![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3139362e302f32322d3232203d3e20323632363137.roa
File: 3138372e36322e3139362e302f32322d3232203d3e20323632363137.roa (raw, json)
Hash identifier: D5p6/feGoO/gPm46+aKszLTkm0JfC888kpLcWmPRJIE=
Subject key identifier: 5C:45:FA:5B:FB:2B:13:00:C3:24:53:3F:10:91:01:43:3A:2A:8A:CE
Certificate issuer: /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial: 17CD5F9C9756631F281AC91CEF82A99198A16BC4
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3139362e302f32322d3232203d3e20323632363137.roa
Signing time: Thu 03 Aug 2023 13:08:58 +0000
ROA not before: Thu 03 Aug 2023 13:03:58 +0000
ROA not after: Thu 01 Aug 2024 13:08:58 +0000
asID: 262617
IP address blocks: 187.62.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:cd:5f:9c:97:56:63:1f:28:1a:c9:1c:ef:82:a9:91:98:a1:6b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Validity
Not Before: Aug 3 13:03:58 2023 GMT
Not After : Aug 1 13:08:58 2024 GMT
Subject: CN=5C45FA5BFB2B1300C324533F109101433A2A8ACE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b2:61:20:66:bd:29:a7:dc:c5:c9:36:c2:af:
09:cf:95:5a:db:2d:50:01:fb:c7:b1:66:6a:da:0e:
9c:12:75:5c:5e:73:b2:02:23:3a:9c:86:65:55:d2:
af:d5:91:62:c5:c8:6b:70:dc:23:21:be:d2:13:9d:
6c:5f:64:a8:a9:59:13:1b:48:ed:c3:9e:9a:74:c4:
57:ca:58:28:39:30:e8:c1:f0:e7:e7:05:e6:ff:80:
6d:da:93:3e:37:a4:0c:5b:66:a2:48:d2:43:21:bd:
b3:39:00:a4:a8:35:ac:fc:e4:48:36:1d:45:d6:4a:
28:19:84:d1:c9:49:4b:9c:2b:5b:f7:df:03:15:6e:
16:9d:b1:7f:1d:cf:fc:37:a5:e3:f4:a7:5b:98:00:
f6:07:1c:7c:36:0a:c4:24:bd:70:e1:0a:b4:91:a8:
c7:02:d3:36:7e:ac:af:5c:b4:38:24:01:62:0e:ee:
78:19:e4:96:65:af:01:0b:82:83:62:d1:89:55:f6:
01:ab:ea:3c:68:b4:c4:60:31:09:ef:2f:47:b0:73:
3a:c9:e7:7c:fa:86:d3:95:89:8c:f2:98:20:20:63:
ec:12:13:88:a8:ed:25:b8:39:02:4e:fa:6e:60:2e:
67:2c:62:63:65:b7:fd:fc:30:da:e0:65:22:55:18:
e6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:45:FA:5B:FB:2B:13:00:C3:24:53:3F:10:91:01:43:3A:2A:8A:CE
X509v3 Authority Key Identifier:
keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3139362e302f32322d3232203d3e20323632363137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.62.196.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:e1:05:83:5f:52:73:5e:d1:7e:b6:bf:c0:91:1a:1c:0f:0f:
fd:66:f0:49:9f:c3:82:ca:fd:32:2c:2d:b5:c7:bc:4d:26:cc:
5a:9d:76:80:22:85:8f:39:52:be:4d:80:8d:58:a6:4e:8f:92:
98:d5:c5:55:54:0b:48:2e:81:83:9e:75:48:b0:41:5f:d0:55:
4e:3a:9e:1a:42:a4:35:f7:fe:eb:b0:be:34:45:33:dd:c8:be:
d6:22:e6:5d:c1:f9:db:c9:3d:fd:64:e8:16:bb:01:55:ae:c9:
72:69:24:51:21:3a:06:72:12:d9:10:10:71:ad:97:9a:89:e2:
53:52:da:e2:5f:2b:2a:c4:c8:55:b8:b8:68:78:0c:5e:f2:76:
5d:0b:c9:e1:72:0b:41:ab:62:84:e6:6e:65:e1:10:ff:5e:33:
17:0f:14:16:db:a9:39:e2:4c:02:a1:4a:e6:f6:32:76:26:52:
73:6f:64:55:f6:56:b1:fa:96:25:37:46:52:fa:0b:7e:1d:26:
69:07:25:5b:0f:a3:6b:a9:be:7f:d0:f1:99:c8:b7:f5:5d:60:
32:f1:31:e7:cd:61:bb:8b:e1:b0:2c:c6:bf:a7:3d:96:58:fe:
ea:06:d0:90:cc:93:fc:a9:d2:1b:44:e4:b0:b6:f3:3a:df:9e:
ab:d6:7e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:00 2025 by rpki-client