![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/34352e3136392e3130382e302f32322d3236203d3e20323638313036.roa
File: 34352e3136392e3130382e302f32322d3236203d3e20323638313036.roa (raw, json)
Hash identifier: RgmsxIVfE4bAzBXYFacXPR+7LxAwzTa7hnTOxntJ91s=
Subject key identifier: 2B:83:26:D0:08:D0:F5:30:FE:79:C8:08:9C:12:59:01:0A:50:6B:B4
Certificate issuer: /CN=A66DDA8A5EEDDF69630CFBB6B041152978397596
Certificate serial: 3AFAD181FAB7AC703AB2E19F24FC38EE5CCFEF6D
Authority key identifier: A6:6D:DA:8A:5E:ED:DF:69:63:0C:FB:B6:B0:41:15:29:78:39:75:96
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A66DDA8A5EEDDF69630CFBB6B041152978397596.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/34352e3136392e3130382e302f32322d3236203d3e20323638313036.roa
Signing time: Tue 08 Aug 2023 13:52:36 +0000
ROA not before: Tue 08 Aug 2023 13:47:36 +0000
ROA not after: Tue 06 Aug 2024 13:52:36 +0000
asID: 268106
IP address blocks: 45.169.108.0/22 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:fa:d1:81:fa:b7:ac:70:3a:b2:e1:9f:24:fc:38:ee:5c:cf:ef:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A66DDA8A5EEDDF69630CFBB6B041152978397596
Validity
Not Before: Aug 8 13:47:36 2023 GMT
Not After : Aug 6 13:52:36 2024 GMT
Subject: CN=2B8326D008D0F530FE79C8089C1259010A506BB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bb:09:8a:a7:d9:d7:95:02:67:56:ee:25:c8:
54:a2:ac:06:39:e3:ea:7e:13:61:d0:65:d4:e7:45:
ce:ab:b9:43:ad:d3:ee:7c:e0:44:08:bc:94:50:86:
aa:99:8c:ca:d7:08:5c:0a:22:19:91:0a:ec:f0:55:
0d:6c:ae:08:96:2a:96:15:73:92:e9:4b:a8:67:ef:
82:82:50:e2:75:b8:59:69:60:6d:a4:d5:a4:ca:7a:
d1:71:ff:05:67:82:48:8b:b9:a9:2a:84:06:43:52:
9e:33:65:3a:6a:17:75:9d:dd:a4:b2:f2:7e:f2:54:
6b:69:96:d9:25:64:b9:14:e6:77:01:2f:f1:8b:30:
e6:b5:40:10:b8:73:11:0e:98:28:a5:12:44:de:1c:
de:1f:e2:a6:52:9c:66:7e:e3:8b:8a:af:d4:17:c8:
4d:a4:2e:65:86:23:64:a2:8a:ec:c6:f3:32:f3:27:
df:62:78:ec:03:ea:03:60:dd:14:42:0b:84:df:e1:
41:f6:2c:4b:e4:03:7c:56:3a:52:20:cc:f9:45:aa:
39:78:f0:fd:25:55:9a:5e:a9:ff:00:fc:92:e5:90:
a6:cc:01:2d:30:63:49:a7:7c:6c:df:b7:01:27:ca:
49:a9:b8:b1:c0:1b:fc:25:f1:90:8a:1b:6f:1f:b2:
99:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:83:26:D0:08:D0:F5:30:FE:79:C8:08:9C:12:59:01:0A:50:6B:B4
X509v3 Authority Key Identifier:
keyid:A6:6D:DA:8A:5E:ED:DF:69:63:0C:FB:B6:B0:41:15:29:78:39:75:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/A66DDA8A5EEDDF69630CFBB6B041152978397596.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A66DDA8A5EEDDF69630CFBB6B041152978397596.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/34352e3136392e3130382e302f32322d3236203d3e20323638313036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.108.0/22
Signature Algorithm: sha256WithRSAEncryption
01:b5:24:73:dd:e3:9a:01:9c:1f:3f:55:60:e0:c7:f9:bd:f5:
e4:f0:f9:86:c9:05:b6:4c:73:b8:4e:0d:e0:1f:0b:36:65:dc:
1c:7c:3b:09:98:8a:0f:f6:24:23:d3:13:e2:ea:7d:1c:57:66:
ee:28:74:67:4e:9b:86:f9:13:d0:50:b3:f7:53:9b:1f:c4:c3:
6a:ce:f5:1c:1d:36:ac:fc:38:6f:8c:50:a1:26:41:4d:e0:d6:
c6:b1:53:ae:16:5c:fc:f6:b8:ec:ab:06:c1:63:f7:69:01:dd:
db:e1:dc:5a:84:ff:96:58:e2:f1:4c:c4:a1:83:43:6a:90:9d:
ac:df:29:9e:66:c9:92:56:7a:4a:ff:11:0c:ca:9b:85:30:ce:
bd:cf:2b:a6:92:8b:ab:3c:d7:d7:57:40:f9:8d:88:80:2d:22:
3c:7b:da:f3:f9:52:73:10:e7:a0:28:1f:4c:77:fa:b1:e2:33:
a6:31:17:1f:f3:66:5b:86:8f:0b:8c:6e:1a:2c:37:e5:94:3c:
f1:cf:a4:88:73:df:73:79:48:07:67:a5:87:ab:34:73:bb:d7:
22:76:30:f4:a5:ed:1a:75:69:82:83:9e:58:10:36:e3:ac:bb:
89:bf:73:fd:49:86:64:4f:e5:97:b4:f6:a3:fd:c9:b0:9f:82:
4a:0b:99:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:24 2025 by rpki-client