![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D1YLu5PuF14RLnuEQhDKoBZSjU1mMGqwkzGrvRELTjLP/0/3133382e3230342e33322e302f32322d3234203d3e20323633353537.roa
File: 3133382e3230342e33322e302f32322d3234203d3e20323633353537.roa (raw, json)
Hash identifier: IyUY1/YBVETXFKgfTgKp5Y/8arT5KC/rQQt1t1tFBs4=
Subject key identifier: 20:12:B4:B8:AE:EE:77:00:81:C5:C9:A4:E1:2B:51:A0:7D:11:5F:B4
Certificate issuer: /CN=8786B5E027E10FEC4F0B2A27995F820D8EA4CAF7
Certificate serial: 3335B6BA524350ED98695A732B16DE4A1DCEA726
Authority key identifier: 87:86:B5:E0:27:E1:0F:EC:4F:0B:2A:27:99:5F:82:0D:8E:A4:CA:F7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8786B5E027E10FEC4F0B2A27995F820D8EA4CAF7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D1YLu5PuF14RLnuEQhDKoBZSjU1mMGqwkzGrvRELTjLP/0/3133382e3230342e33322e302f32322d3234203d3e20323633353537.roa
Signing time: Wed 06 Sep 2023 17:08:01 +0000
ROA not before: Wed 06 Sep 2023 17:03:01 +0000
ROA not after: Wed 04 Sep 2024 17:08:01 +0000
asID: 263557
IP address blocks: 138.204.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:35:b6:ba:52:43:50:ed:98:69:5a:73:2b:16:de:4a:1d:ce:a7:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8786B5E027E10FEC4F0B2A27995F820D8EA4CAF7
Validity
Not Before: Sep 6 17:03:01 2023 GMT
Not After : Sep 4 17:08:01 2024 GMT
Subject: CN=2012B4B8AEEE770081C5C9A4E12B51A07D115FB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3e:5d:86:16:3e:a1:fb:97:58:2a:51:f2:56:
73:f4:93:25:ea:e8:a0:e2:0a:b4:cc:cf:f8:ed:55:
0a:e7:06:e4:2d:95:50:dc:fe:15:0f:6b:aa:05:5c:
6b:82:20:8b:2a:48:1a:33:cb:08:eb:d5:ae:6d:a4:
28:c9:19:b0:92:3f:cd:6c:21:27:7c:73:fe:02:0f:
1c:70:c0:72:00:b3:35:57:6d:f8:07:92:59:22:0d:
f1:6e:cb:73:67:4c:9d:cb:9e:d6:5f:14:9c:2e:ad:
69:c7:15:ff:6c:5f:ae:bd:0d:29:86:c5:4e:68:e6:
ba:e8:f1:b1:73:b8:a6:65:f2:cb:1a:d7:59:a0:2c:
73:ef:2c:ae:0e:c0:67:a3:a8:07:7f:2b:a7:51:aa:
08:6b:e5:95:d9:f0:3c:00:70:5a:7f:6a:a2:7b:ed:
61:36:07:c6:2d:dd:64:f3:eb:41:d1:7f:1f:35:af:
bb:43:d5:60:4d:76:d9:21:bb:06:09:38:6e:de:82:
06:4e:2d:a1:42:76:24:58:e5:ca:98:16:42:95:16:
4c:e0:f1:4e:88:f9:49:1b:4f:9f:34:41:4d:69:44:
f5:a4:aa:59:3a:63:d5:ff:b3:86:19:88:be:d2:fd:
07:40:9b:0c:b8:f0:34:43:6e:80:56:6e:d3:1f:f6:
ca:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:12:B4:B8:AE:EE:77:00:81:C5:C9:A4:E1:2B:51:A0:7D:11:5F:B4
X509v3 Authority Key Identifier:
keyid:87:86:B5:E0:27:E1:0F:EC:4F:0B:2A:27:99:5F:82:0D:8E:A4:CA:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D1YLu5PuF14RLnuEQhDKoBZSjU1mMGqwkzGrvRELTjLP/0/8786B5E027E10FEC4F0B2A27995F820D8EA4CAF7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8786B5E027E10FEC4F0B2A27995F820D8EA4CAF7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1YLu5PuF14RLnuEQhDKoBZSjU1mMGqwkzGrvRELTjLP/0/3133382e3230342e33322e302f32322d3234203d3e20323633353537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.32.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:0c:a3:50:8d:df:b3:e5:6d:c9:21:51:67:30:d5:95:aa:31:
dd:b6:71:d7:dc:f6:58:58:6e:c1:b3:74:08:00:4e:b0:cf:e4:
1b:0f:24:72:cf:51:f5:3b:61:d1:65:68:2b:3c:8c:b7:3c:58:
ae:b6:8d:d0:9d:a7:f6:89:4f:6e:77:b4:2a:24:e2:84:44:d4:
42:8f:8e:ba:29:2a:63:f4:96:06:e9:de:8e:66:52:66:22:39:
80:2d:f8:b9:40:53:54:8c:48:f3:06:3e:af:bb:cc:bf:2e:69:
be:8a:98:10:42:9e:44:75:70:9b:5f:8e:9c:47:1a:72:62:db:
f2:3b:21:63:de:b1:14:cf:d1:bc:71:91:ed:a8:48:5f:15:77:
8f:b3:d3:ca:c1:22:d2:8f:94:65:4e:6f:24:b1:7a:c7:b7:74:
b9:4e:cd:9d:a1:a6:ea:46:0c:33:5f:87:eb:f7:9e:80:47:21:
15:cf:ee:88:61:0c:b1:4d:2a:a4:55:f3:46:31:b4:cd:c6:1a:
14:20:a4:18:a9:0c:52:85:ad:16:1c:d5:a2:8c:dd:e0:bf:c2:
8b:1a:a3:d3:02:06:90:5a:9c:b7:51:19:63:49:eb:4c:aa:1f:
b2:0c:e7:72:fe:af:fe:d1:bc:48:65:be:7f:b6:90:4a:b2:00:
4f:c4:85:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:49 2025 by rpki-client