![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230312e38372e3134322e302f32342d3234203d3e20323635333033.roa
File: 3230312e38372e3134322e302f32342d3234203d3e20323635333033.roa (raw, json)
Hash identifier: SN6YCAj9/hbs8MkKRYH3UdKMm/pKXlg6putkoorQEd0=
Subject key identifier: 0D:A4:03:A1:C3:F3:5E:C6:A7:89:77:B6:72:CB:A8:02:BD:A8:5B:CD
Certificate issuer: /CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
Certificate serial: 7191109AC713C1A253B7DD950C37D8D04D8B96DC
Authority key identifier: 44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230312e38372e3134322e302f32342d3234203d3e20323635333033.roa
Signing time: Wed 10 Jan 2024 17:30:59 +0000
ROA not before: Wed 10 Jan 2024 17:25:59 +0000
ROA not after: Wed 08 Jan 2025 17:30:59 +0000
asID: 265303
IP address blocks: 201.87.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:91:10:9a:c7:13:c1:a2:53:b7:dd:95:0c:37:d8:d0:4d:8b:96:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
Validity
Not Before: Jan 10 17:25:59 2024 GMT
Not After : Jan 8 17:30:59 2025 GMT
Subject: CN=0DA403A1C3F35EC6A78977B672CBA802BDA85BCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:14:fb:19:de:4c:02:84:cf:12:75:67:af:0e:
8c:92:28:76:9c:0f:e5:d0:70:63:5d:74:f0:45:d3:
1a:cd:d0:cf:5e:21:77:6f:15:4b:09:53:27:5f:7f:
0b:1e:93:d6:ac:0b:16:96:d1:62:ea:48:2b:02:8c:
f6:75:1a:48:11:92:8b:62:3b:d7:07:82:4f:81:34:
fc:44:95:41:dc:cb:0b:de:5d:6f:b1:fd:80:40:ca:
1f:06:8e:de:d7:d1:d8:8f:70:2a:b0:d1:d1:3a:fd:
68:08:4a:bf:8e:ad:d2:23:fb:3d:14:61:2a:57:62:
ac:8e:4a:fe:65:06:29:15:91:74:78:f1:c8:42:eb:
c9:1e:b7:1f:9e:a9:85:97:b3:fa:c1:e1:02:e7:67:
51:83:dc:e5:6f:86:04:60:3e:ce:2c:88:a7:c4:dd:
28:33:80:17:80:a8:16:1d:c0:40:7d:a9:ac:e0:0b:
02:e7:07:b1:69:1c:4e:52:8f:d8:bc:9f:2b:ad:0a:
fe:1b:67:8e:4a:4c:93:94:25:36:a0:ec:11:8e:5c:
48:61:7a:dd:b7:6d:71:4f:54:a0:83:94:3d:f3:97:
82:53:29:16:80:34:2a:b1:95:41:de:c7:56:d6:a0:
0a:cd:21:37:5a:05:60:ec:49:77:a6:1d:d7:3e:1d:
51:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A4:03:A1:C3:F3:5E:C6:A7:89:77:B6:72:CB:A8:02:BD:A8:5B:CD
X509v3 Authority Key Identifier:
keyid:44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230312e38372e3134322e302f32342d3234203d3e20323635333033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.87.142.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:20:9e:31:eb:fb:ea:c8:22:83:61:c3:6f:c8:1f:ee:a7:20:
76:bd:ad:88:1b:50:4c:93:b8:a0:54:2f:17:e9:9c:3e:10:5d:
2c:d7:64:c3:38:0f:dd:bd:9e:1e:90:31:44:fd:da:b1:27:1e:
b5:af:cd:27:6e:04:a0:81:56:c0:6b:9e:d5:0c:33:b5:70:73:
56:81:d3:6b:64:05:2a:5a:46:8e:56:49:19:99:06:ab:cb:d0:
28:0b:13:80:4b:23:c9:91:fb:8d:d5:c1:36:0d:28:03:f5:35:
f9:0e:84:fe:1a:c1:66:a3:21:f1:2d:ed:82:2a:f8:f3:91:2d:
93:f9:e6:c4:a9:ac:ab:a0:ad:df:64:8c:e2:de:97:e6:3e:fa:
3a:e8:6d:57:8a:83:cd:f0:a4:f0:05:40:f7:68:d8:91:c2:13:
60:47:72:f6:98:23:e5:be:db:7d:b8:09:97:10:d2:f3:93:43:
e2:39:8a:a2:5d:39:44:0d:be:aa:78:0b:e8:0b:ba:44:12:f5:
25:3a:eb:e1:a7:68:1c:d3:e1:e7:52:59:cf:03:2d:80:d0:28:
24:c7:55:5c:71:9f:a5:12:b5:f7:97:36:b8:54:21:6a:69:2b:
9e:d4:92:c0:f0:c5:5e:67:70:92:e6:f5:9d:1d:3a:07:a2:56:
75:7f:f8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:21:34 2025 by rpki-client