![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/0/3136382e3230352e33362e302f32322d3234203d3e20323633383830.roa
File: 3136382e3230352e33362e302f32322d3234203d3e20323633383830.roa (raw, json)
Hash identifier: WsDGWAsKbow7cB2Y7ceV08TfY6oANv7/aS9nOtVdI98=
Subject key identifier: D8:2A:11:AB:2D:77:F6:BC:FA:31:BC:51:BC:9D:2B:35:5B:9C:72:ED
Certificate issuer: /CN=4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3
Certificate serial: 46CBE8725451B77A68B334725799E5DDEC504AA0
Authority key identifier: 4D:00:22:D6:7F:B1:D0:1C:7A:F6:AD:91:93:16:F7:4C:6B:D6:1E:C3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/0/3136382e3230352e33362e302f32322d3234203d3e20323633383830.roa
Signing time: Wed 12 Jul 2023 21:05:42 +0000
ROA not before: Wed 12 Jul 2023 21:00:42 +0000
ROA not after: Wed 10 Jul 2024 21:05:42 +0000
asID: 263880
IP address blocks: 168.205.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:cb:e8:72:54:51:b7:7a:68:b3:34:72:57:99:e5:dd:ec:50:4a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3
Validity
Not Before: Jul 12 21:00:42 2023 GMT
Not After : Jul 10 21:05:42 2024 GMT
Subject: CN=D82A11AB2D77F6BCFA31BC51BC9D2B355B9C72ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:09:0f:43:59:2c:42:4a:81:5d:5d:f5:5b:ff:
45:d9:8f:39:db:11:fc:83:12:b1:e4:83:1e:d3:44:
bc:20:2e:1f:e2:04:03:be:61:ae:c4:06:4d:cd:e6:
ce:e7:ec:b3:b5:e6:a7:35:60:d2:17:c8:45:6e:04:
3e:63:c1:08:2c:84:5e:4c:b9:dd:34:cc:02:e2:45:
1d:2b:cc:5f:6f:6c:c7:9a:54:f6:ce:58:e0:20:91:
67:63:6d:54:8d:0e:82:c7:87:03:71:e6:db:1d:1f:
7b:7b:e9:58:84:70:b7:87:94:1d:b8:12:4d:bb:51:
76:87:30:9a:a3:91:40:db:2e:45:b9:27:3e:c9:2b:
c8:c3:e3:92:f2:46:af:c5:5e:74:87:40:56:3f:10:
ae:36:87:af:d3:4c:68:28:84:d4:a2:32:49:de:97:
ea:ed:09:51:fd:99:bc:09:0f:65:48:2e:a2:47:71:
f5:08:ed:ab:75:1c:09:b7:1d:2e:d9:3b:6f:34:4b:
3b:0c:15:7b:6f:b3:32:24:d3:67:4d:c0:2f:6f:42:
8e:83:e1:b3:6e:06:55:86:6d:40:2d:9c:f4:16:77:
d3:77:5b:69:c9:14:15:6b:2d:0e:3e:e5:75:f6:6c:
7b:e5:b3:6e:49:c4:f4:3b:a9:59:e4:8f:db:3b:54:
3a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2A:11:AB:2D:77:F6:BC:FA:31:BC:51:BC:9D:2B:35:5B:9C:72:ED
X509v3 Authority Key Identifier:
keyid:4D:00:22:D6:7F:B1:D0:1C:7A:F6:AD:91:93:16:F7:4C:6B:D6:1E:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/0/4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/0/3136382e3230352e33362e302f32322d3234203d3e20323633383830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.205.36.0/22
Signature Algorithm: sha256WithRSAEncryption
20:1b:d2:7a:ed:89:68:b8:88:d9:28:2f:ed:1f:17:1b:fd:7d:
76:0c:d3:fa:12:ba:98:34:82:6c:9a:e7:f1:cc:77:aa:b2:e5:
3f:83:77:54:46:e8:30:56:ba:09:06:f6:ab:00:05:2f:1f:4c:
72:ff:5c:76:61:d5:90:fb:25:5f:e4:d2:63:28:65:4d:6e:cb:
32:46:88:e4:04:ce:a6:77:cb:9a:47:7d:18:33:08:a5:c6:d4:
a8:ff:7e:7b:87:3d:2c:f6:56:38:e8:a6:10:7a:fc:58:86:b0:
27:de:aa:ef:c4:33:cb:ef:2d:95:a5:10:9c:25:f9:ff:8b:1f:
dd:86:57:e8:b7:d2:2e:e4:a5:bf:52:ad:c3:3a:92:87:b5:f4:
ef:91:77:33:54:e7:0c:70:3d:36:0d:1b:3d:a8:b6:27:ec:c3:
82:9d:7c:02:a1:02:44:6a:d5:af:e8:b2:9d:3d:6c:8f:6f:b8:
2e:43:a5:d5:cb:c3:48:9e:20:12:a4:6c:c1:88:1a:0b:ce:f7:
a0:14:c1:48:87:05:26:4a:6d:2f:e9:bb:07:ac:a2:a3:8a:4f:
3c:b6:34:03:92:8d:07:84:3b:85:26:95:9d:01:39:1a:cd:c1:
55:13:23:a7:9e:3c:0f:52:01:7f:43:57:7c:d0:a6:c6:75:74:
d5:86:84:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:32 2025 by rpki-client