![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/34352e3136352e3232382e302f32322d3234203d3e20323638303138.roa
File: 34352e3136352e3232382e302f32322d3234203d3e20323638303138.roa (raw, json)
Hash identifier: zRgq+Y7OjUAlK1XrINvqNs9RW9ytCjk3McVPwkGj0Us=
Subject key identifier: 56:D4:9F:49:54:3D:6E:DE:10:90:D6:81:D1:18:7B:35:33:63:B5:B0
Certificate issuer: /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial: 1CEF959AAB0AF37E0AE60D924A0E431E204AD2DF
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/34352e3136352e3232382e302f32322d3234203d3e20323638303138.roa
Signing time: Fri 04 Aug 2023 14:01:20 +0000
ROA not before: Fri 04 Aug 2023 13:56:20 +0000
ROA not after: Fri 02 Aug 2024 14:01:20 +0000
asID: 268018
IP address blocks: 45.165.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:ef:95:9a:ab:0a:f3:7e:0a:e6:0d:92:4a:0e:43:1e:20:4a:d2:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Validity
Not Before: Aug 4 13:56:20 2023 GMT
Not After : Aug 2 14:01:20 2024 GMT
Subject: CN=56D49F49543D6EDE1090D681D1187B353363B5B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f3:45:32:0f:bb:dd:af:a2:6c:e0:55:d8:cc:
42:56:66:e7:98:b2:6e:76:7e:fd:8f:72:09:29:04:
0d:ac:18:e8:81:3c:37:a2:53:8b:53:4c:49:9f:63:
67:16:45:de:f3:31:89:36:8a:93:46:c9:b9:a0:1e:
65:3a:53:10:36:29:5d:a9:55:ef:14:27:20:69:9b:
6a:15:90:e4:d2:8b:43:11:23:29:c8:26:cf:ce:2c:
65:eb:c5:cd:2e:e7:7a:fa:5f:cb:7b:38:57:f7:26:
53:3f:c2:c0:db:d5:00:9b:6f:05:b5:ec:54:8e:eb:
73:9a:55:e7:52:9c:f2:d6:09:7a:5f:4e:27:cf:b5:
4a:18:83:f6:8a:d0:32:04:e1:aa:cf:87:9d:22:c1:
0a:f8:f8:f7:c6:69:52:0e:b8:06:5b:74:2b:9d:53:
3f:08:41:5e:38:b7:50:76:15:62:38:49:82:99:3e:
d6:9d:33:13:b4:fa:aa:93:a2:19:19:20:52:31:13:
64:d2:f2:cf:84:58:a3:1c:d9:4d:b5:67:18:ec:51:
e1:63:24:00:6c:d4:da:9c:31:ce:80:5c:b8:94:c6:
25:69:65:34:0f:99:b8:e3:ae:8a:d9:ea:53:3b:b4:
f5:59:b1:c7:7b:0e:90:95:0e:e3:91:cc:5d:84:0d:
ee:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D4:9F:49:54:3D:6E:DE:10:90:D6:81:D1:18:7B:35:33:63:B5:B0
X509v3 Authority Key Identifier:
keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/34352e3136352e3232382e302f32322d3234203d3e20323638303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.165.228.0/22
Signature Algorithm: sha256WithRSAEncryption
46:8a:a8:98:a9:a0:04:59:99:07:cf:db:b1:da:8a:80:21:96:
5f:b5:fa:73:e3:b0:eb:ef:69:5f:9c:08:ec:01:a5:05:6f:90:
65:52:61:d6:1f:8e:ee:cc:37:ee:67:5d:00:b1:13:94:83:de:
4a:a2:c0:d9:e8:18:16:c5:e1:4c:93:94:a9:9b:42:d6:a4:a7:
28:9d:48:60:79:85:a0:d6:31:31:6e:23:11:3f:38:93:31:8e:
93:79:7a:e5:8e:80:39:36:24:23:4c:5c:0f:a0:74:83:e2:dd:
33:fa:00:2a:bd:32:77:aa:6f:c9:4b:5b:34:ab:97:a4:1d:35:
ea:47:eb:2c:fa:d0:fe:43:db:2a:c3:7b:5a:e2:97:d1:65:46:
b4:e1:54:e0:c7:a0:2e:37:e8:b6:f1:1f:c1:99:25:0c:de:fc:
be:21:e5:d1:74:92:3f:f3:5f:e7:57:2d:fc:82:a9:01:8a:31:
75:bb:e5:b6:a8:f2:6c:aa:8a:70:fb:80:4e:93:08:24:93:9d:
d9:b6:dc:73:a0:26:9a:74:c6:34:2f:4d:5b:6d:8e:b4:36:64:
49:35:c9:51:bf:3f:43:0d:f0:f3:65:4a:d7:9b:0e:3c:13:0c:
24:f0:a9:6d:7b:cd:bf:50:0a:d9:6b:fa:89:02:16:af:ce:03:
99:af:cc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:15:53 2025 by rpki-client