![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/3133312e3130382e3135322e302f32322d3332203d3e20323730393436.roa
File: 3133312e3130382e3135322e302f32322d3332203d3e20323730393436.roa (raw, json)
Hash identifier: JVUxON8rVD0B7nGXrEDdXeuvS3xLpbUdYWBKKrd79Uw=
Subject key identifier: D1:08:D4:34:8D:9F:04:0D:22:D3:C5:1F:21:66:EB:92:93:EA:55:E8
Certificate issuer: /CN=87C98FAEA3D481ABF326707163A8DC73294B8D71
Certificate serial: 738C29B4ABAAEEB4ECAB7D53012501EBC640BE4F
Authority key identifier: 87:C9:8F:AE:A3:D4:81:AB:F3:26:70:71:63:A8:DC:73:29:4B:8D:71
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87C98FAEA3D481ABF326707163A8DC73294B8D71.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/3133312e3130382e3135322e302f32322d3332203d3e20323730393436.roa
Signing time: Sat 18 Mar 2023 04:59:55 +0000
ROA not before: Sat 18 Mar 2023 04:54:55 +0000
ROA not after: Sat 16 Mar 2024 04:59:55 +0000
asID: 270946
IP address blocks: 131.108.152.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:8c:29:b4:ab:aa:ee:b4:ec:ab:7d:53:01:25:01:eb:c6:40:be:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87C98FAEA3D481ABF326707163A8DC73294B8D71
Validity
Not Before: Mar 18 04:54:55 2023 GMT
Not After : Mar 16 04:59:55 2024 GMT
Subject: CN=D108D4348D9F040D22D3C51F2166EB9293EA55E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:76:f8:9b:a9:06:8d:e9:a9:a8:9a:37:6c:25:
85:a1:58:2a:70:33:b5:08:c8:b5:fc:c4:e1:ca:cd:
d8:3e:e5:5b:6e:f2:5d:6a:cb:ad:f8:94:3d:8f:53:
1e:8d:6e:b5:cb:7d:18:4a:56:3f:da:b6:ad:7c:fc:
d9:1f:6e:3e:e1:12:7a:b3:8f:70:6c:7b:a2:a0:de:
b8:96:3c:1b:dc:f9:38:0e:5b:6e:48:e8:3a:61:9d:
49:00:d3:c1:04:c5:22:04:2a:20:00:f3:b6:a1:46:
c2:fa:b5:5b:8f:42:9f:41:53:ba:0b:83:82:97:4d:
75:81:e7:a8:9d:d2:db:f0:eb:14:c1:1e:2b:f5:02:
f7:d9:2c:2e:56:dc:a4:04:1e:97:ec:1b:b4:69:6c:
e5:b4:7b:28:b3:aa:e9:d1:d1:2c:3a:89:38:94:49:
f7:cb:f6:79:3a:53:ab:e6:f2:d7:ba:06:9f:b6:3a:
5a:1a:7e:cc:f7:bb:1d:b1:78:b5:e6:be:9e:c5:2e:
93:ed:c2:06:7e:1a:58:76:09:4c:7c:1a:04:47:a1:
d8:af:8b:f0:b9:42:e6:c5:39:b0:e2:7b:94:a3:63:
3b:5f:51:ea:f0:f7:8c:b8:bb:4d:d5:3c:17:87:28:
3a:21:bb:f9:a7:09:db:3d:16:1e:76:e7:93:c9:49:
61:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:08:D4:34:8D:9F:04:0D:22:D3:C5:1F:21:66:EB:92:93:EA:55:E8
X509v3 Authority Key Identifier:
keyid:87:C9:8F:AE:A3:D4:81:AB:F3:26:70:71:63:A8:DC:73:29:4B:8D:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/87C98FAEA3D481ABF326707163A8DC73294B8D71.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87C98FAEA3D481ABF326707163A8DC73294B8D71.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/3133312e3130382e3135322e302f32322d3332203d3e20323730393436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.152.0/22
Signature Algorithm: sha256WithRSAEncryption
17:58:be:1d:73:96:04:23:cf:c1:0f:c3:e2:b9:29:9b:19:9c:
90:1d:50:4c:55:20:f4:1c:8e:c5:7b:94:df:9f:dc:d6:dd:d1:
87:b7:52:05:a3:30:73:aa:36:6d:a5:31:ca:a9:4f:1e:4e:7a:
ff:3d:a0:9c:d9:5d:9d:43:4c:e6:c2:7d:f8:69:1f:cf:58:4d:
1c:9b:85:bc:ce:70:e7:0c:41:e9:38:5c:b6:51:fe:2a:75:4f:
85:7e:b8:2e:6e:2c:33:95:c4:8c:c6:08:70:19:d8:7a:ed:39:
13:da:c7:68:df:54:4d:1f:5d:34:e5:fa:5a:43:e1:9c:67:6a:
15:3f:ca:31:9a:d8:f0:c0:07:2b:95:2e:6a:7c:3b:e0:89:2b:
fe:4a:df:83:da:03:d1:13:37:a0:16:0a:94:f5:14:52:16:56:
6a:66:44:69:74:c2:c5:b1:65:9e:d9:0f:9c:09:17:17:d3:22:
8f:dd:b3:e3:b5:12:15:2a:99:95:7f:2b:84:1c:03:50:41:0b:
7d:dc:4f:14:24:ff:c1:29:46:12:74:20:cb:92:8c:bd:ad:f6:
25:ab:e0:10:96:fb:46:7f:63:bb:5c:89:60:04:1d:ce:a3:05:
6a:eb:16:5a:00:fb:27:a2:a1:b2:80:f3:43:ed:15:05:18:f5:
c8:24:fd:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:59 2025 by rpki-client