![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230312e38372e3135302e302f32342d3234203d3e20323635333033.roa
File: 3230312e38372e3135302e302f32342d3234203d3e20323635333033.roa (raw, json)
Hash identifier: xcLHoR6yjqhjk85pfm4xRexTzw0o1ZekEw/AuHUwUB8=
Subject key identifier: CE:5B:63:47:78:31:AE:CC:FF:12:E9:E4:FA:24:1E:A2:3F:15:6E:CC
Certificate issuer: /CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
Certificate serial: 0A1A816E5E7620F70892A5FE639557389DDD39D0
Authority key identifier: 44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230312e38372e3135302e302f32342d3234203d3e20323635333033.roa
Signing time: Wed 10 Jan 2024 17:33:26 +0000
ROA not before: Wed 10 Jan 2024 17:28:26 +0000
ROA not after: Wed 08 Jan 2025 17:33:26 +0000
asID: 265303
IP address blocks: 201.87.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:1a:81:6e:5e:76:20:f7:08:92:a5:fe:63:95:57:38:9d:dd:39:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
Validity
Not Before: Jan 10 17:28:26 2024 GMT
Not After : Jan 8 17:33:26 2025 GMT
Subject: CN=CE5B63477831AECCFF12E9E4FA241EA23F156ECC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:23:b6:15:55:ac:20:80:9d:9f:7a:ad:ba:05:
39:ff:be:b6:26:eb:b5:72:1a:5d:5f:03:b8:72:6e:
fb:33:74:bd:16:8d:c1:e9:9b:46:28:2f:65:3a:b5:
6c:41:55:4b:e3:b2:ec:1b:8c:44:31:bc:3d:5c:1d:
24:b8:d6:0d:36:b6:46:e1:64:bd:21:d5:ea:bc:c2:
5e:81:44:54:29:b3:df:ff:ef:54:0b:43:5c:f9:99:
bc:35:ed:99:70:12:a0:d2:12:11:df:98:ca:cc:f0:
83:d6:43:57:96:e4:e6:04:1a:d8:77:78:bf:16:e7:
e5:e8:ec:bc:13:52:80:df:ad:cf:05:0c:15:95:f2:
f4:de:96:27:48:d1:2c:98:10:94:99:c8:b9:4e:08:
ca:cb:63:a5:a1:9d:dd:e4:46:04:54:21:9d:0a:ca:
e5:f1:16:30:40:b6:68:0f:45:b3:84:53:a4:0e:6f:
e0:fd:dc:cc:88:2a:eb:dc:59:27:e2:a7:78:31:fc:
20:be:6b:f8:9a:8d:51:8c:a4:90:89:7b:70:c8:82:
ad:4d:f1:a4:b2:40:ea:45:6f:73:f4:0e:ef:ef:09:
7b:06:6f:47:f4:69:7e:cf:10:e6:b9:aa:95:34:23:
27:56:65:87:03:83:3d:ff:18:60:b8:69:be:bb:9b:
62:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5B:63:47:78:31:AE:CC:FF:12:E9:E4:FA:24:1E:A2:3F:15:6E:CC
X509v3 Authority Key Identifier:
keyid:44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230312e38372e3135302e302f32342d3234203d3e20323635333033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.87.150.0/24
Signature Algorithm: sha256WithRSAEncryption
72:8d:72:31:34:b9:10:bf:25:21:ae:8a:54:b2:d1:6b:65:77:
1f:a0:f3:38:af:dd:dd:c5:52:41:f0:42:29:40:d2:b9:78:1b:
63:34:58:1e:6d:64:95:2e:c6:6b:fa:c3:37:65:2b:4c:ab:36:
3d:ea:2c:71:a0:3e:68:67:6b:24:cb:b7:49:ce:71:d2:fc:29:
52:50:35:86:ea:39:ea:0b:32:d3:3a:be:d4:66:60:cb:ca:f7:
97:8a:c3:a2:dc:58:0b:40:25:0e:d8:f3:05:9a:46:93:12:ba:
ca:f9:f7:a2:2c:3c:f1:8e:c0:bd:8d:2d:2f:42:80:e1:47:d6:
43:eb:be:5c:37:36:57:12:fb:d8:c6:e8:77:a0:70:8a:68:0b:
22:29:46:54:62:38:48:e7:22:3c:b4:95:85:d9:97:dd:06:60:
4d:4a:04:74:6c:42:58:bc:66:01:6b:92:18:df:cc:dd:ad:7a:
ae:50:fc:e0:02:60:cc:29:76:32:c7:be:8a:97:d9:f4:bc:ad:
c3:28:9d:d7:69:69:11:8d:22:5d:1b:b0:ec:2b:84:df:9a:37:
63:3e:8e:f9:37:ba:0c:0f:43:81:6d:d2:66:43:24:9d:e8:98:
45:d6:a4:c1:36:6a:2a:d0:f5:cc:f3:22:4f:08:ce:4a:6b:a0:
c3:57:33:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:23:15 2025 by rpki-client