![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Bis8mA4tWApKZBZ1XRMscFtBgJJy9UnZCm3wL4W2CWUn/0/34352e37312e3136342e302f32322d3332203d3e20323637363231.roa
File: 34352e37312e3136342e302f32322d3332203d3e20323637363231.roa (raw, json)
Hash identifier: 6po3dRkOVMNHU7n3esoJAu6lmwmPoc110/+79z+ETX0=
Subject key identifier: 22:A4:DC:EE:31:6B:02:AF:8E:F5:65:5A:36:76:DF:85:27:9D:31:66
Certificate issuer: /CN=DA9DBF93FDF0DA5C99326BEA5D06A526EB9E2793
Certificate serial: 5E4BD7FE9EE7EFEFA5CD5CC0B1DD23DBAC9D366C
Authority key identifier: DA:9D:BF:93:FD:F0:DA:5C:99:32:6B:EA:5D:06:A5:26:EB:9E:27:93
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA9DBF93FDF0DA5C99326BEA5D06A526EB9E2793.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Bis8mA4tWApKZBZ1XRMscFtBgJJy9UnZCm3wL4W2CWUn/0/34352e37312e3136342e302f32322d3332203d3e20323637363231.roa
Signing time: Wed 09 Oct 2024 01:17:37 +0000
ROA not before: Wed 09 Oct 2024 01:12:37 +0000
ROA not after: Wed 08 Oct 2025 01:17:37 +0000
asID: 267621
IP address blocks: 45.71.164.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:4b:d7:fe:9e:e7:ef:ef:a5:cd:5c:c0:b1:dd:23:db:ac:9d:36:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA9DBF93FDF0DA5C99326BEA5D06A526EB9E2793
Validity
Not Before: Oct 9 01:12:37 2024 GMT
Not After : Oct 8 01:17:37 2025 GMT
Subject: CN=22A4DCEE316B02AF8EF5655A3676DF85279D3166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b6:b8:11:9b:69:65:92:d4:5a:1a:05:6b:f3:
b4:69:02:f2:e6:a6:c0:03:a0:01:fd:5f:e3:17:64:
3b:aa:2b:bd:45:c0:fc:b4:4f:25:1e:6d:a3:3a:60:
67:42:e1:f5:40:b7:ab:c0:00:ef:87:c3:58:46:3a:
db:02:3e:9c:2d:81:ac:82:7a:6a:49:8b:e7:49:35:
91:1b:f1:21:4c:bc:5f:af:d8:30:bc:ea:11:35:15:
84:d6:5b:fd:e3:11:a9:f6:ea:fa:69:e4:21:9f:0f:
2e:5a:de:58:ca:9c:10:df:d8:1c:10:3d:9e:d5:e3:
7a:35:95:01:0f:5c:e8:5a:f7:40:c1:bf:01:a9:11:
2b:ef:e2:b8:50:17:5f:1e:06:62:3a:c0:a7:67:45:
a5:ec:9f:a0:63:c4:b8:5a:56:e3:59:1e:cd:b0:27:
dc:96:f2:f3:39:bb:dc:97:a2:49:6c:4a:f3:05:48:
2a:46:05:34:f9:ba:f7:66:fb:56:ca:b3:f0:db:3d:
bd:7e:e4:96:5f:b6:0a:82:16:17:a3:d9:0f:13:e0:
a6:6d:e8:91:49:e2:ed:d6:e0:63:44:b2:d9:6a:aa:
57:99:f8:73:2b:b7:71:af:26:fb:ce:75:2b:07:aa:
f6:4a:5e:3d:6b:26:f6:5e:51:69:c8:5d:cd:95:d8:
db:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A4:DC:EE:31:6B:02:AF:8E:F5:65:5A:36:76:DF:85:27:9D:31:66
X509v3 Authority Key Identifier:
keyid:DA:9D:BF:93:FD:F0:DA:5C:99:32:6B:EA:5D:06:A5:26:EB:9E:27:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Bis8mA4tWApKZBZ1XRMscFtBgJJy9UnZCm3wL4W2CWUn/0/DA9DBF93FDF0DA5C99326BEA5D06A526EB9E2793.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA9DBF93FDF0DA5C99326BEA5D06A526EB9E2793.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bis8mA4tWApKZBZ1XRMscFtBgJJy9UnZCm3wL4W2CWUn/0/34352e37312e3136342e302f32322d3332203d3e20323637363231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.164.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:aa:7a:86:c4:e6:a1:9e:81:c6:ea:37:01:44:cc:05:48:cf:
51:a4:0c:95:d7:6a:ce:6c:47:6e:83:75:c1:90:2c:5a:50:15:
24:d7:38:bf:c5:42:03:72:63:00:f6:67:81:90:e5:7f:64:6b:
90:8c:61:90:76:22:78:82:ec:b8:f3:41:34:1f:4c:b6:f1:c1:
f2:55:de:3c:e1:4c:c5:42:6a:e7:c3:0e:84:71:01:b5:6a:4d:
c7:99:74:34:3e:da:ae:26:8a:ae:df:8f:d5:b8:8d:8a:df:19:
86:47:6e:8b:eb:fd:89:81:51:c4:b6:57:b4:9f:05:b2:44:14:
df:2b:ec:e6:88:4c:ba:fa:7c:8c:38:a6:6f:22:79:37:1d:26:
99:80:09:8a:11:d7:d7:b7:90:62:8a:07:bc:6f:0c:a2:7e:7f:
4a:d3:bb:d8:5a:76:62:1b:77:98:4b:2f:6c:32:61:98:5a:85:
d8:39:0c:02:56:1a:c2:f8:75:ce:02:bb:61:b7:af:7c:58:f0:
8b:e2:e1:67:85:36:94:3a:06:c7:58:72:84:1d:b0:4d:0f:dc:
54:c3:f8:d0:24:87:61:fd:e7:8f:36:50:5b:75:cc:d7:4b:a9:
87:78:8b:fb:5e:91:c3:87:c0:16:11:ea:67:0d:53:f7:8e:ee:
f3:4d:46:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:45:45 2025 by rpki-client