![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D8cbJyQKPVdsajinWbr9HQTShvgBrnq6okkzWxWrxuoX/0/34352e3138352e3137322e302f32342d3234203d3e20323639333931.roa
File: 34352e3138352e3137322e302f32342d3234203d3e20323639333931.roa (raw, json)
Hash identifier: TciC5e047X8mFStXns1QYEnXfaE0uFN41IGhW5Qoow8=
Subject key identifier: 86:BD:C6:24:5B:5A:FE:27:94:44:22:CE:2F:93:75:D1:98:F5:A8:51
Certificate issuer: /CN=5ECFCCA72C077DA27178AFAC0844B3A06F72C7F9
Certificate serial: 01383B0883ABEF9B652B05526DA2501E52FBB7A3
Authority key identifier: 5E:CF:CC:A7:2C:07:7D:A2:71:78:AF:AC:08:44:B3:A0:6F:72:C7:F9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5ECFCCA72C077DA27178AFAC0844B3A06F72C7F9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D8cbJyQKPVdsajinWbr9HQTShvgBrnq6okkzWxWrxuoX/0/34352e3138352e3137322e302f32342d3234203d3e20323639333931.roa
Signing time: Mon 15 May 2023 17:11:11 +0000
ROA not before: Mon 15 May 2023 17:06:11 +0000
ROA not after: Mon 13 May 2024 17:11:11 +0000
asID: 269391
IP address blocks: 45.185.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:38:3b:08:83:ab:ef:9b:65:2b:05:52:6d:a2:50:1e:52:fb:b7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ECFCCA72C077DA27178AFAC0844B3A06F72C7F9
Validity
Not Before: May 15 17:06:11 2023 GMT
Not After : May 13 17:11:11 2024 GMT
Subject: CN=86BDC6245B5AFE27944422CE2F9375D198F5A851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5b:51:ed:fc:88:4f:7f:f1:a0:38:be:25:4d:
b2:fb:04:21:11:e0:a1:ab:f3:e0:78:1e:4e:1b:ca:
92:f4:e1:d1:9b:ff:69:7e:16:28:b3:41:81:e2:0f:
74:4b:04:4d:d4:7b:f2:6d:52:5a:e9:0f:f2:56:50:
5d:de:ce:69:a4:86:37:55:de:f9:f5:45:b9:f9:44:
e0:92:2b:fc:95:b4:e8:36:94:6e:aa:26:cf:0d:c7:
06:53:08:4a:59:28:ba:48:eb:0f:52:db:3d:bf:18:
90:80:55:f4:6d:c2:fe:54:6a:e5:42:f3:b6:64:f3:
38:14:ef:aa:a7:b1:78:56:2b:69:bb:79:4d:93:ce:
2f:f6:31:bb:05:60:e8:ae:6c:0d:85:6d:8b:1a:4b:
f0:05:12:0f:96:67:bb:79:8b:9d:b6:2f:29:74:45:
89:d4:d5:9d:71:c5:58:94:77:83:24:e3:58:4c:1b:
72:ad:6c:f7:e6:77:39:b7:dd:49:40:ea:14:ac:b7:
67:ca:66:65:31:bc:4c:02:d2:b8:f7:a0:b4:19:09:
e1:56:5c:43:3b:d3:f4:33:ca:c5:f7:cb:56:48:07:
2a:d7:85:56:90:90:42:fe:7a:74:d5:6d:a8:cd:e6:
81:23:2b:40:c3:aa:ad:03:09:24:56:60:34:6a:5c:
11:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BD:C6:24:5B:5A:FE:27:94:44:22:CE:2F:93:75:D1:98:F5:A8:51
X509v3 Authority Key Identifier:
keyid:5E:CF:CC:A7:2C:07:7D:A2:71:78:AF:AC:08:44:B3:A0:6F:72:C7:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D8cbJyQKPVdsajinWbr9HQTShvgBrnq6okkzWxWrxuoX/0/5ECFCCA72C077DA27178AFAC0844B3A06F72C7F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5ECFCCA72C077DA27178AFAC0844B3A06F72C7F9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8cbJyQKPVdsajinWbr9HQTShvgBrnq6okkzWxWrxuoX/0/34352e3138352e3137322e302f32342d3234203d3e20323639333931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.185.172.0/24
Signature Algorithm: sha256WithRSAEncryption
23:54:65:b5:e8:22:0e:91:39:b7:5d:04:40:13:9a:11:fc:12:
f3:12:e3:89:f6:65:33:60:76:36:1a:0d:f0:be:35:55:9a:90:
c3:a6:19:c5:7e:5a:67:49:c9:9d:2e:2b:16:49:34:39:cc:bf:
a2:86:47:d5:17:5f:1c:b8:cd:6b:77:17:17:9a:15:f8:1d:19:
fc:15:0c:0f:a7:5f:0b:7f:34:ce:d3:bc:1a:a6:50:3c:42:74:
cc:df:a8:31:3d:b5:33:35:5c:f7:33:bd:44:33:d7:bd:69:00:
53:7f:24:d6:ac:43:12:1f:2b:b6:02:3d:9e:85:65:15:5a:ed:
64:26:a6:6f:2e:a1:13:a6:ca:f4:b8:ae:bf:d5:5d:ae:86:6a:
fb:3b:60:b5:9c:2f:8c:6c:6c:06:4f:73:f2:5d:01:31:cc:9d:
8f:ba:54:79:ce:7b:fa:0f:f1:06:e5:5a:b1:7f:7f:3c:a0:ed:
9f:92:be:f1:27:47:44:fb:62:78:e3:76:11:27:e4:e3:03:ad:
22:cf:9e:b1:cf:2c:11:90:c8:3e:99:29:1d:ed:a7:6e:95:d2:
43:ec:51:92:f6:88:23:7b:02:7f:c9:b8:02:1b:60:8c:97:71:
b8:e0:9b:f8:61:37:da:78:54:d2:49:93:85:9c:fa:b1:ca:d1:
fd:fd:54:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:36 2025 by rpki-client