![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/3136382e3139362e3130382e302f32322d3232203d3e20323632383139.roa
File: 3136382e3139362e3130382e302f32322d3232203d3e20323632383139.roa (raw, json)
Hash identifier: dBDXiwf6FLYt8FPCWOQkIq3r9X720B7ySl1wpgQSfmM=
Subject key identifier: AB:61:FF:A5:44:1B:7C:EA:3C:55:A6:1D:06:CE:DE:7C:C1:C7:D8:D0
Certificate issuer: /CN=CF608992965DC7DE08820B93FC270DCED15124BC
Certificate serial: 5A61774BE5F4250437E06236E6C28D54EBD67B93
Authority key identifier: CF:60:89:92:96:5D:C7:DE:08:82:0B:93:FC:27:0D:CE:D1:51:24:BC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF608992965DC7DE08820B93FC270DCED15124BC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/3136382e3139362e3130382e302f32322d3232203d3e20323632383139.roa
Signing time: Wed 09 Nov 2022 20:11:03 +0000
ROA not before: Wed 09 Nov 2022 20:06:03 +0000
ROA not after: Wed 08 Nov 2023 20:11:03 +0000
asID: 262819
IP address blocks: 168.196.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:61:77:4b:e5:f4:25:04:37:e0:62:36:e6:c2:8d:54:eb:d6:7b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF608992965DC7DE08820B93FC270DCED15124BC
Validity
Not Before: Nov 9 20:06:03 2022 GMT
Not After : Nov 8 20:11:03 2023 GMT
Subject: CN=AB61FFA5441B7CEA3C55A61D06CEDE7CC1C7D8D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:26:ab:df:80:e8:2c:20:b6:37:f4:d5:8d:dd:
53:16:61:05:73:1b:a5:c1:3c:1d:28:77:d0:34:98:
a5:d4:cb:8a:71:27:64:74:89:c5:16:e8:31:41:21:
fe:4b:9d:e1:c4:4e:1a:48:4a:9f:bd:6b:75:94:a9:
10:14:12:32:9a:e8:d4:58:25:78:e7:f8:f4:c9:4f:
0e:91:f1:46:40:12:d0:f4:fe:ee:68:62:4a:6e:03:
c2:a1:2e:12:6b:fb:71:8a:be:67:02:a1:55:56:c4:
6e:a5:3f:23:29:1a:8d:08:63:21:18:db:3e:92:6f:
5c:8d:25:36:eb:52:99:3f:a8:37:07:3a:eb:1f:27:
33:fa:62:1d:e9:8e:0c:eb:a0:50:06:07:e8:31:56:
ed:d7:ec:67:dc:0d:f5:67:5c:e5:79:ea:d7:5d:7f:
1d:28:08:55:31:65:cb:8f:d7:01:2f:8a:b5:7e:2e:
7c:e9:a6:14:36:83:64:15:07:1a:95:62:f0:c0:c8:
5a:dd:87:53:63:01:5d:bd:73:6c:81:0c:4e:76:20:
2a:47:f5:83:41:fb:0f:d8:10:fb:de:89:bd:df:0b:
69:a5:5f:f6:97:ba:c9:b3:ca:2e:b3:48:01:a8:c5:
1a:42:f3:ec:9e:2c:b4:28:25:4a:a7:fd:f2:fb:4e:
d6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:61:FF:A5:44:1B:7C:EA:3C:55:A6:1D:06:CE:DE:7C:C1:C7:D8:D0
X509v3 Authority Key Identifier:
keyid:CF:60:89:92:96:5D:C7:DE:08:82:0B:93:FC:27:0D:CE:D1:51:24:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/CF608992965DC7DE08820B93FC270DCED15124BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF608992965DC7DE08820B93FC270DCED15124BC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/3136382e3139362e3130382e302f32322d3232203d3e20323632383139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.196.108.0/22
Signature Algorithm: sha256WithRSAEncryption
94:d0:bc:18:68:a2:d6:cf:ec:de:70:dd:11:9e:0e:6c:a5:88:
e1:a7:94:ba:5a:e1:14:6f:2c:51:25:0a:82:59:4b:4c:84:b2:
3a:a5:3b:b9:9c:ac:c5:b5:e3:31:a3:b8:bf:c4:81:a0:12:e0:
02:fb:dc:72:fb:13:53:f6:4a:f6:ce:61:fb:4f:7f:48:a8:2e:
84:55:be:f3:24:9a:18:4e:4a:56:12:2b:f1:56:03:2d:6b:f7:
23:e1:9c:a8:28:84:04:54:01:b3:b9:a7:1e:8e:36:fa:de:09:
98:5e:8c:9c:1b:a8:c4:32:c7:94:0c:33:ec:bb:3a:66:13:eb:
80:f7:68:eb:87:f8:d3:66:0a:6d:f7:65:bd:1d:48:7a:ba:66:
54:c2:38:0c:07:a4:b1:7b:c4:d9:8f:c8:14:1f:c1:a5:d3:05:
43:94:0f:4a:c2:71:8b:4c:2b:e5:b2:43:f2:21:85:f2:6e:fb:
ac:6f:12:ba:f5:a7:5d:36:11:74:ee:8c:e4:8a:a9:e6:41:83:
6e:7c:da:79:22:b8:e2:75:09:02:88:bc:d3:d9:b8:47:36:d5:
4e:35:5d:ca:41:bb:1c:70:7f:de:af:be:0b:0f:63:3a:08:24:
64:2d:b9:24:b8:5b:75:66:57:af:e1:7e:02:84:59:23:05:2e:
b1:40:f9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:32:54 2025 by rpki-client