![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CDscfHe9XzMiRYEHBD3iYfj1QGunHhkHLHAAZacvPbaj/0/3133382e39372e39322e302f32322d3332203d3e20323634313538.roa
File: 3133382e39372e39322e302f32322d3332203d3e20323634313538.roa (raw, json)
Hash identifier: xkbONL7n9iXgteD6gW0WNoNGP6iYR7F8JIv1tsC0uuE=
Subject key identifier: 8B:0C:22:CB:CD:27:6F:B2:29:7F:23:2C:C3:17:DF:88:63:80:C3:EF
Certificate issuer: /CN=C6DA1975653C37ABF6AB07FCD8A28FA335B21404
Certificate serial: 449E3F3DE3CA45279E94CB9BA2D1161B432E4084
Authority key identifier: C6:DA:19:75:65:3C:37:AB:F6:AB:07:FC:D8:A2:8F:A3:35:B2:14:04
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6DA1975653C37ABF6AB07FCD8A28FA335B21404.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CDscfHe9XzMiRYEHBD3iYfj1QGunHhkHLHAAZacvPbaj/0/3133382e39372e39322e302f32322d3332203d3e20323634313538.roa
Signing time: Thu 02 May 2024 12:38:51 +0000
ROA not before: Thu 02 May 2024 12:33:51 +0000
ROA not after: Thu 01 May 2025 12:38:51 +0000
asID: 264158
IP address blocks: 138.97.92.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:9e:3f:3d:e3:ca:45:27:9e:94:cb:9b:a2:d1:16:1b:43:2e:40:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C6DA1975653C37ABF6AB07FCD8A28FA335B21404
Validity
Not Before: May 2 12:33:51 2024 GMT
Not After : May 1 12:38:51 2025 GMT
Subject: CN=8B0C22CBCD276FB2297F232CC317DF886380C3EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b5:71:0a:0f:2c:5b:42:8b:ef:0f:f3:5a:3c:
b5:93:5a:42:28:66:94:45:65:07:57:1e:c0:f4:55:
ed:a7:58:72:de:ab:74:ec:3f:6b:72:7f:1f:0d:d2:
49:2c:43:d6:47:87:16:ba:c8:f8:a0:e5:1e:1e:35:
98:fe:55:8c:a6:6a:52:dd:39:04:83:b6:f9:09:72:
52:16:b2:9b:52:d7:80:f5:a3:ca:9f:b5:2d:74:4b:
43:a2:45:54:6a:d0:33:b4:9e:75:33:4f:8b:e2:3d:
bd:d7:27:15:8e:dc:51:0f:72:db:86:cf:ee:1f:27:
64:5d:4a:df:52:a7:b6:7e:c5:35:9c:31:5e:28:ee:
60:51:34:b9:cf:6d:a5:87:43:46:7f:08:5d:89:ca:
44:6a:56:6b:eb:7f:a0:d9:22:f5:c4:df:66:21:f3:
0c:e0:e2:54:03:d2:00:91:8b:55:b2:93:a3:81:94:
c2:dc:a1:28:9a:a1:90:f0:25:5e:15:3d:99:95:da:
f0:24:f6:d8:58:48:28:14:0e:c1:6c:c3:09:f9:7a:
65:a0:67:a7:ac:d3:d4:85:9a:02:f2:2b:09:3a:05:
7c:16:d5:74:29:b0:25:dd:81:78:cc:ba:a9:b3:a5:
48:79:1b:92:3a:4e:98:76:a4:d8:93:9d:66:d0:06:
b9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0C:22:CB:CD:27:6F:B2:29:7F:23:2C:C3:17:DF:88:63:80:C3:EF
X509v3 Authority Key Identifier:
keyid:C6:DA:19:75:65:3C:37:AB:F6:AB:07:FC:D8:A2:8F:A3:35:B2:14:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CDscfHe9XzMiRYEHBD3iYfj1QGunHhkHLHAAZacvPbaj/0/C6DA1975653C37ABF6AB07FCD8A28FA335B21404.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6DA1975653C37ABF6AB07FCD8A28FA335B21404.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CDscfHe9XzMiRYEHBD3iYfj1QGunHhkHLHAAZacvPbaj/0/3133382e39372e39322e302f32322d3332203d3e20323634313538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.92.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:05:75:01:d8:14:83:fa:e8:63:4e:b4:68:d3:ea:12:1e:56:
3c:d1:07:98:22:43:2c:dd:1c:b8:d3:35:a5:8a:d9:61:a9:24:
05:94:18:6b:4f:26:db:be:f3:93:94:ec:6b:ad:02:dc:4c:d1:
9d:98:28:6f:ad:55:b6:a0:b3:04:15:27:37:6e:37:5c:25:1a:
55:4c:15:f7:c9:ea:57:bd:87:f0:ef:8e:6f:17:ad:7d:b5:6f:
c5:4d:82:42:e4:5c:c9:a5:62:fd:ec:ce:ef:9d:45:b1:42:11:
6c:a5:85:f7:ae:1e:a0:62:cb:39:a3:4e:6b:73:e3:4b:84:09:
9a:97:ab:e1:e7:bb:3e:aa:33:5e:87:89:f8:c8:89:53:9d:05:
2a:bc:57:b9:50:dd:56:fb:58:a1:2f:f7:b4:0a:38:62:f9:16:
39:5e:64:71:76:f0:64:30:04:d6:d3:db:11:5e:58:84:3b:f0:
bc:57:0d:55:b6:96:8b:b2:a6:fc:56:be:01:4e:f8:ba:2e:10:
23:88:ea:cd:dd:d0:7e:8d:f4:b3:ae:6d:68:de:d2:9c:f5:6f:
4b:e4:84:d1:fe:62:a6:6a:97:bb:d6:da:28:cc:21:a9:5d:2f:
33:8f:0e:02:ee:a6:a5:71:00:55:d6:99:d3:db:88:8b:bb:79:
2b:74:a2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:33 2025 by rpki-client