![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3231392e302f32342d3234203d3e20323632383038.roa
File: 3139312e3235332e3231392e302f32342d3234203d3e20323632383038.roa (raw, json)
Hash identifier: r9Rk0qpfTJ/hhT+mbnfOfV8gq2HzUwnOvUH7KnXAJMw=
Subject key identifier: DF:CD:A0:3D:30:BE:ED:A8:1C:58:B3:3C:12:39:CF:14:1F:DD:5E:20
Certificate issuer: /CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
Certificate serial: 37BD4CEC504C8629084D42CC27AA924C38689276
Authority key identifier: 01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3231392e302f32342d3234203d3e20323632383038.roa
Signing time: Tue 10 Oct 2023 13:57:22 +0000
ROA not before: Tue 10 Oct 2023 13:52:22 +0000
ROA not after: Tue 08 Oct 2024 13:57:22 +0000
asID: 262808
IP address blocks: 191.253.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:bd:4c:ec:50:4c:86:29:08:4d:42:cc:27:aa:92:4c:38:68:92:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
Validity
Not Before: Oct 10 13:52:22 2023 GMT
Not After : Oct 8 13:57:22 2024 GMT
Subject: CN=DFCDA03D30BEEDA81C58B33C1239CF141FDD5E20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:38:fe:3f:3d:76:01:90:b3:e7:b3:cf:79:40:
5f:fa:e9:0d:a9:78:b7:34:56:a8:1d:d0:01:b8:9a:
51:f7:52:6f:c4:81:bc:92:d3:a1:fc:2d:46:08:9a:
97:cf:37:5f:c5:31:d6:15:59:c2:78:42:21:05:64:
60:76:f6:7d:ec:e8:b5:07:93:6e:a4:6b:9f:83:2d:
98:19:7e:b1:59:87:8f:98:38:b8:16:52:5f:f6:38:
8c:39:5e:e2:01:ff:a2:3d:d9:3d:17:3b:02:13:cd:
e8:90:fc:84:c0:43:93:4e:02:ab:41:14:9f:93:25:
86:b0:10:c2:69:5f:f3:26:02:d0:b5:5e:92:dc:5c:
2f:02:56:5e:51:83:f8:76:61:64:43:2c:b9:e7:d3:
e6:1b:bc:fd:67:85:5e:59:d3:72:d8:65:2b:56:9a:
44:84:ad:bc:ef:a0:b1:eb:de:21:34:28:90:d2:3c:
a7:80:1a:55:10:c6:2d:e1:55:62:75:68:55:af:a1:
da:4a:8f:5f:0a:ed:4b:7e:cf:1b:0f:e6:47:81:ce:
77:7e:c7:24:cb:21:43:ca:c8:60:8a:7e:66:72:95:
ad:f0:42:78:eb:04:cd:19:2c:c5:15:67:b1:e9:9b:
e4:76:a3:87:49:ec:26:74:0d:a8:8b:29:ac:62:91:
32:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:CD:A0:3D:30:BE:ED:A8:1C:58:B3:3C:12:39:CF:14:1F:DD:5E:20
X509v3 Authority Key Identifier:
keyid:01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3231392e302f32342d3234203d3e20323632383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.253.219.0/24
Signature Algorithm: sha256WithRSAEncryption
92:da:98:7e:28:be:97:51:2e:b3:5e:d9:e2:70:17:ae:03:f7:
7d:81:9a:74:17:fd:1a:29:1d:ed:33:4e:ee:4f:5d:c5:02:c3:
71:43:1f:dd:01:1b:e8:93:b7:49:f4:87:db:2e:2e:03:c3:dc:
40:1b:00:b1:57:10:2c:2f:90:5d:87:d5:04:62:86:55:d2:e1:
22:e5:0a:59:bd:75:0c:3b:98:84:ff:5b:41:21:19:57:12:0c:
70:23:3c:b8:ec:7c:ad:b8:32:08:66:fc:f2:57:68:28:f3:e6:
66:fe:e1:2a:7f:b9:4d:e3:36:f6:a7:43:65:5e:68:e6:83:64:
9e:fe:8f:f0:ad:94:bd:af:03:1a:b0:3e:05:e0:53:8c:17:3c:
7a:31:a8:87:e6:ca:d2:d7:6a:1e:b6:8d:9d:b5:05:8f:8c:53:
6f:8c:c2:fc:fa:8b:95:d9:8c:ed:da:92:18:c9:12:d3:8b:3e:
44:55:8c:ae:0f:03:d2:af:11:65:94:19:c5:49:1e:1b:85:64:
2a:f1:61:b5:6d:cd:ea:d6:09:5f:2f:ec:18:d8:e7:8b:d8:07:
0d:d0:11:db:77:1a:c9:a5:04:28:4b:cb:88:01:cd:4f:06:9b:
d8:08:04:3c:d8:2c:6b:2b:b8:1d:a9:f6:d6:04:58:a7:57:55:
75:20:d7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:06 2025 by rpki-client