![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9rZrzyrf4ksRs5pyrvkusLNBb811r8fpPhmwcdZBmn6H/0/3136382e3139352e3134302e302f32322d3332203d3e20323633343938.roa
File: 3136382e3139352e3134302e302f32322d3332203d3e20323633343938.roa (raw, json)
Hash identifier: 0zrrISqzRdDwYMOwptB+jKcl8oCJPSpZIt4jQ+l1DDA=
Subject key identifier: 51:DC:80:5D:DC:57:1A:A5:80:B4:53:B4:6B:98:BD:B4:2B:A8:6A:3A
Certificate issuer: /CN=99F2926A1E8256108ADA6266745789A0F7A94858
Certificate serial: 03FF671BE031BF96EE449A2CA71813C121E5B3DA
Authority key identifier: 99:F2:92:6A:1E:82:56:10:8A:DA:62:66:74:57:89:A0:F7:A9:48:58
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/99F2926A1E8256108ADA6266745789A0F7A94858.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9rZrzyrf4ksRs5pyrvkusLNBb811r8fpPhmwcdZBmn6H/0/3136382e3139352e3134302e302f32322d3332203d3e20323633343938.roa
Signing time: Thu 08 Feb 2024 14:35:53 +0000
ROA not before: Thu 08 Feb 2024 14:30:53 +0000
ROA not after: Thu 06 Feb 2025 14:35:53 +0000
asID: 263498
IP address blocks: 168.195.140.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:ff:67:1b:e0:31:bf:96:ee:44:9a:2c:a7:18:13:c1:21:e5:b3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99F2926A1E8256108ADA6266745789A0F7A94858
Validity
Not Before: Feb 8 14:30:53 2024 GMT
Not After : Feb 6 14:35:53 2025 GMT
Subject: CN=51DC805DDC571AA580B453B46B98BDB42BA86A3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:41:42:b9:ae:7c:ec:6e:6d:c4:5f:fe:dd:fe:
21:20:21:b5:69:3f:90:d4:fb:ce:40:5a:93:2b:ad:
89:b8:23:44:c1:f2:46:25:ff:49:48:8b:b6:fc:c3:
3a:bd:c5:fc:06:7e:78:5f:9a:1d:e2:f9:99:04:de:
ca:1c:fd:61:17:96:53:f1:77:19:72:8a:d1:ec:14:
49:f6:a7:a4:9c:22:b9:99:f9:20:9a:da:3b:d9:60:
d7:09:f5:02:23:15:8c:7f:cc:34:ff:9a:6c:96:78:
03:fa:ad:e8:b3:c8:2c:4f:bb:9f:f2:83:f1:c0:1a:
90:8b:f8:10:95:a5:8d:9b:c6:79:e3:2a:99:86:cd:
d1:7c:2d:0c:71:75:a0:4c:5b:26:b0:89:b9:e0:23:
63:2f:91:35:1f:ed:2e:ea:7e:09:e2:fd:fd:a6:a0:
7f:65:38:98:78:0d:03:01:ad:94:a0:ce:dd:98:ca:
db:4e:41:c5:37:bc:2f:0e:19:54:be:39:0b:d8:29:
e6:9e:b4:ca:8c:8e:28:08:bb:f5:ff:2c:bc:5e:51:
0f:8e:c3:e4:73:9a:29:2b:c7:4d:5d:5a:be:1f:20:
aa:28:c1:de:31:18:d8:56:68:85:d4:52:b9:50:04:
70:a5:2c:d1:b7:45:b7:9e:76:64:42:1d:06:79:c9:
bb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DC:80:5D:DC:57:1A:A5:80:B4:53:B4:6B:98:BD:B4:2B:A8:6A:3A
X509v3 Authority Key Identifier:
keyid:99:F2:92:6A:1E:82:56:10:8A:DA:62:66:74:57:89:A0:F7:A9:48:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9rZrzyrf4ksRs5pyrvkusLNBb811r8fpPhmwcdZBmn6H/0/99F2926A1E8256108ADA6266745789A0F7A94858.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/99F2926A1E8256108ADA6266745789A0F7A94858.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rZrzyrf4ksRs5pyrvkusLNBb811r8fpPhmwcdZBmn6H/0/3136382e3139352e3134302e302f32322d3332203d3e20323633343938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.140.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:71:48:2e:b2:ce:7a:f7:3d:ef:4c:d0:4d:51:94:2a:80:b5:
b6:d7:d6:4d:7e:39:db:39:30:d1:26:95:a2:08:8e:82:0f:69:
77:f7:54:ba:e6:05:6f:e5:13:76:ff:ea:8e:6b:eb:65:02:19:
3a:60:c0:81:bf:02:06:3a:2d:93:6b:f8:72:08:ef:07:c5:da:
ac:0e:20:31:c2:1d:c5:93:09:3c:08:8f:ff:09:2a:b2:c5:c3:
94:58:b4:64:fb:b4:ad:7a:6b:50:85:4a:67:13:39:2c:ad:fc:
ce:2b:ec:5d:dd:11:00:03:76:14:89:64:d8:9b:4e:c2:85:df:
98:43:ae:0b:54:11:07:05:f5:f7:bc:c9:77:7c:f9:8b:29:37:
bf:b5:a5:33:43:1b:65:cd:c3:38:dd:46:05:6d:72:9f:2c:2f:
8a:06:cd:3d:6f:3b:76:89:fa:04:03:9d:92:b6:cc:51:db:e9:
f6:27:ea:10:e8:92:b7:b3:c2:f5:dc:d0:ec:15:31:a6:71:37:
60:4e:ae:02:7a:61:67:e5:b6:c9:f7:3d:98:50:26:19:35:22:
d0:db:05:2c:c6:8e:ae:05:c8:c7:ee:a8:d1:4a:85:95:ae:6d:
83:f5:37:6f:a0:64:0e:e4:e7:75:9a:b5:ec:1a:b4:4c:f9:5e:
5f:92:66:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:11 2025 by rpki-client