![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/3136382e3139362e38362e302f32332d3233203d3e20323635343437.roa
File: 3136382e3139362e38362e302f32332d3233203d3e20323635343437.roa (raw, json)
Hash identifier: ZIg4DSZ7eLrOXrjdgwf0rVnr7rAoqemRNQJfj+BHyqw=
Subject key identifier: 1C:9B:04:0C:D7:CA:8D:0B:2A:87:EF:A2:AF:C0:58:0B:BB:12:57:33
Certificate issuer: /CN=66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3
Certificate serial: 06188D0E7F0F8BC5AD4719782F59741BFA8696C8
Authority key identifier: 66:EC:78:F4:7E:AA:40:A6:AB:C0:E1:EE:29:D0:3B:4D:90:69:04:A3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/3136382e3139362e38362e302f32332d3233203d3e20323635343437.roa
Signing time: Mon 23 Oct 2023 18:25:22 +0000
ROA not before: Mon 23 Oct 2023 18:20:22 +0000
ROA not after: Mon 21 Oct 2024 18:25:22 +0000
asID: 265447
IP address blocks: 168.196.86.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:18:8d:0e:7f:0f:8b:c5:ad:47:19:78:2f:59:74:1b:fa:86:96:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3
Validity
Not Before: Oct 23 18:20:22 2023 GMT
Not After : Oct 21 18:25:22 2024 GMT
Subject: CN=1C9B040CD7CA8D0B2A87EFA2AFC0580BBB125733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7f:bd:44:65:68:1f:c9:c3:1e:6f:7d:d4:5e:
4c:d9:d6:49:b3:23:cb:de:0a:ea:53:f6:52:2c:5a:
68:14:da:d4:aa:5e:47:35:d5:f1:38:2b:78:12:de:
97:33:87:fe:50:62:16:e5:77:7e:73:5e:41:f8:f5:
7d:df:d2:94:95:cf:07:9f:88:61:e9:6d:f5:e7:9c:
52:25:b6:97:b5:f2:a0:40:50:05:08:6f:7f:15:ca:
aa:13:98:16:2a:c5:15:48:02:44:42:37:9e:72:5a:
d2:93:43:80:9b:36:29:88:37:17:09:70:de:74:be:
a7:8c:a8:a5:01:e0:3e:c1:db:90:f1:15:f1:90:80:
4e:fc:00:d2:79:7b:c3:c9:e8:6c:78:2c:34:89:ec:
31:d8:39:f4:fb:36:cc:96:a6:65:93:7e:1d:e6:bc:
2a:a3:c9:ae:be:c1:ec:82:22:5a:35:a9:4d:20:49:
c7:5b:6e:b3:cf:3b:9e:df:c1:e6:5a:05:4a:86:8b:
a5:a4:d1:94:76:9e:8d:a6:c0:f7:69:c0:44:4b:c2:
4a:58:ed:09:30:79:98:28:3c:d1:e3:bb:9c:d0:2f:
88:4f:8d:6c:3e:22:ac:c3:42:6e:43:eb:0f:09:7d:
1f:c3:f9:05:0f:08:8b:15:b7:d1:23:4b:c6:3e:91:
82:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9B:04:0C:D7:CA:8D:0B:2A:87:EF:A2:AF:C0:58:0B:BB:12:57:33
X509v3 Authority Key Identifier:
keyid:66:EC:78:F4:7E:AA:40:A6:AB:C0:E1:EE:29:D0:3B:4D:90:69:04:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/3136382e3139362e38362e302f32332d3233203d3e20323635343437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.196.86.0/23
Signature Algorithm: sha256WithRSAEncryption
04:7f:06:c6:51:9c:44:d9:cf:ae:1a:74:95:3f:6a:53:c6:79:
e6:52:bd:29:ad:ed:1b:9a:ad:6f:7f:52:b9:a1:67:41:f8:e0:
de:19:ca:95:33:4b:0a:c0:ed:99:e1:07:93:58:97:cf:0e:58:
32:5c:5c:86:0e:0c:4e:1c:1e:83:a1:e3:85:93:75:b5:e0:83:
d5:61:4b:8c:aa:db:3c:17:9e:c2:99:7c:43:dd:09:23:97:c8:
af:0d:b3:ef:54:37:48:f2:02:fd:e2:35:f3:a4:57:33:52:be:
77:07:68:c8:2e:19:59:df:49:58:75:ef:f4:ee:96:de:0a:c9:
60:5f:97:51:1f:31:6f:3d:f4:26:79:12:c4:ed:a9:94:5e:2d:
e4:39:32:5d:74:5d:cc:84:b8:4f:f9:df:1c:c6:d4:2c:37:c4:
2f:87:49:3f:61:0f:e7:b7:6c:75:e2:e7:92:d7:c3:95:73:86:
ca:92:8d:98:c3:0e:62:5e:ab:5b:82:58:ae:14:08:ac:e3:75:
aa:68:15:90:ca:47:cc:9c:78:09:80:14:81:56:db:a1:2d:19:
59:fc:d6:0b:f0:68:06:49:09:75:05:e6:3c:25:2f:74:84:c2:
66:56:a4:63:3c:5b:de:11:2b:1b:6c:57:9f:f3:da:d1:9c:ac:
c3:8d:47:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:33 2025 by rpki-client