![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/34352e3137302e37322e302f32342d3234203d3e20323638313533.roa
File: 34352e3137302e37322e302f32342d3234203d3e20323638313533.roa (raw, json)
Hash identifier: B8RxU6sybJzzR1lw1x6imyVPQIusPn6/BwCMc4UzjQU=
Subject key identifier: 4E:C4:45:30:AC:B8:14:3B:20:E6:2A:7E:7B:F0:D9:6A:0C:CF:F1:82
Certificate issuer: /CN=B71A74374C5B1B65B9457E02C3D72B8FD6E504D5
Certificate serial: 3812373D095FDEC129FCCEAAF73CAD902D28390C
Authority key identifier: B7:1A:74:37:4C:5B:1B:65:B9:45:7E:02:C3:D7:2B:8F:D6:E5:04:D5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B71A74374C5B1B65B9457E02C3D72B8FD6E504D5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/34352e3137302e37322e302f32342d3234203d3e20323638313533.roa
Signing time: Fri 07 Jul 2023 16:24:51 +0000
ROA not before: Fri 07 Jul 2023 16:19:51 +0000
ROA not after: Fri 05 Jul 2024 16:24:51 +0000
asID: 268153
IP address blocks: 45.170.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:12:37:3d:09:5f:de:c1:29:fc:ce:aa:f7:3c:ad:90:2d:28:39:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B71A74374C5B1B65B9457E02C3D72B8FD6E504D5
Validity
Not Before: Jul 7 16:19:51 2023 GMT
Not After : Jul 5 16:24:51 2024 GMT
Subject: CN=4EC44530ACB8143B20E62A7E7BF0D96A0CCFF182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:91:a9:2d:72:6e:b2:2a:eb:ba:3e:59:6a:03:
ce:82:ac:a3:46:64:f0:23:d9:ef:a8:58:89:4e:46:
19:b6:75:41:a3:5d:32:1b:62:ca:ca:74:a6:1f:9b:
6c:e3:79:e6:e4:fa:67:8c:e5:5b:6e:99:f0:4d:67:
ac:f1:ff:07:ee:30:76:47:74:da:cb:8d:b7:e0:90:
45:ef:05:aa:ab:55:2e:06:cd:22:16:5b:14:d2:88:
d5:a3:40:bc:80:18:f0:c1:3a:f5:9c:81:b1:0a:0c:
54:13:8f:51:c6:7a:65:88:3e:f8:53:b1:24:5e:32:
b0:b8:b7:09:f3:df:ad:dc:90:39:e1:79:b7:16:fa:
3a:9e:8c:1c:8f:90:c9:dd:e5:a2:51:60:a1:db:44:
ca:fa:13:29:95:b8:34:a9:7e:d7:e6:75:23:5b:81:
8d:0e:37:ce:09:f3:20:5a:43:a8:2b:75:d6:ce:5d:
87:b0:f4:e2:fa:39:55:6f:e2:20:a6:49:9e:c0:2c:
cb:28:90:dd:33:82:3b:b2:60:1b:1c:39:5e:13:7d:
eb:e2:78:77:c1:02:78:a1:df:de:c1:27:a4:21:1a:
d4:62:e6:9b:1e:5b:76:8b:4e:15:b2:fb:ed:00:47:
3d:16:db:4a:f3:b8:76:f8:91:1e:d9:7c:5d:b3:1b:
13:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C4:45:30:AC:B8:14:3B:20:E6:2A:7E:7B:F0:D9:6A:0C:CF:F1:82
X509v3 Authority Key Identifier:
keyid:B7:1A:74:37:4C:5B:1B:65:B9:45:7E:02:C3:D7:2B:8F:D6:E5:04:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/B71A74374C5B1B65B9457E02C3D72B8FD6E504D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B71A74374C5B1B65B9457E02C3D72B8FD6E504D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/34352e3137302e37322e302f32342d3234203d3e20323638313533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.72.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:c4:0b:2d:e2:2c:c7:46:32:72:7d:81:7c:e5:e4:1f:0f:db:
26:ad:51:09:11:56:7d:84:21:0b:92:ad:f8:da:12:33:fb:04:
3b:f9:1a:d9:19:e8:82:ec:61:47:3f:a9:5e:1e:92:95:30:51:
a5:06:7d:5e:8e:71:c4:3c:62:ba:87:b9:09:c4:65:79:7a:11:
ad:df:64:b8:69:43:04:72:b6:b5:e7:e4:2e:91:b6:ea:af:b5:
ca:45:b4:43:b2:75:d9:6d:7b:ff:35:21:12:8a:04:cf:84:d8:
65:53:9d:26:96:f3:34:a7:34:23:a7:43:89:33:b1:d8:e7:9c:
5a:d7:2b:81:72:67:ee:32:26:5a:fb:48:68:2c:e7:cb:de:04:
b4:bc:54:43:af:2e:1e:04:f4:e2:b0:ef:71:a6:82:43:4e:f6:
3a:e4:94:3b:3d:6a:df:aa:92:2d:8b:1d:61:a3:33:91:00:96:
c8:aa:58:cf:5c:3d:33:11:67:fa:df:05:8b:e5:39:47:02:8f:
8e:57:6e:56:eb:75:20:29:3e:b2:a9:8e:c4:f1:ff:0e:2e:17:
a0:94:5c:46:7d:0f:bd:42:b5:af:3f:8e:27:de:df:06:a3:44:
c1:85:2c:ac:31:9c:02:8d:2c:10:d6:e2:80:29:81:09:1e:51:
12:94:77:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:22 2025 by rpki-client