![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/3134332e3230382e3132382e302f32332d3332203d3e20323634303931.roa
File: 3134332e3230382e3132382e302f32332d3332203d3e20323634303931.roa (raw, json)
Hash identifier: /JDnAoiN+t3Qa6GAiMJ8XYmJMURU4u3VybudEeLwLNI=
Subject key identifier: 12:07:0E:D8:2D:62:63:C0:D4:CB:02:48:0C:52:18:E1:F6:05:AF:4A
Certificate issuer: /CN=E5F0271EE77B00E3F2BA75BEEAE90D557A4E3102
Certificate serial: 2432681D71D90CA35A04482FBCB5912A7D62CCF4
Authority key identifier: E5:F0:27:1E:E7:7B:00:E3:F2:BA:75:BE:EA:E9:0D:55:7A:4E:31:02
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5F0271EE77B00E3F2BA75BEEAE90D557A4E3102.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/3134332e3230382e3132382e302f32332d3332203d3e20323634303931.roa
Signing time: Thu 21 Mar 2024 19:50:56 +0000
ROA not before: Thu 21 Mar 2024 19:45:56 +0000
ROA not after: Thu 20 Mar 2025 19:50:56 +0000
asID: 264091
IP address blocks: 143.208.128.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:32:68:1d:71:d9:0c:a3:5a:04:48:2f:bc:b5:91:2a:7d:62:cc:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5F0271EE77B00E3F2BA75BEEAE90D557A4E3102
Validity
Not Before: Mar 21 19:45:56 2024 GMT
Not After : Mar 20 19:50:56 2025 GMT
Subject: CN=12070ED82D6263C0D4CB02480C5218E1F605AF4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:70:5c:36:b0:1f:8f:e8:15:f8:50:41:36:a2:
38:d5:ea:42:c4:99:9f:ad:8f:18:30:07:b7:ee:7f:
78:5b:0e:16:5e:27:62:24:b0:be:bd:16:33:ba:5b:
0d:0b:5a:b3:37:e5:56:58:64:f7:6c:6b:62:0e:16:
81:9e:d2:c9:53:d9:ee:78:1f:42:d5:b5:36:73:c8:
f6:63:57:5e:10:46:a9:40:4c:5c:76:ac:20:53:52:
e5:9f:6b:66:5a:1b:8b:77:f8:1a:45:71:80:d6:23:
18:ef:be:26:d8:9c:95:a1:a2:80:9b:40:17:36:96:
10:c8:4d:f1:9c:ba:81:d8:62:ef:2a:ad:bf:67:bb:
4e:51:b9:9c:39:5b:c2:73:ee:10:56:16:3c:04:08:
92:ad:45:b9:b3:5d:d9:38:2d:49:4a:ff:68:d8:67:
49:2c:1d:47:0b:b9:6a:bb:f7:33:99:d7:c7:f2:52:
14:50:03:34:dc:dc:18:60:5e:ef:a7:10:71:65:9f:
23:01:21:45:06:bf:8e:37:86:7e:a7:88:50:72:e5:
e9:56:28:2c:21:0a:b5:72:74:47:92:53:df:0f:7e:
e8:a4:ab:9a:f4:81:29:dc:21:8f:64:91:6c:5c:00:
37:ff:26:b8:68:76:b7:1b:40:36:f8:6d:ee:b9:34:
0a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:07:0E:D8:2D:62:63:C0:D4:CB:02:48:0C:52:18:E1:F6:05:AF:4A
X509v3 Authority Key Identifier:
keyid:E5:F0:27:1E:E7:7B:00:E3:F2:BA:75:BE:EA:E9:0D:55:7A:4E:31:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/E5F0271EE77B00E3F2BA75BEEAE90D557A4E3102.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5F0271EE77B00E3F2BA75BEEAE90D557A4E3102.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/3134332e3230382e3132382e302f32332d3332203d3e20323634303931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.208.128.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:bd:b6:70:c3:aa:12:b2:c2:1b:25:67:c6:1c:90:3c:1e:73:
c8:91:c5:94:ab:28:73:b8:1f:3d:e8:8d:5e:37:2a:46:e8:d5:
80:03:16:11:30:94:98:22:dd:20:31:2b:10:b8:d2:ef:fd:f0:
4f:56:97:fa:94:3f:d9:6e:fd:cd:f2:39:2b:84:a4:e8:b8:a7:
4b:1d:f9:41:3a:b1:3c:73:74:e3:90:a7:4a:41:d2:cb:e2:64:
d4:9a:35:a9:04:ee:4a:4a:fd:41:98:6f:53:a2:6a:f0:de:4e:
72:f4:f0:8e:63:c5:b2:b6:b6:82:c8:08:a1:28:d2:c3:41:d0:
30:02:1b:3b:7c:59:f5:b3:dc:ea:80:03:8e:fd:f4:ef:fe:ff:
96:ba:f5:c4:e8:3a:88:49:c9:af:09:a9:75:5e:6b:8a:12:fb:
86:3d:86:d7:b4:5a:ca:59:a7:67:93:91:98:a0:c1:2e:83:18:
59:ff:7e:d8:28:e1:c0:94:73:14:f5:a5:24:79:44:25:3f:57:
0f:9a:9a:58:d9:6b:be:b7:8f:29:70:9c:b2:ad:6d:c5:bf:f2:
93:47:a5:2c:a0:69:24:c3:1e:5d:ef:93:18:a2:95:b0:a7:f1:
63:0c:d4:e2:59:54:8b:6d:f9:f7:98:46:d6:39:b6:d2:94:94:
e5:a3:45:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:42 2025 by rpki-client