![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BA8kaM5eE7n2kiVizjSCEggoRsbGgBFCgpMCorxpzrmA/0/3133312e3136312e3231362e302f32322d3234203d3e20323634333933.roa
File: 3133312e3136312e3231362e302f32322d3234203d3e20323634333933.roa (raw, json)
Hash identifier: QqcRetVs5XgAkfuXoHJRQz57QvqEjjTlaujejQoiEtk=
Subject key identifier: C8:EB:04:20:A0:3C:2F:7A:4D:48:28:21:C7:92:0A:60:AB:58:8D:05
Certificate issuer: /CN=9A3EAB903F3D92104C008B6C652EA21CCFACBF0D
Certificate serial: 78E74C05DAA1118B30D8B64C8FEE90B9DAF01B7B
Authority key identifier: 9A:3E:AB:90:3F:3D:92:10:4C:00:8B:6C:65:2E:A2:1C:CF:AC:BF:0D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A3EAB903F3D92104C008B6C652EA21CCFACBF0D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BA8kaM5eE7n2kiVizjSCEggoRsbGgBFCgpMCorxpzrmA/0/3133312e3136312e3231362e302f32322d3234203d3e20323634333933.roa
Signing time: Mon 28 Aug 2023 19:32:40 +0000
ROA not before: Mon 28 Aug 2023 19:27:40 +0000
ROA not after: Mon 26 Aug 2024 19:32:40 +0000
asID: 264393
IP address blocks: 131.161.216.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:e7:4c:05:da:a1:11:8b:30:d8:b6:4c:8f:ee:90:b9:da:f0:1b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A3EAB903F3D92104C008B6C652EA21CCFACBF0D
Validity
Not Before: Aug 28 19:27:40 2023 GMT
Not After : Aug 26 19:32:40 2024 GMT
Subject: CN=C8EB0420A03C2F7A4D482821C7920A60AB588D05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c8:e4:f0:19:1f:86:72:05:f8:44:77:77:fa:
2d:8f:be:f6:9e:35:ea:9e:61:a0:a5:8c:98:95:0a:
02:c2:dd:ec:14:df:7e:37:7f:d6:44:be:47:35:d6:
39:4c:83:91:e3:2a:79:d9:bf:e1:40:23:7e:17:45:
26:02:6a:96:fd:9e:fe:f7:d6:5c:36:e6:30:b8:1c:
33:0f:ce:53:66:4f:03:52:90:c9:ae:af:78:b5:18:
61:d9:d4:5e:e1:35:1e:9e:d5:b6:11:e0:66:f6:2c:
42:b9:ec:9f:6f:c8:02:5f:cb:bb:9b:70:4d:64:2f:
e2:a6:b2:51:f9:21:14:bf:3f:16:2f:f3:bc:d3:e4:
b6:26:ef:03:79:10:74:b7:17:15:71:69:6d:a8:f3:
fe:55:c4:6e:00:fb:fd:a6:81:2e:49:18:a7:6c:3d:
c1:51:c0:f2:dc:ef:22:7d:d7:2f:93:39:b9:32:07:
a8:86:df:6c:a1:15:bc:2d:1d:8d:27:ca:40:01:d0:
58:50:98:6a:eb:0a:13:95:ea:85:6e:62:44:dc:42:
73:0e:2a:c9:11:54:58:90:7c:54:89:39:4e:21:66:
ff:1e:8d:65:2d:63:61:96:92:5e:9a:43:40:25:2a:
b8:09:4e:f6:79:e1:22:4e:e1:00:15:f2:7f:07:00:
5f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EB:04:20:A0:3C:2F:7A:4D:48:28:21:C7:92:0A:60:AB:58:8D:05
X509v3 Authority Key Identifier:
keyid:9A:3E:AB:90:3F:3D:92:10:4C:00:8B:6C:65:2E:A2:1C:CF:AC:BF:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BA8kaM5eE7n2kiVizjSCEggoRsbGgBFCgpMCorxpzrmA/0/9A3EAB903F3D92104C008B6C652EA21CCFACBF0D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A3EAB903F3D92104C008B6C652EA21CCFACBF0D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BA8kaM5eE7n2kiVizjSCEggoRsbGgBFCgpMCorxpzrmA/0/3133312e3136312e3231362e302f32322d3234203d3e20323634333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.161.216.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:1b:8d:ed:47:a2:97:13:06:3f:17:d6:27:b4:57:63:9f:4d:
da:0a:7c:89:f1:98:b2:c8:37:b3:4e:17:e5:be:44:15:7f:e5:
a4:36:f3:fe:30:ff:48:e1:67:53:71:72:df:4c:9b:7a:19:ab:
8b:36:d6:b4:d8:79:d1:e9:b1:13:2c:47:da:21:f7:68:4e:d4:
82:8a:fd:3f:f0:65:2d:42:46:ac:e9:44:49:13:e6:c2:70:c5:
4a:77:9f:3c:fa:14:21:3c:9c:9b:bf:f8:06:3b:ba:67:c7:31:
9c:f2:db:9d:8a:39:51:cc:17:54:71:80:ff:4c:8f:b2:81:4d:
94:ae:e7:d8:37:85:0e:66:8b:81:23:9d:4c:87:13:b9:c8:82:
4d:f3:47:6c:34:77:86:21:a2:f4:f2:dc:68:9f:03:bf:d7:c5:
7f:dd:34:3e:53:1b:bc:b5:6d:0a:5d:98:1d:91:41:26:58:61:
6c:b9:86:70:38:22:bf:83:6d:24:af:8e:48:52:c4:a9:e2:e7:
6a:73:08:33:04:e7:ff:79:94:c0:2a:d2:e6:77:3a:2e:b0:5c:
a9:4d:11:67:b6:8e:f6:9d:5e:b7:14:6c:23:33:3e:78:a9:b4:
e3:c0:59:71:d7:73:2f:69:6e:81:d9:b5:99:65:b0:e8:76:e4:
df:34:cf:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:35 2025 by rpki-client