![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DmmAdWJ8rt1AjGE2ApujeZXDSLtgZ4bKAJemnmd22Miu/0/3230302e392e3130342e302f32332d3233203d3e20323731303531.roa
File: 3230302e392e3130342e302f32332d3233203d3e20323731303531.roa (raw, json)
Hash identifier: LteS5edlxDTmkVigIfghy94RK5ynisxbG4w9HWgTq5c=
Subject key identifier: D0:2F:38:F2:69:0C:46:29:AF:AE:CF:B9:4B:2B:46:E9:D5:D6:9A:13
Certificate issuer: /CN=042A3E7DEAD7C0AFE927D6C84ADB69D575419B27
Certificate serial: 345E6D9974308F42413752A76ECC28EA976E9748
Authority key identifier: 04:2A:3E:7D:EA:D7:C0:AF:E9:27:D6:C8:4A:DB:69:D5:75:41:9B:27
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/042A3E7DEAD7C0AFE927D6C84ADB69D575419B27.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DmmAdWJ8rt1AjGE2ApujeZXDSLtgZ4bKAJemnmd22Miu/0/3230302e392e3130342e302f32332d3233203d3e20323731303531.roa
Signing time: Wed 20 Dec 2023 12:47:27 +0000
ROA not before: Wed 20 Dec 2023 12:42:27 +0000
ROA not after: Wed 18 Dec 2024 12:47:27 +0000
asID: 271051
IP address blocks: 200.9.104.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:5e:6d:99:74:30:8f:42:41:37:52:a7:6e:cc:28:ea:97:6e:97:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=042A3E7DEAD7C0AFE927D6C84ADB69D575419B27
Validity
Not Before: Dec 20 12:42:27 2023 GMT
Not After : Dec 18 12:47:27 2024 GMT
Subject: CN=D02F38F2690C4629AFAECFB94B2B46E9D5D69A13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:37:96:4e:0d:42:b9:99:fb:7e:cd:82:32:69:
01:55:cc:eb:66:b2:a4:f3:70:e1:eb:14:62:10:63:
11:ea:df:fc:6c:d8:30:33:ea:21:27:92:cf:19:13:
e7:b0:a5:c1:8d:f0:4e:61:9c:75:5c:4e:af:10:2d:
af:f8:83:04:f9:68:9d:27:1b:1a:84:49:2e:1a:74:
19:7e:7e:44:15:2c:90:df:b3:87:29:02:e7:c1:d4:
76:0f:2e:b4:94:bc:62:61:d7:b7:bf:b6:54:79:42:
02:06:8a:c1:30:66:1f:db:02:e0:c5:a7:8f:a8:23:
96:39:c1:8a:62:1b:8f:0b:5b:60:8d:94:15:d8:f7:
90:d0:19:57:58:a1:86:e9:e3:91:da:54:7d:79:84:
d8:d1:b3:c5:fb:0e:64:69:71:f8:d3:c2:cc:a7:2f:
af:47:32:93:95:02:43:a9:d0:30:c7:d0:b5:05:97:
d5:2b:1a:06:b1:67:22:49:c1:64:f1:53:b9:9d:72:
2e:92:42:06:e3:91:13:43:8e:4d:23:8f:ea:da:a1:
02:5c:ac:58:d0:31:dd:53:30:2e:df:ad:d4:80:07:
04:06:68:8c:92:42:60:de:73:3f:3d:60:36:ca:42:
6e:36:9c:b2:ee:83:a5:c0:9a:c8:35:b7:2d:22:4c:
e6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2F:38:F2:69:0C:46:29:AF:AE:CF:B9:4B:2B:46:E9:D5:D6:9A:13
X509v3 Authority Key Identifier:
keyid:04:2A:3E:7D:EA:D7:C0:AF:E9:27:D6:C8:4A:DB:69:D5:75:41:9B:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DmmAdWJ8rt1AjGE2ApujeZXDSLtgZ4bKAJemnmd22Miu/0/042A3E7DEAD7C0AFE927D6C84ADB69D575419B27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/042A3E7DEAD7C0AFE927D6C84ADB69D575419B27.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmmAdWJ8rt1AjGE2ApujeZXDSLtgZ4bKAJemnmd22Miu/0/3230302e392e3130342e302f32332d3233203d3e20323731303531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.9.104.0/23
Signature Algorithm: sha256WithRSAEncryption
22:83:c9:fe:cc:70:ee:4f:63:d8:d7:31:0f:ba:a3:b8:59:75:
ae:07:05:be:e6:95:84:51:b2:66:e5:d4:53:54:be:c5:6d:fc:
c5:87:d4:3f:3f:05:7d:0b:72:b0:19:dd:df:30:a6:92:68:bc:
b7:67:1a:f3:8c:c7:52:d0:6f:e6:b6:45:7b:3f:ea:6a:be:74:
e2:37:88:44:c6:a3:06:6c:15:62:64:63:19:90:83:c3:54:6b:
9f:5b:9f:00:67:6a:3b:2c:f1:91:d5:5c:df:8d:a8:f1:39:86:
a2:62:fc:9d:76:88:28:0b:77:ab:6b:f0:7c:ff:4b:7e:9d:13:
7c:84:db:ed:2d:e4:38:9d:7b:91:9a:6d:33:71:bd:03:52:b4:
c0:27:62:1e:a6:34:f0:ea:c3:12:f2:97:88:25:d2:c9:0d:34:
ba:cd:f9:15:23:be:e1:e8:ae:42:ec:78:44:2a:b3:5a:e2:6c:
5f:31:06:9c:3a:80:48:73:f6:3c:3c:a5:08:ab:41:d3:ff:f0:
b8:e4:33:7e:b5:4c:98:1d:d0:ba:af:cf:3f:24:55:08:63:85:
0f:84:f0:e0:2c:4f:bf:e4:6c:c7:f7:9e:19:37:00:b6:e0:6c:
d8:b2:a0:11:fb:d2:87:c4:16:16:8d:16:e3:e4:bd:18:49:ff:
33:7a:15:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:35:13 2025 by rpki-client