![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/0/3133382e35392e3131342e302f32332d3233203d3e203238363036.roa
File: 3133382e35392e3131342e302f32332d3233203d3e203238363036.roa (raw, json)
Hash identifier: IpK/faEMRB+IJ/03ZylDL8CE8UqJL6JubfL1IFYgxvk=
Subject key identifier: C3:B8:EE:BE:51:CF:37:AB:AA:64:F7:FD:16:FA:F0:27:CE:2A:EA:CE
Certificate issuer: /CN=D59863A437B6DADA51B3A9C31D5AAC9D81478ABF
Certificate serial: 4B8B99420C6B40AC5EA3DA130606F19C36F96D53
Authority key identifier: D5:98:63:A4:37:B6:DA:DA:51:B3:A9:C3:1D:5A:AC:9D:81:47:8A:BF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D59863A437B6DADA51B3A9C31D5AAC9D81478ABF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/0/3133382e35392e3131342e302f32332d3233203d3e203238363036.roa
Signing time: Wed 06 Mar 2024 21:12:38 +0000
ROA not before: Wed 06 Mar 2024 21:07:38 +0000
ROA not after: Wed 05 Mar 2025 21:12:38 +0000
asID: 28606
IP address blocks: 138.59.114.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:8b:99:42:0c:6b:40:ac:5e:a3:da:13:06:06:f1:9c:36:f9:6d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D59863A437B6DADA51B3A9C31D5AAC9D81478ABF
Validity
Not Before: Mar 6 21:07:38 2024 GMT
Not After : Mar 5 21:12:38 2025 GMT
Subject: CN=C3B8EEBE51CF37ABAA64F7FD16FAF027CE2AEACE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1b:aa:2c:2c:88:67:aa:e5:18:9f:a1:1f:53:
0d:b9:72:12:bd:81:85:24:36:94:ab:d6:c6:0b:a5:
1e:4b:2a:e5:8b:31:ea:1b:5a:61:38:ef:5d:c5:d5:
79:0c:19:cb:76:87:aa:2b:08:16:8d:29:e0:0e:f2:
65:4e:a2:bf:5c:96:c4:1c:76:0f:44:0d:cb:25:7d:
b0:99:d2:00:14:fe:2b:91:26:22:2e:e5:f1:7b:0e:
6b:97:ab:dd:78:98:95:c8:1e:a6:d0:d2:2c:8d:7b:
07:f8:68:dc:e6:51:65:77:af:e4:29:d0:cc:be:8a:
21:02:a6:bb:f4:40:98:b4:46:19:c0:c8:a3:cd:ff:
39:3a:6a:30:95:af:c3:55:88:46:d8:13:0d:d5:81:
27:41:41:08:15:3a:df:7a:d5:b7:8f:0d:49:44:a0:
52:17:93:68:07:b1:69:cb:45:8a:b7:bf:bc:48:65:
9a:26:eb:b1:1e:ee:46:50:3a:1a:4e:22:4f:dc:1c:
11:da:c8:a3:c0:b7:de:cc:11:32:d6:ff:76:40:e5:
be:4b:38:cf:5e:b7:79:8e:5d:58:14:02:59:7f:87:
c4:17:c6:b6:ee:82:15:17:87:a9:05:bd:69:5c:32:
62:da:25:88:1c:49:a5:34:7c:07:25:91:b8:dd:f1:
0f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B8:EE:BE:51:CF:37:AB:AA:64:F7:FD:16:FA:F0:27:CE:2A:EA:CE
X509v3 Authority Key Identifier:
keyid:D5:98:63:A4:37:B6:DA:DA:51:B3:A9:C3:1D:5A:AC:9D:81:47:8A:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/0/D59863A437B6DADA51B3A9C31D5AAC9D81478ABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D59863A437B6DADA51B3A9C31D5AAC9D81478ABF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/0/3133382e35392e3131342e302f32332d3233203d3e203238363036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.114.0/23
Signature Algorithm: sha256WithRSAEncryption
54:47:e7:eb:b7:b1:7c:b6:ff:b7:ce:e7:81:db:ce:a5:e7:3d:
e5:dd:13:dd:4c:e3:b4:3a:b9:1a:b8:47:78:df:69:76:3f:89:
6f:67:df:8a:0a:59:cd:98:2a:b2:13:7b:8d:64:15:26:b1:e9:
a2:e9:eb:bc:15:55:6b:7f:2e:bc:33:84:fc:c0:50:30:d4:85:
d5:2c:7b:31:aa:ac:a8:f4:80:1d:e4:6d:0d:66:9a:b8:68:7f:
94:e0:a5:00:f5:f0:50:51:b3:54:a0:1f:c9:c6:3c:1f:dc:7a:
10:84:38:e0:b9:b1:3f:e4:cb:e6:62:02:5e:15:42:b4:c1:95:
03:c5:34:e4:2f:02:58:3f:18:14:4f:d2:08:84:35:18:2a:fe:
4d:f9:03:29:e0:ac:9d:46:5a:57:bb:26:0c:8a:45:1c:6e:5a:
76:85:32:a2:66:b8:2d:5c:2a:27:f1:3d:5d:ce:a7:c1:36:33:
e1:1d:fc:57:a3:95:6a:74:ae:a8:89:5b:f1:c6:36:b9:1c:46:
9e:89:46:db:2d:d1:10:9d:35:23:3c:fe:62:fb:a5:11:1d:90:
df:b5:7e:5b:4f:68:d7:22:7a:e0:06:1a:11:7e:e3:a5:e8:d6:
61:a2:6c:68:18:ff:10:90:f4:21:3d:f1:5c:87:d1:5e:5c:53:
d1:12:cb:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:39 2025 by rpki-client