![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/1/3137392e34322e342e302f32322d3233203d3e20323731313034.roa
File: 3137392e34322e342e302f32322d3233203d3e20323731313034.roa (raw, json)
Hash identifier: BlZRP6gXy8N/LFQrqgnu8W4HUTiIu8IS8+zAKsg7du4=
Subject key identifier: 19:2E:16:8D:8B:D0:C3:DF:D6:DB:13:48:AD:1B:C3:CC:6E:D1:F7:D9
Certificate issuer: /CN=F8E277D5D1FA8A0BBEEA4734CD60149E6DA60B50
Certificate serial: 69AD233A81E90EBA8810EF935A5987BCE9F1DC1B
Authority key identifier: F8:E2:77:D5:D1:FA:8A:0B:BE:EA:47:34:CD:60:14:9E:6D:A6:0B:50
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F8E277D5D1FA8A0BBEEA4734CD60149E6DA60B50.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/1/3137392e34322e342e302f32322d3233203d3e20323731313034.roa
Signing time: Mon 22 Jan 2024 15:29:26 +0000
ROA not before: Mon 22 Jan 2024 15:24:26 +0000
ROA not after: Mon 20 Jan 2025 15:29:26 +0000
asID: 271104
IP address blocks: 179.42.4.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:ad:23:3a:81:e9:0e:ba:88:10:ef:93:5a:59:87:bc:e9:f1:dc:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8E277D5D1FA8A0BBEEA4734CD60149E6DA60B50
Validity
Not Before: Jan 22 15:24:26 2024 GMT
Not After : Jan 20 15:29:26 2025 GMT
Subject: CN=192E168D8BD0C3DFD6DB1348AD1BC3CC6ED1F7D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2f:28:fa:21:24:a6:f6:5e:b9:41:ac:92:5d:
f6:28:b1:8b:e7:70:e1:2d:5e:f9:ac:ad:31:37:62:
4d:3b:db:e3:89:17:93:e7:4d:86:f6:73:d9:7f:94:
03:c1:89:20:a7:10:86:93:8c:a7:52:33:22:b4:0a:
a7:b0:71:e1:fd:30:4c:08:35:2c:7b:ad:c1:9c:7e:
2b:63:57:7c:e1:44:1a:bf:b5:c8:2c:d4:a6:43:e8:
bd:b4:4f:24:1f:c8:3a:07:08:ac:47:9e:98:48:e2:
bf:93:11:33:57:70:cc:5d:b9:6f:68:76:5f:0d:15:
b1:9f:7e:fb:29:7a:f9:65:64:d7:ae:34:c2:9f:4d:
30:52:8f:4e:80:21:50:ee:d3:e3:c3:39:69:b1:6f:
fa:1a:11:7d:a4:c4:3b:17:e5:c8:fa:25:b8:ad:33:
d0:60:2b:f4:03:cc:e1:2a:ca:be:f6:41:91:fd:d9:
4a:f7:de:7f:eb:14:2e:d5:69:45:37:78:d6:22:dc:
80:f4:29:f0:c0:4d:cf:43:35:e6:48:59:3b:34:a9:
3a:71:2b:13:85:7f:1c:e8:18:1f:1b:59:33:d1:24:
aa:56:33:31:a5:f1:81:b5:3a:a3:d9:d9:68:d7:2f:
e9:9f:25:61:b2:53:ef:45:86:d2:59:95:33:21:a5:
a3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:2E:16:8D:8B:D0:C3:DF:D6:DB:13:48:AD:1B:C3:CC:6E:D1:F7:D9
X509v3 Authority Key Identifier:
keyid:F8:E2:77:D5:D1:FA:8A:0B:BE:EA:47:34:CD:60:14:9E:6D:A6:0B:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/1/F8E277D5D1FA8A0BBEEA4734CD60149E6DA60B50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F8E277D5D1FA8A0BBEEA4734CD60149E6DA60B50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/1/3137392e34322e342e302f32322d3233203d3e20323731313034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.42.4.0/22
Signature Algorithm: sha256WithRSAEncryption
73:b8:a8:a8:2b:28:ba:bc:3e:2c:c4:77:22:17:3c:d7:8e:93:
61:ff:19:c8:4d:c8:71:59:6f:03:e1:3b:94:7f:dd:aa:6b:9a:
fe:6d:38:2e:10:5b:e4:58:fb:0a:57:a9:fe:b4:f6:69:ba:43:
76:ab:a1:1e:9d:2c:1f:88:ad:c4:ce:8a:26:0d:4a:99:4d:88:
44:38:76:24:93:ab:89:68:94:30:4d:f5:b4:2a:27:3f:9c:7c:
45:4b:52:22:d2:10:b3:3f:01:58:9d:0a:b3:f8:e5:55:97:f7:
42:9c:a3:13:df:54:26:fe:98:9a:41:83:fb:b2:28:72:fb:18:
fd:06:38:a6:cc:e3:74:80:8a:03:01:f1:83:94:26:23:54:b8:
d2:2b:ac:41:a9:ff:c4:32:66:66:2b:71:7f:e2:4f:e5:d7:a3:
d2:5b:ff:ff:07:1c:83:77:8b:5e:e6:45:c5:5e:96:fb:85:8d:
1d:0c:e6:52:86:a4:61:b0:79:a4:98:08:ae:ae:31:88:6a:ea:
73:2e:e8:56:75:89:a4:65:41:e2:9d:ce:e2:bf:e1:e7:f3:72:
03:1e:ba:25:42:62:3d:65:a6:9d:c3:a4:5f:77:6a:b8:54:9e:
14:fc:13:b5:3b:ba:c2:b7:2d:00:79:c6:94:42:62:e2:c3:78:
a9:46:c0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:28 2025 by rpki-client