![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AQMEkRRDZjQxbjj7fRX3rzQ8HHU2Xbt6SkyBsPVFnKwC/0/3136372e3235302e3234352e302f32342d3234203d3e20323635323338.roa
File: 3136372e3235302e3234352e302f32342d3234203d3e20323635323338.roa (raw, json)
Hash identifier: zPnkwB58CMVdQDJZ491F0LTmSC6U4hjfvK3KNiW3ccw=
Subject key identifier: D6:B9:DE:86:BD:C8:AF:8D:71:50:42:C8:76:51:B8:BA:D4:B9:12:CC
Certificate issuer: /CN=F2C798CCA839523FB3C7E4C6A365E6A65E11C9D5
Certificate serial: 673FA12EB298AF98DAA1351EEF86AA97D4A9ADAB
Authority key identifier: F2:C7:98:CC:A8:39:52:3F:B3:C7:E4:C6:A3:65:E6:A6:5E:11:C9:D5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2C798CCA839523FB3C7E4C6A365E6A65E11C9D5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AQMEkRRDZjQxbjj7fRX3rzQ8HHU2Xbt6SkyBsPVFnKwC/0/3136372e3235302e3234352e302f32342d3234203d3e20323635323338.roa
Signing time: Fri 20 Oct 2023 22:58:02 +0000
ROA not before: Fri 20 Oct 2023 22:53:02 +0000
ROA not after: Fri 18 Oct 2024 22:58:02 +0000
asID: 265238
IP address blocks: 167.250.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:3f:a1:2e:b2:98:af:98:da:a1:35:1e:ef:86:aa:97:d4:a9:ad:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2C798CCA839523FB3C7E4C6A365E6A65E11C9D5
Validity
Not Before: Oct 20 22:53:02 2023 GMT
Not After : Oct 18 22:58:02 2024 GMT
Subject: CN=D6B9DE86BDC8AF8D715042C87651B8BAD4B912CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:16:dc:91:a2:32:4e:f1:2d:68:3c:6c:9f:eb:
1f:19:d4:a4:8a:37:23:f0:16:54:24:a5:e8:72:79:
83:13:72:7a:fd:85:13:ff:db:c5:43:1c:b4:f9:93:
8e:07:41:95:d0:b2:26:bd:98:f0:5d:f7:08:bd:72:
91:6d:99:ad:01:d1:15:a4:82:d6:59:53:7b:ab:ac:
c0:3f:6b:32:f7:86:17:a8:b6:aa:e7:3b:e2:1c:8c:
6b:02:cc:20:34:d4:48:1c:ff:70:67:96:c0:60:e9:
30:88:0f:87:c9:28:37:a1:00:19:bb:8e:ba:5f:11:
2e:c5:8f:a8:2a:61:00:6f:93:41:47:af:61:2f:5c:
df:f2:bd:54:ba:e5:2a:56:bc:65:86:b7:3d:5d:eb:
60:4d:15:91:07:15:27:d9:a9:30:f3:6a:be:4f:e4:
31:b8:e1:2a:49:b6:49:e6:cb:76:a1:de:96:f5:43:
ca:3f:bb:b1:fa:d3:0b:bf:28:f2:72:6b:90:a2:87:
98:32:7a:fe:57:69:4a:9f:9d:7b:24:75:12:41:81:
72:68:32:ea:b8:0b:cb:b1:98:f7:8c:f9:71:59:a9:
c8:05:ad:1d:7b:b5:16:ea:79:f6:ae:22:8e:60:3f:
57:91:ac:73:fe:6a:a4:76:02:41:2c:5d:4b:dc:b2:
6e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B9:DE:86:BD:C8:AF:8D:71:50:42:C8:76:51:B8:BA:D4:B9:12:CC
X509v3 Authority Key Identifier:
keyid:F2:C7:98:CC:A8:39:52:3F:B3:C7:E4:C6:A3:65:E6:A6:5E:11:C9:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AQMEkRRDZjQxbjj7fRX3rzQ8HHU2Xbt6SkyBsPVFnKwC/0/F2C798CCA839523FB3C7E4C6A365E6A65E11C9D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2C798CCA839523FB3C7E4C6A365E6A65E11C9D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AQMEkRRDZjQxbjj7fRX3rzQ8HHU2Xbt6SkyBsPVFnKwC/0/3136372e3235302e3234352e302f32342d3234203d3e20323635323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.250.245.0/24
Signature Algorithm: sha256WithRSAEncryption
15:4a:7a:e2:a4:ed:2b:29:91:7f:12:fc:b0:70:d1:83:3b:3a:
bb:46:d9:0b:ce:9f:12:84:ee:ac:ae:c3:18:a6:7f:be:51:b6:
72:c3:a6:c6:1e:5c:de:ba:aa:1a:a9:49:6c:0a:29:47:98:b4:
cf:17:47:aa:d7:b2:db:5e:5f:58:74:66:ca:95:2d:2e:da:d3:
f8:a9:ac:4d:2d:e2:1c:93:7c:d5:01:31:2e:3a:18:06:f7:a2:
95:b4:bc:27:c4:fd:a3:71:21:3d:e7:8d:bc:10:c1:92:88:af:
78:48:16:e8:8d:ef:92:24:3f:3a:a4:76:1f:ea:1a:54:03:d3:
f0:b5:c5:4f:7c:e2:38:4d:1e:29:49:f4:28:19:15:ef:c3:e4:
91:c9:9e:16:ac:e6:d4:93:e0:2b:6e:10:22:ef:73:02:28:99:
87:81:c6:6a:1e:ac:bb:8b:75:d4:51:3c:9f:34:ab:a6:2d:ca:
2d:22:ed:00:b1:cf:9b:49:7c:7e:e3:29:e9:3b:72:a6:5a:03:
83:2f:3f:47:56:bb:e9:4d:c8:b3:06:1a:4d:59:50:30:b7:29:
a1:99:bc:c9:02:ee:b0:07:13:af:bc:f9:e2:19:4f:cb:b5:09:
36:9a:31:0e:05:d8:3a:87:ef:9c:f1:66:66:61:de:7e:39:8c:
52:8d:ff:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:22:39 2025 by rpki-client