98:10:35:86:e1:3a:2b:d2:13:b3:
48:a7:d9:37:c4:5c:78:63:7e:5b:18:4e:10:e7:1b:
c4:20:1e:7f:25:e9:0e:f4:1e:a8:e9:1d:b3:7b:74:
2c:d7:5f:ca:69:a8:37:04:a6:0a:6b:95:b5:da:6c:
76:3d:5c:7d:f2:5d:c8:ef:e8:86:3a:a6:32:54:5e:
ec:fe:8e:72:29:00:36:29:46:fa:08:04:54:91:f6:
cd:2a:73:af:34:00:fd:d8:e1:5b:3e:a0:fd:5a:df:
0b:f6:5f:41:ad:58:1f:2f:28:c5:2c:b2:14:5e:b4:
ef:93:75:e6:66:9c:e4:c5:cb:60:ea:e8:44:c9:b1:
e2:f3:56:3a:4f:ad:db:90:f6:d6:b7:68:86:b0:c6:
8d:46:78:b7:8f:8d:6a:9a:33:66:77:2f:88:70:c1:
ac:f5:e2:23:1a:dd:57:5e:4b:6c:eb:98:c7:4d:f7:
85:41:78:19:34:5e:08:84:84:41:25:dc:5a:0b:2e:
30:0c:af:d0:6b:71:d8:f5:48:c6:d2:a5:0c:24:e1:
81:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B7:CB:C4:E4:A8:17:A6:05:04:D1:23:96:52:B1:FE:89:D1:A7:41
X509v3 Authority Key Identifier:
keyid:8A:5F:66:80:E2:9D:C8:86:B5:2A:DB:E3:93:C0:31:3E:3C:31:0D:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/3139312e3234332e3230342e302f32342d3234203d3e20323633353132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.243.204.0/24
Signature Algorithm: sha256WithRSAEncryption
20:22:70:c2:46:d0:60:ab:fa:7d:0d:c5:bd:fa:40:a2:8a:aa:
7e:f4:7b:67:ef:e3:a8:c7:bf:68:2e:86:85:64:68:24:93:e4:
9a:1e:33:a4:c9:c6:34:46:e2:c1:61:8a:37:c8:5a:d3:3c:49:
7e:4a:78:6e:ff:a4:80:d2:40:49:fd:a0:54:21:7f:66:c4:57:
a7:1a:0a:4d:e0:36:84:ca:3c:a9:de:f6:71:3c:11:95:94:28:
0f:7a:64:fe:df:92:e8:bb:89:0d:01:f1:50:52:45:7f:00:97:
c3:5d:65:35:bc:f1:a2:5c:c8:7f:af:68:6f:a3:8d:6f:21:7d:
11:5e:0c:be:95:d8:b3:31:1e:00:70:90:b0:4c:9c:e9:d8:d7:
8a:82:c9:f0:5a:a1:5a:ae:5f:1c:a6:6f:67:95:1b:c1:70:dc:
29:16:4f:78:eb:44:0f:11:fc:27:02:c7:94:c4:f9:35:67:38:
c8:57:89:f2:ff:b7:89:30:c8:ff:f2:e7:28:10:2b:a5:31:ae:
2b:c0:a5:17:22:1b:68:a4:75:61:2d:de:ab:61:09:4b:0e:93:
a0:88:b3:b1:f0:ba:1a:54:92:e6:b8:f9:75:16:0c:40:90:33:
b1:6f:27:50:b1:9b:72:60:52:58:5f:02:ea:8e:e8:48:3a:75:
23:89:6d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:53 2025 by rpki-client