![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137372e38372e3131322e302f32322d3234203d3e20323632333031.roa
File: 3137372e38372e3131322e302f32322d3234203d3e20323632333031.roa (raw, json)
Hash identifier: V8y2VQbLRrfSHcomjn1bu0hw6RnUMEPfaUbbZod78cY=
Subject key identifier: A4:C5:54:F4:C4:B7:57:ED:68:3F:1A:56:CA:CE:8B:C5:11:39:78:E7
Certificate issuer: /CN=20D0C50C62128FF4D2F9FF85B6A5784BF430123F
Certificate serial: 0F679BFE14A09961B6D666219BE203D5A185708F
Authority key identifier: 20:D0:C5:0C:62:12:8F:F4:D2:F9:FF:85:B6:A5:78:4B:F4:30:12:3F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20D0C50C62128FF4D2F9FF85B6A5784BF430123F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137372e38372e3131322e302f32322d3234203d3e20323632333031.roa
Signing time: Tue 12 Mar 2024 12:57:01 +0000
ROA not before: Tue 12 Mar 2024 12:52:01 +0000
ROA not after: Tue 11 Mar 2025 12:57:01 +0000
asID: 262301
IP address blocks: 177.87.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:67:9b:fe:14:a0:99:61:b6:d6:66:21:9b:e2:03:d5:a1:85:70:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20D0C50C62128FF4D2F9FF85B6A5784BF430123F
Validity
Not Before: Mar 12 12:52:01 2024 GMT
Not After : Mar 11 12:57:01 2025 GMT
Subject: CN=A4C554F4C4B757ED683F1A56CACE8BC5113978E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:95:d4:d9:ea:bd:35:a5:c4:85:55:8f:ff:2e:
f3:c9:99:c4:46:3f:fb:b4:3c:37:20:dd:13:e5:00:
46:26:cc:5b:77:8d:80:a0:27:c9:5c:99:a1:30:88:
fc:45:ff:f5:96:e0:01:3b:f6:ea:6f:7c:96:47:0c:
15:03:07:31:21:ca:9b:28:2d:89:01:bc:f1:cf:6c:
8d:85:da:af:28:aa:8a:c3:10:58:53:e8:b6:db:f3:
71:06:2c:f5:0b:db:42:ac:f7:39:bb:a3:6c:36:ae:
bc:e0:02:49:a3:cb:89:a8:09:2a:9a:19:76:23:53:
96:48:cd:08:74:c6:7b:e5:a8:60:c8:02:5f:94:38:
ea:77:e9:82:a2:97:99:2d:f6:4f:04:6e:34:39:26:
8e:09:be:7b:a4:a5:3b:f2:8b:52:ef:61:1a:d3:6a:
07:1c:3d:27:46:88:81:b7:37:f9:85:07:ff:fd:13:
b9:b4:9d:df:f1:07:d9:6f:25:33:af:be:39:a6:be:
44:ff:95:ce:60:7f:d6:8f:48:bf:54:2a:4a:d0:76:
a2:12:43:74:b7:9a:bc:7f:70:a9:db:98:3e:27:e0:
99:27:52:44:f9:ed:b0:ed:d8:d2:d1:cb:54:06:cd:
1a:b9:ad:79:7f:b7:b3:e7:3a:49:44:bc:2f:ea:1f:
ca:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C5:54:F4:C4:B7:57:ED:68:3F:1A:56:CA:CE:8B:C5:11:39:78:E7
X509v3 Authority Key Identifier:
keyid:20:D0:C5:0C:62:12:8F:F4:D2:F9:FF:85:B6:A5:78:4B:F4:30:12:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/20D0C50C62128FF4D2F9FF85B6A5784BF430123F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20D0C50C62128FF4D2F9FF85B6A5784BF430123F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137372e38372e3131322e302f32322d3234203d3e20323632333031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.87.112.0/22
Signature Algorithm: sha256WithRSAEncryption
74:4a:f8:fa:53:d7:79:9e:62:b7:3b:c5:e5:8b:70:f1:b7:0c:
b0:ef:f6:5a:ae:59:aa:95:4a:e0:c7:a9:a0:82:96:c6:4a:ab:
d6:b6:f3:9b:ef:95:96:84:9b:c5:98:34:9e:03:0d:fe:94:64:
80:80:e0:27:46:d6:3a:f6:eb:09:69:70:e8:18:85:1e:c5:e1:
ae:55:b6:4a:79:2e:be:de:4a:53:67:91:20:d4:e3:9b:95:ca:
c5:23:f1:88:44:b3:f2:ba:ef:81:ed:f1:61:27:cd:e4:d1:ff:
60:50:0d:24:29:4f:b3:30:bc:ab:41:0f:d2:71:54:9f:f1:cf:
0f:1d:20:5d:c0:22:be:29:e2:6a:c6:ef:fc:19:5a:4a:4b:21:
6d:63:ca:fb:90:1d:28:4c:ac:c1:07:1c:4e:56:c6:6b:2a:f4:
fa:ca:72:a5:97:bd:c2:95:8e:d9:1a:19:b4:7f:c8:ee:ff:b5:
5f:fc:6d:44:99:c2:b0:af:ba:9b:cf:94:81:a5:77:89:56:42:
73:bd:27:d9:65:3f:22:a4:4a:52:db:e7:65:c5:94:7c:85:8c:
4c:9e:2c:8a:c8:ac:ec:61:57:43:87:da:8f:3f:78:15:47:77:
b9:a9:99:1a:de:01:ac:9b:e2:53:cd:aa:1f:d2:a5:6e:51:03:
15:1b:0e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:25 2025 by rpki-client