![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A4HwbUNHmuwooUNvexdNcNJGDtXn1LkgnyH5aGEz5VFN/0/3138362e3230392e3136302e302f32322d3232203d3e20323731343039.roa
File: 3138362e3230392e3136302e302f32322d3232203d3e20323731343039.roa (raw, json)
Hash identifier: 5TmqdTmygt+L8q0AsJGoqM0JX1x4qRFvG1uFPpzayfc=
Subject key identifier: 4C:F9:81:43:50:2C:20:C9:FA:32:EC:49:9B:F9:D5:90:75:83:1B:C0
Certificate issuer: /CN=A9524ACD3B13455E92B89FFEDAE5CDF47FE163C5
Certificate serial: 0C9D46A97CA383050D64792EB36B386C4980395F
Authority key identifier: A9:52:4A:CD:3B:13:45:5E:92:B8:9F:FE:DA:E5:CD:F4:7F:E1:63:C5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9524ACD3B13455E92B89FFEDAE5CDF47FE163C5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A4HwbUNHmuwooUNvexdNcNJGDtXn1LkgnyH5aGEz5VFN/0/3138362e3230392e3136302e302f32322d3232203d3e20323731343039.roa
Signing time: Mon 22 May 2023 19:19:33 +0000
ROA not before: Mon 22 May 2023 19:14:33 +0000
ROA not after: Mon 20 May 2024 19:19:33 +0000
asID: 271409
IP address blocks: 186.209.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:9d:46:a9:7c:a3:83:05:0d:64:79:2e:b3:6b:38:6c:49:80:39:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9524ACD3B13455E92B89FFEDAE5CDF47FE163C5
Validity
Not Before: May 22 19:14:33 2023 GMT
Not After : May 20 19:19:33 2024 GMT
Subject: CN=4CF98143502C20C9FA32EC499BF9D59075831BC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:46:37:d5:ca:15:32:08:75:fd:7d:2c:ed:9f:
44:74:bd:d5:ce:bf:3a:22:8a:fe:eb:62:c8:4c:bc:
c8:e9:f1:eb:1d:0e:c5:5d:82:01:84:d7:52:b1:02:
04:72:a4:3d:94:2f:bd:79:0a:e2:d2:fe:2c:42:1c:
8c:32:71:b5:00:bd:8d:f2:67:7d:5c:a8:3f:e9:9f:
c8:91:18:f6:9f:b8:da:be:52:a8:9b:05:ba:15:c5:
a3:83:31:be:27:f3:cd:90:5f:70:a5:1f:e4:c3:2e:
92:bc:a4:8f:50:f0:f1:f7:fd:3b:58:39:3a:34:6d:
17:62:fd:9e:89:81:ad:09:87:f8:83:c5:dc:fc:e4:
05:30:69:2f:58:9a:bf:37:c8:af:1c:6e:9b:3c:77:
44:d2:cb:51:54:3c:cf:a1:df:06:de:70:a1:c7:0c:
7f:39:34:25:ce:c1:55:e8:84:6f:9d:9b:2d:39:fd:
31:8e:68:93:b8:45:19:9c:76:78:46:3e:a9:aa:76:
e0:6b:d8:51:ab:77:fc:77:5e:ca:89:50:ac:e3:1c:
b7:81:cd:e6:5a:16:8f:52:7f:95:bf:a4:71:a6:d2:
bc:bb:f1:a6:e6:7b:60:b4:3f:ef:01:e6:6c:0a:35:
92:fc:b1:6b:fe:a1:25:40:1d:ad:87:ac:6b:89:ce:
02:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F9:81:43:50:2C:20:C9:FA:32:EC:49:9B:F9:D5:90:75:83:1B:C0
X509v3 Authority Key Identifier:
keyid:A9:52:4A:CD:3B:13:45:5E:92:B8:9F:FE:DA:E5:CD:F4:7F:E1:63:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A4HwbUNHmuwooUNvexdNcNJGDtXn1LkgnyH5aGEz5VFN/0/A9524ACD3B13455E92B89FFEDAE5CDF47FE163C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9524ACD3B13455E92B89FFEDAE5CDF47FE163C5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A4HwbUNHmuwooUNvexdNcNJGDtXn1LkgnyH5aGEz5VFN/0/3138362e3230392e3136302e302f32322d3232203d3e20323731343039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.209.160.0/22
Signature Algorithm: sha256WithRSAEncryption
90:3c:3f:0c:e2:a7:89:9a:ff:ac:85:e4:98:2c:be:77:5c:b2:
eb:98:73:82:3b:d4:50:c9:f6:13:2b:20:9b:dd:95:66:4d:a1:
0f:4f:f4:6b:4e:45:b4:34:aa:02:73:e7:00:5d:14:4e:64:89:
bf:f7:cf:76:ed:b1:49:97:41:0f:61:ab:27:11:37:09:6d:1d:
64:f6:ab:1f:0a:1b:8f:24:cc:12:37:a2:a8:7a:6c:cc:74:b2:
ec:4a:0a:22:89:06:52:8a:27:cb:ec:51:ea:91:61:30:f7:ff:
b2:74:b8:f3:45:07:5a:bd:87:c7:3e:ea:0d:4a:fe:77:8e:a0:
8c:e1:28:70:9e:7f:a4:03:c0:a7:6c:90:22:48:62:71:07:bd:
8b:8a:b2:06:55:d6:b9:d8:fc:b7:ec:23:e5:36:4e:8b:fa:b8:
c4:b6:9b:c4:36:0a:7e:bc:92:9e:aa:79:bf:65:c7:6f:ef:a9:
93:6a:d9:4c:b2:e9:e6:93:5a:d8:8b:c2:ab:1d:33:f6:cc:c9:
cc:ac:ed:05:73:cd:b1:a5:db:23:8a:56:8c:43:7b:a3:53:ce:
a9:2e:85:29:de:47:a8:18:11:30:c4:77:91:5e:38:a7:1e:bb:
75:42:37:90:47:8c:12:72:70:eb:ec:88:f5:07:85:83:6d:3d:
3d:f0:81:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:23:43 2025 by rpki-client