![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/0/34352e3138312e3134382e302f32332d3233203d3e20323639313932.roa
File: 34352e3138312e3134382e302f32332d3233203d3e20323639313932.roa (raw, json)
Hash identifier: CpIrTYnxtrm4bFz02yTmlWLwXYd9hW54lDGHYgnEaJU=
Subject key identifier: E8:FF:2A:E1:D8:25:97:F9:6C:CF:BE:63:BD:64:26:54:13:E9:9C:54
Certificate issuer: /CN=A9019D0A5557DBD77DD42CDCED37B55CC0A2087C
Certificate serial: 17699B9C59417CD85B5676009632C74B54381D85
Authority key identifier: A9:01:9D:0A:55:57:DB:D7:7D:D4:2C:DC:ED:37:B5:5C:C0:A2:08:7C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9019D0A5557DBD77DD42CDCED37B55CC0A2087C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/0/34352e3138312e3134382e302f32332d3233203d3e20323639313932.roa
Signing time: Mon 29 Jan 2024 20:00:01 +0000
ROA not before: Mon 29 Jan 2024 19:55:01 +0000
ROA not after: Mon 27 Jan 2025 20:00:01 +0000
asID: 269192
IP address blocks: 45.181.148.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:69:9b:9c:59:41:7c:d8:5b:56:76:00:96:32:c7:4b:54:38:1d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9019D0A5557DBD77DD42CDCED37B55CC0A2087C
Validity
Not Before: Jan 29 19:55:01 2024 GMT
Not After : Jan 27 20:00:01 2025 GMT
Subject: CN=E8FF2AE1D82597F96CCFBE63BD64265413E99C54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d4:bc:08:1d:5b:64:93:f3:87:62:a8:07:d3:
91:d4:e4:49:74:f8:3d:13:51:4d:88:28:a4:a5:ca:
76:48:bf:cb:04:d7:48:19:92:50:0e:f1:5c:d5:2b:
96:92:fe:36:82:82:38:00:49:d1:c0:06:b4:08:9d:
95:18:67:03:71:5a:d6:2d:14:06:1e:ab:e3:f6:e2:
d3:66:3c:3f:31:48:1e:b4:cd:d5:84:ee:68:86:47:
32:e6:29:41:03:df:76:e3:61:72:b9:a5:3f:2c:9f:
f4:83:a2:68:0f:5e:d6:63:e1:33:73:77:1b:97:9c:
a5:44:bd:59:90:2e:e1:36:8b:db:23:77:a6:e3:50:
7a:48:26:f6:e6:75:70:93:07:9c:46:0e:d6:6f:68:
ce:97:af:f6:fd:79:2c:a0:c7:25:e2:20:b4:2e:dd:
65:63:92:8b:58:11:ca:2f:21:71:5e:8d:d8:50:52:
7b:1f:74:31:0c:4d:fd:99:69:b5:02:61:58:79:9e:
9a:f3:ea:c6:f8:44:c3:eb:f4:b5:2d:b4:62:f3:87:
27:7c:88:66:7c:a2:9e:db:02:6c:c1:62:d9:b3:98:
ae:b5:11:34:2a:13:b5:a7:60:c5:61:77:e8:b3:69:
c2:03:47:28:09:35:b6:70:28:b0:88:17:13:1b:ee:
f7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FF:2A:E1:D8:25:97:F9:6C:CF:BE:63:BD:64:26:54:13:E9:9C:54
X509v3 Authority Key Identifier:
keyid:A9:01:9D:0A:55:57:DB:D7:7D:D4:2C:DC:ED:37:B5:5C:C0:A2:08:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/0/A9019D0A5557DBD77DD42CDCED37B55CC0A2087C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9019D0A5557DBD77DD42CDCED37B55CC0A2087C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/0/34352e3138312e3134382e302f32332d3233203d3e20323639313932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.181.148.0/23
Signature Algorithm: sha256WithRSAEncryption
27:53:8e:55:52:4a:a5:4d:88:1d:2f:02:23:6a:b5:c0:b1:f7:
d4:28:1c:de:73:c8:8f:38:21:69:dd:44:43:a5:01:47:68:69:
04:27:9e:b0:2a:d3:36:66:97:aa:67:f9:2d:07:3e:34:9e:20:
ce:9e:21:21:e7:68:1e:5b:ce:f8:49:c0:f8:30:0f:5d:3e:4e:
43:74:05:06:bb:1a:ba:a2:92:8b:1f:4e:dc:1a:be:a8:af:e4:
db:aa:b7:01:ae:57:26:a0:13:41:6e:7c:f9:2f:36:09:12:e1:
98:9a:af:d6:10:fe:09:e9:92:d6:79:3f:0b:89:0a:93:fb:07:
29:ca:b8:10:79:1d:70:b8:6e:57:98:00:04:32:6b:5b:a7:a4:
48:d6:6a:19:8e:8d:90:9d:ed:37:41:10:8b:f4:5d:96:df:bb:
07:af:f9:99:12:db:da:7a:c8:d9:9f:b0:d9:b8:e0:0d:ab:7c:
d9:34:93:81:15:fb:49:87:e8:5c:fc:39:7c:13:31:a5:92:f8:
b5:8c:47:d4:3f:3c:93:94:7b:90:f3:9c:03:7a:cf:67:af:48:
d4:05:32:ee:26:cc:10:f0:49:10:61:f1:80:13:f3:07:0f:fd:
dc:73:52:c8:d8:bd:37:b1:0c:68:e4:9e:c1:91:ba:91:19:05:
92:b5:d6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:09 2025 by rpki-client