![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138392e302f32342d3234203d3e20323632373431.roa
File: 3138362e3230382e3138392e302f32342d3234203d3e20323632373431.roa (raw, json)
Hash identifier: PJsjrGx4k+0oJkEU37GSwdOhFfhnAtS+Xz52vC9DGO8=
Subject key identifier: 9E:A2:CD:8F:56:F7:C2:EE:73:AF:C1:3E:34:D9:AB:DE:FC:6D:E9:4B
Certificate issuer: /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial: 23A75023BEC93F20C31C125FAF1689DE548811D4
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138392e302f32342d3234203d3e20323632373431.roa
Signing time: Tue 09 Jan 2024 21:00:02 +0000
ROA not before: Tue 09 Jan 2024 20:55:02 +0000
ROA not after: Tue 07 Jan 2025 21:00:02 +0000
asID: 262741
IP address blocks: 186.208.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:a7:50:23:be:c9:3f:20:c3:1c:12:5f:af:16:89:de:54:88:11:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Validity
Not Before: Jan 9 20:55:02 2024 GMT
Not After : Jan 7 21:00:02 2025 GMT
Subject: CN=9EA2CD8F56F7C2EE73AFC13E34D9ABDEFC6DE94B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e1:97:9e:6d:1f:47:5c:c9:76:79:08:d7:f0:
1e:16:c6:d0:9b:45:0d:97:dd:79:1e:c5:8e:95:f9:
f7:6a:29:78:84:54:71:4f:48:cc:a4:e8:50:2d:76:
da:7e:bf:ff:4f:5e:d2:32:c2:e1:4b:1a:56:e7:36:
57:3f:8b:ad:a2:8d:e9:4e:fd:a5:81:6e:51:08:1d:
10:67:76:ce:69:01:d1:00:fe:71:4b:17:84:bf:88:
d0:61:6e:8a:99:70:7d:cd:1a:60:1b:9b:30:f9:d1:
7c:ed:88:4d:6d:4d:92:5c:89:c0:81:d7:92:45:58:
42:6c:38:2d:f5:96:e2:25:5f:1f:a3:a9:c9:bb:80:
6a:37:73:e6:a5:6b:7f:b5:3e:25:af:c7:81:eb:de:
19:f3:16:59:e0:89:65:44:d5:b3:79:8c:1b:b2:1a:
19:1f:ca:ea:82:f7:e9:37:6b:a0:1c:f2:81:92:89:
b5:69:b1:d7:6c:68:79:89:46:9b:c6:a3:b7:52:ac:
c0:bf:65:e2:32:96:94:30:a9:a0:03:e3:31:1f:db:
06:ca:ad:35:c8:ed:25:fc:81:dd:61:66:61:5b:ca:
ae:72:8c:6b:e0:f6:94:67:29:df:57:ab:9e:b4:ba:
ef:f4:fb:c2:92:36:5e:d8:e4:3e:eb:87:22:25:ec:
cf:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A2:CD:8F:56:F7:C2:EE:73:AF:C1:3E:34:D9:AB:DE:FC:6D:E9:4B
X509v3 Authority Key Identifier:
keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138392e302f32342d3234203d3e20323632373431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.208.189.0/24
Signature Algorithm: sha256WithRSAEncryption
32:51:1d:da:b2:78:96:5e:fd:be:e6:24:0b:99:82:3e:86:6b:
dc:13:90:51:c6:fa:64:2e:8b:9d:55:57:99:4c:68:7e:a7:c0:
f6:cc:ad:a5:00:cd:4b:24:9e:95:f8:ec:d6:da:53:84:31:1d:
94:70:43:2e:59:b5:8f:cd:2d:ad:e8:5b:2f:26:c5:c8:09:de:
28:0c:33:fb:4b:8d:f3:0d:85:03:c2:fb:20:45:b4:53:88:4d:
e0:67:0b:8d:9c:e6:bf:25:46:23:8c:32:78:b5:58:1d:d0:bf:
86:14:52:82:59:14:1f:79:5e:b4:47:55:c1:eb:15:97:5b:ec:
04:d6:05:c1:b3:e3:67:0d:ad:18:03:42:82:60:02:10:34:7c:
d7:4b:da:ab:ad:3c:26:43:78:90:48:1e:c7:d4:cb:63:5e:37:
cc:e3:c7:49:0e:d7:88:7c:cd:f2:cf:12:2b:b3:f1:35:8c:a4:
61:a6:11:b9:51:a2:cc:30:04:5f:2c:99:c8:94:d1:7b:88:0e:
e2:d5:f4:76:f2:88:3e:38:8b:cf:f4:4f:4c:88:f7:8d:97:06:
bd:fd:23:ac:a5:8f:03:b7:c7:29:70:f0:93:a2:20:f4:3a:a7:
93:a8:31:6d:e6:95:9f:51:01:6b:20:38:fe:c6:3f:45:08:a1:
5c:10:e0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:43 2025 by rpki-client