![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3136342e3136332e33362e302f32332d3233203d3e20323634333937.roa
File: 3136342e3136332e33362e302f32332d3233203d3e20323634333937.roa (raw, json)
Hash identifier: gBzEedoYQsU7qKT97Z5R8LxRubtQ+4ZnayDALpKHhUA=
Subject key identifier: 53:E5:DE:FE:F1:4A:12:F9:BC:0C:3E:03:99:97:E0:D1:B9:34:20:CD
Certificate issuer: /CN=D40D71C26E8C990D22430A76496945930ECE72FE
Certificate serial: 7C426D55A35BD4D81B085AFB134A40ADE9E226B7
Authority key identifier: D4:0D:71:C2:6E:8C:99:0D:22:43:0A:76:49:69:45:93:0E:CE:72:FE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40D71C26E8C990D22430A76496945930ECE72FE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3136342e3136332e33362e302f32332d3233203d3e20323634333937.roa
Signing time: Mon 16 Dec 2024 16:27:45 +0000
ROA not before: Mon 16 Dec 2024 16:22:45 +0000
ROA not after: Mon 15 Dec 2025 16:27:45 +0000
asID: 264397
IP address blocks: 164.163.36.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:42:6d:55:a3:5b:d4:d8:1b:08:5a:fb:13:4a:40:ad:e9:e2:26:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D40D71C26E8C990D22430A76496945930ECE72FE
Validity
Not Before: Dec 16 16:22:45 2024 GMT
Not After : Dec 15 16:27:45 2025 GMT
Subject: CN=53E5DEFEF14A12F9BC0C3E039997E0D1B93420CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:78:71:7c:8e:63:3e:87:6f:fd:9f:be:57:1f:
89:ef:4a:6b:ee:d5:22:7d:1d:e5:b5:e6:13:53:de:
f9:1c:fa:ee:e3:20:2b:89:1a:a2:70:5d:fe:90:32:
19:f1:7b:1a:ee:fc:8b:2d:9f:3e:66:6a:09:a1:53:
10:af:34:b0:7c:9b:54:6f:05:ce:97:2b:3f:b5:92:
a1:db:da:ae:00:b7:72:7c:8f:fa:5c:8c:8c:58:d9:
3a:5d:e5:4a:cc:6a:dc:1b:62:17:4f:3e:bf:80:1c:
9a:85:0b:e4:ed:fb:78:74:20:09:b5:80:d3:6d:98:
fa:f8:5f:e1:38:57:b5:e9:c3:82:3c:d3:c3:16:67:
3c:50:32:29:8d:e2:51:f9:66:d9:cb:44:da:51:4f:
c6:83:b4:1f:de:cb:3e:49:e5:57:b1:b3:ee:6c:c8:
05:1c:f6:08:c8:3e:a5:f9:68:f3:17:8e:31:76:b1:
c4:ea:1a:06:d5:56:4b:e6:65:5f:52:ba:d9:65:c2:
6e:b2:65:25:e2:f5:f4:8c:a3:95:82:f9:b8:ad:8c:
22:9e:66:c8:28:de:d8:bf:75:d0:49:67:74:e1:63:
9f:31:0a:37:80:ff:5a:d7:c3:12:48:e6:ca:fd:4e:
8f:2b:ca:42:2b:67:77:2f:60:a4:c1:99:54:28:91:
38:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E5:DE:FE:F1:4A:12:F9:BC:0C:3E:03:99:97:E0:D1:B9:34:20:CD
X509v3 Authority Key Identifier:
keyid:D4:0D:71:C2:6E:8C:99:0D:22:43:0A:76:49:69:45:93:0E:CE:72:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/D40D71C26E8C990D22430A76496945930ECE72FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40D71C26E8C990D22430A76496945930ECE72FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3136342e3136332e33362e302f32332d3233203d3e20323634333937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.163.36.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:c1:77:05:5f:43:21:63:86:8f:25:02:36:de:58:14:1f:18:
10:9c:31:e2:4f:10:9e:20:2d:1f:65:55:88:08:ec:a3:eb:eb:
15:bf:cc:0e:29:9b:8d:dc:b4:cd:bc:53:17:17:93:cc:15:b4:
87:18:f6:bc:22:d6:eb:35:46:5c:34:69:14:1b:2a:c1:a7:4b:
62:09:d3:0f:16:03:f5:d1:8f:e8:a4:5a:8f:13:0b:ee:95:13:
65:17:1f:16:1a:b5:65:55:d6:89:98:82:72:d8:c2:d8:5e:a6:
bf:ff:6b:6b:34:f7:71:69:51:c4:4b:a3:03:8a:17:2f:6b:46:
81:1d:ff:bc:0b:ee:8a:18:70:fb:48:60:e0:5c:3e:9b:fb:21:
f5:bd:89:48:aa:c0:10:5a:df:4c:da:6c:20:b0:76:a1:bc:2c:
ed:f9:b6:73:62:14:ad:9d:e2:3d:24:6c:ee:ea:f5:c9:40:b6:
83:25:cb:fa:ec:ef:3b:d6:b4:d5:5c:9f:b1:c9:aa:ed:94:cb:
de:77:a1:61:d3:ce:b5:b2:ad:84:ab:f9:9b:9d:33:b9:8e:28:
61:69:76:bb:e9:55:82:a4:fd:df:9a:f2:e5:c1:d2:e5:80:b4:
af:d8:82:17:ec:15:48:b4:09:21:68:c9:d2:b0:5b:b6:03:1d:
0a:8c:b3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:46:37 2025 by rpki-client