![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/0/3134332e302e3139362e302f32322d3232203d3e20323634303130.roa
File: 3134332e302e3139362e302f32322d3232203d3e20323634303130.roa (raw, json)
Hash identifier: h0HghlsgSIp4Em1x81cI6pmPg19ibOtGcH4X0XBdu5U=
Subject key identifier: 8D:59:88:EA:EE:11:D2:0C:21:68:68:9A:9D:D6:E0:43:B3:3A:0A:34
Certificate issuer: /CN=CDAE8BA612485E3850DDE34806E11BB871C0D667
Certificate serial: 795594B089607DF2653111BB0299531A1E9D7182
Authority key identifier: CD:AE:8B:A6:12:48:5E:38:50:DD:E3:48:06:E1:1B:B8:71:C0:D6:67
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDAE8BA612485E3850DDE34806E11BB871C0D667.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/0/3134332e302e3139362e302f32322d3232203d3e20323634303130.roa
Signing time: Wed 10 Jan 2024 20:34:15 +0000
ROA not before: Wed 10 Jan 2024 20:29:15 +0000
ROA not after: Wed 08 Jan 2025 20:34:15 +0000
asID: 264010
IP address blocks: 143.0.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:55:94:b0:89:60:7d:f2:65:31:11:bb:02:99:53:1a:1e:9d:71:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDAE8BA612485E3850DDE34806E11BB871C0D667
Validity
Not Before: Jan 10 20:29:15 2024 GMT
Not After : Jan 8 20:34:15 2025 GMT
Subject: CN=8D5988EAEE11D20C2168689A9DD6E043B33A0A34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4a:7d:94:54:c8:82:d6:08:f9:5f:41:fa:e8:
4b:fe:d7:f9:86:2a:9c:dc:ce:61:7a:5c:b0:4b:08:
9c:a2:5f:d9:db:ab:51:e3:5f:32:62:f3:9f:3e:bb:
2a:62:4e:69:5e:fb:65:bc:0a:40:8f:fe:af:d3:2f:
c9:64:ed:f1:9e:f1:a8:9f:53:08:ed:82:cb:ea:90:
22:a3:c4:64:d8:22:01:e3:a9:71:08:93:1f:79:ce:
3e:fd:54:cf:34:b9:42:ff:96:4b:81:f9:57:eb:ae:
4e:3f:57:73:9b:9b:3c:cf:83:70:ca:c3:84:32:c5:
1b:16:0d:a1:dc:54:62:f9:07:c9:fc:4a:50:f8:ff:
0a:91:a4:e6:a8:0e:7c:f0:1c:54:d0:6e:ea:fb:69:
22:e8:56:a0:51:c6:39:dc:a3:93:78:7e:05:6c:f0:
aa:c9:24:65:13:72:c4:a0:97:e5:4a:9a:a3:41:0e:
06:07:8d:dd:e9:53:65:82:cb:b0:23:aa:2d:a7:21:
4b:53:1a:0e:66:f3:cc:9f:01:11:1a:57:79:11:c6:
3a:51:b3:75:1f:2e:3f:4c:e6:21:f0:c5:e4:83:c4:
7c:c3:ad:72:d1:f9:e8:ec:ab:15:45:db:3d:de:fa:
00:2c:dd:5e:23:1a:45:de:bf:c1:c1:5c:e0:e2:05:
13:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:59:88:EA:EE:11:D2:0C:21:68:68:9A:9D:D6:E0:43:B3:3A:0A:34
X509v3 Authority Key Identifier:
keyid:CD:AE:8B:A6:12:48:5E:38:50:DD:E3:48:06:E1:1B:B8:71:C0:D6:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/0/CDAE8BA612485E3850DDE34806E11BB871C0D667.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDAE8BA612485E3850DDE34806E11BB871C0D667.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/0/3134332e302e3139362e302f32322d3232203d3e20323634303130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.0.196.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:88:53:67:95:26:71:a1:3f:f0:a4:51:f6:f7:03:b1:4d:41:
06:89:6a:f5:c8:0d:d9:ad:0f:b8:28:b6:01:06:f3:3f:1d:a8:
d1:96:42:20:cd:1d:37:81:98:cf:e2:31:67:80:c3:1e:80:24:
29:6f:c4:a8:05:dc:45:fd:04:0d:09:4b:f6:05:bc:69:5f:b6:
55:1d:8b:76:cc:6e:fc:52:14:a2:df:28:53:59:f9:9d:a6:1c:
0f:f1:90:07:f5:8c:20:7e:ae:0b:a1:87:ef:91:56:d2:f1:73:
96:4c:ec:56:58:dc:29:3c:35:80:02:b6:f5:41:01:52:f6:2a:
d6:ba:da:8a:ce:af:11:8a:23:66:1a:e2:96:45:f5:74:b3:2b:
bc:ea:d1:c5:26:65:a0:a9:1d:1a:f4:ff:be:dc:f2:db:65:89:
85:42:23:08:29:a5:1a:47:c8:66:32:73:2d:b0:c2:3b:03:42:
e2:2b:86:8d:ad:1f:a5:66:b2:b2:41:db:4b:6c:0a:c6:4e:21:
fd:7b:0a:77:71:e0:90:ec:8b:75:a3:7f:6f:8e:0f:49:4d:d1:
98:a4:70:16:9e:cc:8f:36:4d:ce:df:4e:52:48:eb:17:d6:08:
4d:7e:d8:84:ce:d4:85:2d:be:cc:0f:93:c0:08:86:81:4a:7f:
92:ea:91:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:57:51 2025 by rpki-client