![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3137372e38352e3233322e302f32322d3232203d3e20323632363137.roa
File: 3137372e38352e3233322e302f32322d3232203d3e20323632363137.roa (raw, json)
Hash identifier: GSPrvHCAccFnycDJDnffmh71Ed3PPywYpl/mLYyOk70=
Subject key identifier: E8:E0:24:FF:40:7B:1F:D1:8A:97:96:9F:1D:AC:05:77:E6:0B:AF:59
Certificate issuer: /CN=A29A661923968BDFB1DCB02A45952175689C9AE9
Certificate serial: 2ABA2C5F249F019D767D12B497F5600AF311D8B2
Authority key identifier: A2:9A:66:19:23:96:8B:DF:B1:DC:B0:2A:45:95:21:75:68:9C:9A:E9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A29A661923968BDFB1DCB02A45952175689C9AE9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3137372e38352e3233322e302f32322d3232203d3e20323632363137.roa
Signing time: Wed 18 Jan 2023 17:49:35 +0000
ROA not before: Wed 18 Jan 2023 17:44:35 +0000
ROA not after: Wed 17 Jan 2024 17:49:35 +0000
asID: 262617
IP address blocks: 177.85.232.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:ba:2c:5f:24:9f:01:9d:76:7d:12:b4:97:f5:60:0a:f3:11:d8:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A29A661923968BDFB1DCB02A45952175689C9AE9
Validity
Not Before: Jan 18 17:44:35 2023 GMT
Not After : Jan 17 17:49:35 2024 GMT
Subject: CN=E8E024FF407B1FD18A97969F1DAC0577E60BAF59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ea:e3:8f:96:56:2f:30:39:3e:87:60:1d:a6:
11:09:e2:9c:86:30:a9:46:d6:f4:bb:d5:4c:d9:bc:
37:b9:92:71:68:cc:17:e8:d7:f1:9e:2d:4a:4c:d1:
19:a7:06:06:a6:b2:9a:05:03:95:e6:b2:da:ec:bb:
9f:f2:47:f2:41:a1:84:8c:20:69:b0:1e:cf:83:81:
0c:48:ad:ea:6a:8f:d3:99:d2:0a:43:2b:8a:ed:2c:
df:ac:9a:27:fb:9f:f4:88:dd:05:d7:bd:18:54:7a:
d1:07:4a:12:53:80:76:aa:da:94:c2:95:e3:25:7f:
c2:f0:fd:b6:11:13:6b:1c:3f:93:9f:4b:2c:82:30:
51:53:2b:06:5c:5c:82:ad:3a:cf:26:4e:ad:5a:60:
a4:8b:12:e1:d0:ea:9b:84:2e:b2:0c:fe:02:f7:bc:
25:12:43:cc:53:52:e9:1e:72:57:45:9f:13:58:d4:
43:1a:b2:7b:3e:72:88:6d:e7:d1:93:73:03:0f:87:
de:87:39:1d:9b:82:70:76:d1:59:4f:ac:ed:e8:97:
c0:df:fc:1a:ef:6e:48:83:07:5d:ff:5a:16:c0:e0:
a7:1e:02:d7:8f:b2:75:3c:cc:d3:06:ee:8c:fe:26:
65:52:7f:62:06:bb:83:76:b0:34:27:75:96:bd:2f:
13:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E0:24:FF:40:7B:1F:D1:8A:97:96:9F:1D:AC:05:77:E6:0B:AF:59
X509v3 Authority Key Identifier:
keyid:A2:9A:66:19:23:96:8B:DF:B1:DC:B0:2A:45:95:21:75:68:9C:9A:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/A29A661923968BDFB1DCB02A45952175689C9AE9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A29A661923968BDFB1DCB02A45952175689C9AE9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3137372e38352e3233322e302f32322d3232203d3e20323632363137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.85.232.0/22
Signature Algorithm: sha256WithRSAEncryption
37:2e:c4:ad:43:07:d2:ce:c5:b1:b8:30:c2:14:82:26:40:19:
bd:86:a0:4d:93:16:d0:64:78:0f:9a:25:98:ee:5c:b3:e3:07:
ab:97:e5:a7:06:4e:23:7f:d3:bf:c3:82:5a:46:43:d6:0e:a8:
a5:c9:d2:6f:9c:59:7a:d3:3c:61:21:a6:af:d9:89:37:7e:98:
25:21:74:45:72:55:cf:99:c9:ab:33:9f:cb:77:26:92:71:e6:
5c:8e:30:5a:69:dd:96:ca:7f:7c:7b:5e:c6:ee:2a:3f:d1:7b:
65:6d:cc:6b:a8:a2:49:ca:f6:70:a2:f1:91:fd:c4:de:c2:e0:
b0:00:ba:14:1f:48:36:89:5d:64:6b:14:ac:69:a9:5f:fe:e0:
27:65:05:16:83:aa:9c:1d:d0:8e:d9:4d:06:6b:b0:91:30:07:
22:b7:e2:28:55:88:b8:2b:23:ea:db:6f:6c:17:13:d6:77:a1:
ac:0c:47:01:df:70:90:e7:cb:5b:dd:c1:f9:1b:fd:ff:3c:fc:
27:2e:7b:b0:ef:4e:0f:ba:28:b9:55:b0:87:71:dd:21:c6:3f:
cd:fe:a1:9b:f5:27:de:83:5b:4f:a2:02:b7:04:e2:1d:b1:a2:
c6:99:9c:40:64:43:ab:8e:54:09:31:f6:1f:01:9d:f9:1d:27:
36:07:27:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:48 2025 by rpki-client