![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/3136372e3234392e3136332e302f32342d3234203d3e20323637353735.roa
File: 3136372e3234392e3136332e302f32342d3234203d3e20323637353735.roa (raw, json)
Hash identifier: 8laM349jZ0FrUQZ44xAso2mDtbJanN5wKxRnlL2ODZg=
Subject key identifier: 7B:4A:C3:F9:AE:2B:BC:2A:31:E2:40:DA:6F:84:40:7E:80:95:49:F8
Certificate issuer: /CN=8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124
Certificate serial: 0EF4C918C6F5BF8CE74B7D8DA36ED742D55BBE92
Authority key identifier: 8C:01:56:E4:43:A0:D7:BA:2C:6B:CD:C2:68:B9:BB:5D:A4:1F:A1:24
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/3136372e3234392e3136332e302f32342d3234203d3e20323637353735.roa
Signing time: Thu 11 Jan 2024 18:03:47 +0000
ROA not before: Thu 11 Jan 2024 17:58:47 +0000
ROA not after: Thu 09 Jan 2025 18:03:47 +0000
asID: 267575
IP address blocks: 167.249.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:f4:c9:18:c6:f5:bf:8c:e7:4b:7d:8d:a3:6e:d7:42:d5:5b:be:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124
Validity
Not Before: Jan 11 17:58:47 2024 GMT
Not After : Jan 9 18:03:47 2025 GMT
Subject: CN=7B4AC3F9AE2BBC2A31E240DA6F84407E809549F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:82:7a:1d:6c:ac:96:a5:fe:82:6a:47:a8:37:
f5:d0:d7:b6:7e:63:0d:91:2f:7f:af:d7:20:e3:a3:
20:04:e4:bd:0a:ac:56:89:2c:52:b3:f9:ca:02:de:
4c:99:0c:e6:21:3d:da:b3:c6:be:13:61:cc:49:11:
0d:7a:2d:b3:5e:c9:b3:4b:ba:da:ef:db:88:ba:05:
7e:b9:19:ff:08:10:f5:63:8e:75:33:3a:38:3e:7f:
98:73:ab:09:e2:c2:2e:64:66:04:0b:68:b2:2c:25:
eb:a3:4d:a2:51:cc:78:3c:93:ea:07:9c:f4:16:2c:
f2:90:13:e3:29:b5:d2:d4:1c:25:cf:11:79:0d:47:
6a:72:0f:1f:7d:51:f0:f7:a1:49:56:b5:81:af:46:
f9:05:35:cf:3c:8b:d5:67:81:c7:27:a6:0b:6f:f2:
ed:17:e2:1e:8e:af:22:f0:fe:25:98:b2:22:93:c7:
44:9d:36:f8:55:98:84:55:b0:44:b5:61:1b:ac:09:
93:4f:f8:76:72:ef:15:92:fb:62:b2:d1:a8:9a:6c:
47:ff:e9:f4:bf:e5:e2:fa:77:82:08:41:0e:e5:c6:
36:0a:9e:03:11:8d:26:72:fd:aa:db:0d:4c:f6:ab:
62:c6:ed:b3:f6:3e:78:9f:c5:77:5e:e1:3c:1f:bc:
c6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4A:C3:F9:AE:2B:BC:2A:31:E2:40:DA:6F:84:40:7E:80:95:49:F8
X509v3 Authority Key Identifier:
keyid:8C:01:56:E4:43:A0:D7:BA:2C:6B:CD:C2:68:B9:BB:5D:A4:1F:A1:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/3136372e3234392e3136332e302f32342d3234203d3e20323637353735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.249.163.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:af:14:e3:b8:74:c4:9f:de:cc:97:65:a2:bd:ba:6b:ad:16:
4e:87:80:23:f9:c1:7d:35:3a:e1:3e:26:20:d1:17:f4:06:fe:
5e:fa:5a:a8:6b:c1:bd:f5:0d:47:6a:20:b8:95:33:f4:84:83:
42:dd:ca:69:82:f4:65:08:f5:40:b2:8b:53:60:6f:40:fa:ba:
22:5c:7f:77:48:50:62:c2:2d:50:44:b5:9c:9f:dc:84:3d:57:
3c:5b:3a:61:7f:56:6b:d6:e0:42:72:e5:20:c2:cd:1a:a5:47:
35:ca:c5:f4:db:73:38:b6:a9:41:93:4d:99:c6:56:02:17:c8:
a9:16:86:be:ab:4e:84:69:de:20:18:9b:a7:95:ad:58:ed:a4:
a0:a1:a6:d1:dd:70:99:de:f2:da:c8:f1:40:8e:18:3e:2b:1d:
80:04:4e:0d:9e:5e:df:e5:87:ef:75:b2:29:e7:8c:5b:5e:e8:
bf:a8:57:bb:7f:f4:f1:da:21:b4:c4:b0:87:1b:0c:22:4a:bd:
60:38:9d:c7:d7:7e:25:fa:51:3c:a9:ba:85:fc:45:26:7b:26:
f9:f3:cc:39:7e:c1:0b:b5:96:7a:74:18:f1:c4:7a:85:76:ad:
6f:82:8c:1a:3e:32:d6:c7:1c:bf:b2:cf:84:b0:25:a9:92:91:
f2:e1:29:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org