![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3137372e3132362e362e302f32342d3234203d3e20323635333033.roa
File: 3137372e3132362e362e302f32342d3234203d3e20323635333033.roa (raw, json)
Hash identifier: w1QsRrWTxsg7o5ohq2lIx7XcdSebVxM0UfxqUh6My1E=
Subject key identifier: CF:79:62:79:85:0E:A9:62:96:D9:F4:D5:29:AF:CA:E6:C8:3F:EC:4E
Certificate issuer: /CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
Certificate serial: 685A797AADA57CF2900EA417D7C76E5139932641
Authority key identifier: 44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3137372e3132362e362e302f32342d3234203d3e20323635333033.roa
Signing time: Wed 10 Jan 2024 17:36:28 +0000
ROA not before: Wed 10 Jan 2024 17:31:28 +0000
ROA not after: Wed 08 Jan 2025 17:36:28 +0000
asID: 265303
IP address blocks: 177.126.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:5a:79:7a:ad:a5:7c:f2:90:0e:a4:17:d7:c7:6e:51:39:93:26:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
Validity
Not Before: Jan 10 17:31:28 2024 GMT
Not After : Jan 8 17:36:28 2025 GMT
Subject: CN=CF796279850EA96296D9F4D529AFCAE6C83FEC4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f6:9b:41:1f:7c:a4:c7:6e:19:af:e1:74:77:
18:27:4d:e3:aa:da:a8:6a:30:87:ed:22:2d:af:e4:
4c:fc:61:08:8f:65:54:d3:61:66:6f:de:d4:2e:00:
c0:4d:5e:05:f8:43:61:7e:aa:ce:49:43:cc:80:c5:
ba:17:51:de:bf:97:24:eb:9a:b0:e6:81:22:16:ea:
02:fa:6a:3e:05:dd:d9:6b:1c:12:6c:e4:b0:93:49:
96:cf:d8:15:e2:85:de:ca:29:78:40:bd:b9:e8:53:
37:c2:9c:36:51:e3:49:76:8d:04:ee:5a:b7:d3:41:
c2:e4:96:8b:36:11:44:2b:2b:93:0c:fb:a5:66:0e:
37:ec:0f:24:09:35:db:b7:64:00:04:2d:9f:2b:97:
ef:93:fc:8e:8f:59:d8:fa:77:19:f3:d1:54:79:b1:
bc:b0:1e:47:b0:78:cc:07:ce:5c:a7:c8:d8:8d:b0:
9d:96:d4:38:ec:e4:fc:0c:46:f4:5d:5e:b1:3f:6e:
eb:10:25:8f:cf:09:80:1c:48:98:f7:65:41:3e:98:
f2:bf:14:8c:51:b4:cb:be:2a:78:85:d1:7c:3e:8f:
aa:c1:2e:7b:da:92:8e:f9:ad:2a:de:40:cd:9e:54:
f9:f1:37:df:03:5c:7f:39:6f:11:2b:0b:b3:ee:77:
8c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:79:62:79:85:0E:A9:62:96:D9:F4:D5:29:AF:CA:E6:C8:3F:EC:4E
X509v3 Authority Key Identifier:
keyid:44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3137372e3132362e362e302f32342d3234203d3e20323635333033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.126.6.0/24
Signature Algorithm: sha256WithRSAEncryption
79:4b:53:48:a5:d7:a5:4d:52:42:65:ba:81:bc:37:a9:a7:57:
bd:c7:76:51:b3:ef:8e:bc:97:86:2a:4e:54:19:f1:e8:cf:59:
69:67:cc:06:e7:73:06:3b:86:4a:5a:8e:3b:27:a5:78:9b:28:
f7:f7:83:0f:58:f7:80:1e:37:2d:26:dc:8c:4e:e6:8c:7c:c3:
78:84:8e:4d:67:45:ca:5f:8d:f4:04:f4:d1:c7:55:cc:0b:03:
12:8e:11:db:ac:7a:37:54:9c:1a:b2:30:89:77:45:0c:f4:38:
82:33:a7:4e:26:bf:08:b0:72:dd:7c:3e:51:9c:8c:2a:db:46:
ac:10:6d:17:c0:54:a4:bb:2c:28:3e:ad:df:07:2c:04:d8:c6:
9c:94:25:6a:43:cb:3a:d0:94:e9:fb:be:ad:c3:f0:7b:8d:fa:
23:16:61:60:e8:c5:9b:81:58:87:f0:bb:4e:b9:45:08:60:0b:
2b:05:b2:60:3d:72:85:f8:59:cd:fe:5a:8b:d9:95:94:32:3a:
3b:14:d5:cb:a8:cf:4f:06:82:cf:8d:8d:6d:2a:2e:6b:cb:ee:
04:4c:ad:cc:b2:45:2b:71:23:20:7d:57:fe:99:0e:c0:59:5f:
4e:57:6d:77:29:88:d3:7c:83:fd:a8:73:d3:dc:d2:25:99:71:
81:cc:b0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:16 2025 by rpki-client