![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/3133382e39372e3138342e302f32322d3234203d3e20323634313933.roa
File: 3133382e39372e3138342e302f32322d3234203d3e20323634313933.roa (raw, json)
Hash identifier: hYwHyJb4DzfltRV2IaLaRydAsxVgXIjxP1/SZgfyg/0=
Subject key identifier: 09:C5:D6:6C:39:53:A0:25:32:C8:BE:A8:97:A5:66:55:FF:B3:89:6F
Certificate issuer: /CN=DC13A6C4AE68B902CF647C91547B88EF9E2B6738
Certificate serial: 5A334DFDEFDC5784F34084E0A54BCE6E6B6734E7
Authority key identifier: DC:13:A6:C4:AE:68:B9:02:CF:64:7C:91:54:7B:88:EF:9E:2B:67:38
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC13A6C4AE68B902CF647C91547B88EF9E2B6738.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/3133382e39372e3138342e302f32322d3234203d3e20323634313933.roa
Signing time: Wed 14 Feb 2024 20:29:17 +0000
ROA not before: Wed 14 Feb 2024 20:24:17 +0000
ROA not after: Wed 12 Feb 2025 20:29:17 +0000
asID: 264193
IP address blocks: 138.97.184.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:33:4d:fd:ef:dc:57:84:f3:40:84:e0:a5:4b:ce:6e:6b:67:34:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC13A6C4AE68B902CF647C91547B88EF9E2B6738
Validity
Not Before: Feb 14 20:24:17 2024 GMT
Not After : Feb 12 20:29:17 2025 GMT
Subject: CN=09C5D66C3953A02532C8BEA897A56655FFB3896F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7f:7a:a2:a1:15:74:0a:90:2f:d7:db:3b:9b:
85:73:7e:8e:66:c7:74:c6:26:5f:60:f0:48:39:ce:
6b:a4:1a:97:5a:34:e4:5d:6c:90:b4:73:24:3f:5f:
3b:ad:95:fc:74:37:d7:c7:e9:ea:9b:be:9f:c4:f0:
f6:5d:62:05:db:9b:b2:9e:f9:1a:e1:c2:63:c2:1a:
85:2d:cd:05:32:7e:4a:75:3b:00:41:7a:02:85:e1:
2c:8a:a3:72:43:a9:01:d7:31:6c:6b:43:a6:36:3f:
d0:74:58:7b:70:d8:ad:63:45:eb:2c:b3:6b:c8:6d:
57:67:af:0c:d8:7c:2d:52:1d:32:8c:32:83:ef:9c:
80:61:16:a0:85:f0:c6:d1:c7:35:91:1d:37:b6:89:
9b:56:33:d6:12:f9:13:75:3f:bc:8c:6a:55:d4:c3:
00:73:07:2e:58:6a:fc:9b:eb:ea:b3:58:64:43:a9:
a4:ca:83:49:23:8e:44:60:91:ea:e4:c5:7c:44:0a:
9d:b5:48:b9:98:17:51:23:63:9f:48:72:98:72:c1:
be:c9:9f:0b:2b:26:7d:77:07:d9:77:e9:1c:b6:ce:
58:4f:c5:fb:9f:e8:0c:94:70:2a:16:ef:18:b5:eb:
79:84:37:9e:4d:b0:af:96:9c:73:f4:ab:db:30:bf:
78:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C5:D6:6C:39:53:A0:25:32:C8:BE:A8:97:A5:66:55:FF:B3:89:6F
X509v3 Authority Key Identifier:
keyid:DC:13:A6:C4:AE:68:B9:02:CF:64:7C:91:54:7B:88:EF:9E:2B:67:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/DC13A6C4AE68B902CF647C91547B88EF9E2B6738.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC13A6C4AE68B902CF647C91547B88EF9E2B6738.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/3133382e39372e3138342e302f32322d3234203d3e20323634313933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.184.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:8f:86:4d:64:3c:93:44:ad:05:2f:9b:6d:4b:5b:1e:f1:26:
1b:57:94:98:77:1d:68:8c:bc:d9:73:92:9a:c9:93:63:8e:de:
87:6b:6c:0c:f5:e0:8b:7b:66:c5:b8:ed:af:9f:5e:95:c7:2d:
02:40:ba:31:e2:62:0c:cb:af:b5:75:a5:eb:0e:a5:42:79:a0:
52:8a:3e:a0:73:75:4d:e3:26:f0:a5:ff:d6:8d:08:a3:f2:f8:
fa:0d:f2:7f:bf:5c:f3:b5:e8:95:9a:cb:cc:e7:a5:6d:34:4a:
f6:a5:5c:6d:85:e5:2f:22:d4:ca:7b:45:6a:54:40:b8:18:5c:
91:a6:cd:dd:03:c7:18:1a:c2:61:68:dc:9c:27:42:75:c9:fe:
46:07:77:f7:66:bc:1e:2f:79:19:e2:ef:43:08:4e:c8:59:d1:
73:3d:25:a5:33:46:67:c8:15:84:0e:a0:3f:4f:db:0a:a1:46:
48:cc:7e:8f:35:92:a8:5a:45:f3:7a:18:bd:76:7c:56:79:c1:
b5:c1:b2:1b:6b:66:32:76:40:1b:7f:fa:91:81:8e:37:3f:c7:
0d:5f:6f:63:19:fc:ca:27:09:bc:2e:05:c1:90:72:37:23:4c:
7b:61:44:d5:a0:01:d0:9e:b2:4a:45:51:ee:3d:e9:cd:21:e8:
27:49:14:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:37 2025 by rpki-client