![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3133382e39392e34322e302f32342d3234203d3e20323633303836.roa
File: 3133382e39392e34322e302f32342d3234203d3e20323633303836.roa (raw, json)
Hash identifier: 5ODGSMGL7CPBdBb0PqDlrgEO5LOQCGRDI+N8lZ8j1I4=
Subject key identifier: 7B:13:BA:5E:15:18:55:D1:79:5B:C3:39:2E:8F:46:1C:13:D4:D9:7D
Certificate issuer: /CN=1C5FE8A7A5CAF8C0332EDF711ABDC0805B208F9B
Certificate serial: 314CA954B5A2ECBF9BDCC2833CD55CEAF05E839D
Authority key identifier: 1C:5F:E8:A7:A5:CA:F8:C0:33:2E:DF:71:1A:BD:C0:80:5B:20:8F:9B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5FE8A7A5CAF8C0332EDF711ABDC0805B208F9B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3133382e39392e34322e302f32342d3234203d3e20323633303836.roa
Signing time: Tue 07 Mar 2023 22:21:31 +0000
ROA not before: Tue 07 Mar 2023 22:16:31 +0000
ROA not after: Tue 05 Mar 2024 22:21:31 +0000
asID: 263086
IP address blocks: 138.99.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:4c:a9:54:b5:a2:ec:bf:9b:dc:c2:83:3c:d5:5c:ea:f0:5e:83:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C5FE8A7A5CAF8C0332EDF711ABDC0805B208F9B
Validity
Not Before: Mar 7 22:16:31 2023 GMT
Not After : Mar 5 22:21:31 2024 GMT
Subject: CN=7B13BA5E151855D1795BC3392E8F461C13D4D97D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:47:10:84:1c:c5:7c:63:12:ae:b5:b6:fa:21:
10:e5:2e:da:40:9c:20:38:2f:58:52:f4:e5:e3:97:
25:fd:58:f2:14:01:d9:60:a9:d8:e8:df:29:34:0d:
d8:12:3f:e3:15:13:67:66:bb:4d:72:e9:26:8a:5e:
e7:e2:3e:60:23:b6:df:49:ed:51:0a:57:ee:2d:bb:
40:86:4f:da:a6:d9:29:82:b5:8b:96:6d:95:dd:1a:
50:14:53:c3:4d:b9:7f:a7:04:a2:bc:ec:8b:93:05:
39:4e:36:4e:f4:3f:62:ba:fc:4d:db:38:50:e8:3c:
50:f4:e7:88:08:70:f0:58:7e:f9:fe:68:6e:4d:d6:
b3:88:d0:f1:1b:8c:ab:ac:f1:11:4d:73:19:57:85:
2a:03:90:d2:c6:51:18:a7:91:5e:c7:3e:4d:c5:f5:
e0:9f:c8:4a:f6:57:4b:62:e7:a3:7b:f2:c5:97:c1:
51:00:a7:5f:36:44:6e:13:4b:75:d4:77:e7:6f:36:
d6:22:65:75:7f:ae:98:21:4a:db:28:25:65:56:47:
91:f3:73:b3:2a:ab:b7:e3:1d:ac:2e:87:c1:fb:37:
82:74:0e:c8:57:b4:01:ae:e2:f6:a0:c4:5f:a6:8a:
cc:f6:fd:ea:d7:2f:2e:e5:a8:00:73:df:e4:78:73:
60:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:13:BA:5E:15:18:55:D1:79:5B:C3:39:2E:8F:46:1C:13:D4:D9:7D
X509v3 Authority Key Identifier:
keyid:1C:5F:E8:A7:A5:CA:F8:C0:33:2E:DF:71:1A:BD:C0:80:5B:20:8F:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/1C5FE8A7A5CAF8C0332EDF711ABDC0805B208F9B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5FE8A7A5CAF8C0332EDF711ABDC0805B208F9B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3133382e39392e34322e302f32342d3234203d3e20323633303836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.42.0/24
Signature Algorithm: sha256WithRSAEncryption
30:18:4e:4d:d1:90:20:40:40:1e:21:0e:15:04:51:1f:1d:4a:
6b:28:dd:44:31:c2:03:52:10:6e:8b:23:39:6c:8e:9e:c0:a5:
8c:fc:db:c4:d7:3a:13:fe:8a:2a:d2:0d:d1:f4:9e:40:e7:73:
86:81:2d:5d:b9:54:dc:60:e1:13:0f:c8:3b:2d:8d:9d:97:ba:
04:66:96:7e:71:06:f0:1c:71:cf:48:39:fc:7e:72:1e:77:a7:
78:aa:a1:c5:0c:30:6e:a5:53:1d:b5:f0:c3:80:72:33:29:cc:
81:89:cb:56:c6:31:ec:21:e9:bd:e4:a5:69:2b:ea:21:84:11:
85:3f:93:61:fb:91:d9:f4:bf:09:bd:de:49:b3:95:00:dc:b1:
a1:ee:79:7d:76:9b:01:54:ce:bb:4f:ff:9a:19:aa:f5:8c:07:
c5:83:5b:4e:98:2c:ff:d1:33:70:35:18:e2:f5:91:97:86:73:
4f:28:e1:21:92:78:c8:92:6a:64:cd:03:54:10:99:14:5a:1b:
97:c6:8a:f9:06:e8:01:00:a7:00:04:38:bd:87:dc:1b:9a:4d:
90:92:f7:e6:d9:40:dd:20:c4:94:3e:15:00:95:c7:d6:87:d9:
6f:53:fb:8c:ea:6d:ff:23:6e:7f:18:a9:c2:fe:f6:51:97:be:
5c:d0:30:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:09 2025 by rpki-client