![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DSkMMv8ur2KThNtdCbFfbUTeRQUC5aBTPxrbDo2VvvLW/0/3137372e38352e37322e302f32322d3232203d3e203532373339.roa
File: 3137372e38352e37322e302f32322d3232203d3e203532373339.roa (raw, json)
Hash identifier: x2ZzBu4GJCgFC/UY8bZA5/VLwRRlq0m+nVm5stbgN00=
Subject key identifier: BF:DF:D1:C8:28:9C:21:76:55:E8:40:9F:28:5D:FF:2A:09:41:D9:D7
Certificate issuer: /CN=862009D4161A11807908B0E9BCD73252750A152D
Certificate serial: 06515E163B869FA30FA6AD74653C645A654BEE63
Authority key identifier: 86:20:09:D4:16:1A:11:80:79:08:B0:E9:BC:D7:32:52:75:0A:15:2D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/862009D4161A11807908B0E9BCD73252750A152D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DSkMMv8ur2KThNtdCbFfbUTeRQUC5aBTPxrbDo2VvvLW/0/3137372e38352e37322e302f32322d3232203d3e203532373339.roa
Signing time: Thu 12 Jan 2023 18:53:52 +0000
ROA not before: Thu 12 Jan 2023 18:48:52 +0000
ROA not after: Thu 11 Jan 2024 18:53:52 +0000
asID: 52739
IP address blocks: 177.85.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:51:5e:16:3b:86:9f:a3:0f:a6:ad:74:65:3c:64:5a:65:4b:ee:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=862009D4161A11807908B0E9BCD73252750A152D
Validity
Not Before: Jan 12 18:48:52 2023 GMT
Not After : Jan 11 18:53:52 2024 GMT
Subject: CN=BFDFD1C8289C217655E8409F285DFF2A0941D9D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:52:c3:96:e3:36:e8:56:8e:76:9c:39:03:3d:
66:a6:a1:c6:c2:02:3b:a6:ad:96:a8:e1:28:75:79:
48:ba:d9:aa:31:db:07:0e:f8:39:fb:ed:10:27:4f:
88:ff:a4:ef:9f:ed:20:d7:7e:99:8c:75:87:e2:18:
55:c9:d5:83:54:90:e5:3a:a7:81:36:4f:96:13:c3:
d3:16:34:a7:63:f2:e5:e9:69:14:70:2f:4a:b5:43:
67:29:8d:17:cd:6e:f3:14:04:03:04:be:46:da:55:
85:3e:fb:f0:fd:b8:48:87:f8:da:d7:3f:7b:8a:68:
42:fd:e1:c4:08:f4:5f:c4:c5:31:95:1e:bd:46:fe:
e5:42:b2:29:dc:27:a1:1c:07:10:e5:78:34:83:8c:
45:45:ea:b7:f8:75:24:18:60:88:7f:94:a5:da:df:
b2:11:a9:f0:37:45:50:5b:01:9c:db:3e:5a:5c:e9:
03:19:aa:60:7f:95:2b:4b:82:77:1e:d7:e9:a3:9f:
25:66:4d:2f:76:7d:6c:29:59:f1:75:93:c6:75:ee:
d0:d5:6d:f9:fe:9f:cf:69:14:52:1d:53:fc:f2:58:
e1:7b:c6:54:68:1b:ac:4a:62:80:46:d4:ca:4a:94:
dd:bf:5c:e0:c2:65:06:c5:fe:e9:16:23:5d:8c:16:
45:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DF:D1:C8:28:9C:21:76:55:E8:40:9F:28:5D:FF:2A:09:41:D9:D7
X509v3 Authority Key Identifier:
keyid:86:20:09:D4:16:1A:11:80:79:08:B0:E9:BC:D7:32:52:75:0A:15:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DSkMMv8ur2KThNtdCbFfbUTeRQUC5aBTPxrbDo2VvvLW/0/862009D4161A11807908B0E9BCD73252750A152D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/862009D4161A11807908B0E9BCD73252750A152D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSkMMv8ur2KThNtdCbFfbUTeRQUC5aBTPxrbDo2VvvLW/0/3137372e38352e37322e302f32322d3232203d3e203532373339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.85.72.0/22
Signature Algorithm: sha256WithRSAEncryption
07:db:e0:76:31:d3:03:17:c9:0f:70:bc:cf:0d:de:d4:53:f4:
82:aa:19:5f:e1:e2:3f:f0:01:99:59:dc:15:21:c2:66:ca:f5:
00:be:a1:dd:c2:e9:ae:07:19:d9:de:8a:2e:43:46:9b:58:9a:
fe:c9:8f:96:70:6c:8f:64:bb:71:ee:46:76:98:90:b3:cd:6b:
b2:6a:11:a3:99:ce:35:c3:81:10:26:c5:5b:9a:83:88:e8:53:
cb:2a:a0:ff:3d:8d:90:06:3a:17:77:71:8b:c8:95:5c:7e:e0:
4d:75:95:e5:d0:9f:11:43:35:97:4b:e0:1a:1c:b9:f2:8c:4d:
91:3b:64:49:ae:18:3e:cb:3b:0d:d0:05:92:a9:e3:b3:b9:84:
01:d4:fa:93:5e:ae:b1:bf:17:be:68:f1:15:ab:ba:3a:5f:ea:
84:95:63:72:54:09:95:94:19:a5:ab:06:31:d7:f9:76:de:47:
10:c4:50:d4:1f:32:be:89:c2:6e:63:5a:47:f4:ca:fc:54:53:
a1:35:c0:fc:cc:63:81:e9:63:2f:62:4e:ee:6e:31:af:83:4b:
bb:d1:bf:94:16:f5:f1:1d:b5:e4:ec:27:30:5e:46:2c:00:d8:
71:82:c6:52:9f:42:f9:08:1f:8e:df:27:66:36:81:2b:33:b1:
85:21:63:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:18:14 2025 by rpki-client