![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EstCeSggA2m3NQmiYYdxS1XmB6mMaWtKasrpiTcx286A/0/3134332e3230382e3130382e302f32322d3234203d3e20323635313237.roa
File: 3134332e3230382e3130382e302f32322d3234203d3e20323635313237.roa (raw, json)
Hash identifier: z91CKfhD7CiOfIiJR6J6AMJmFzXJb+dnAxCOwXXuARQ=
Subject key identifier: FD:9C:C8:C9:AF:A7:F8:8B:CE:F2:D2:AC:89:98:10:06:FE:E2:E2:9B
Certificate issuer: /CN=9DBE1BBDECAC236DCAEDC2B8681988894070DBE9
Certificate serial: 30D52C41DA04328D7555E5052115150C161EE87A
Authority key identifier: 9D:BE:1B:BD:EC:AC:23:6D:CA:ED:C2:B8:68:19:88:89:40:70:DB:E9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DBE1BBDECAC236DCAEDC2B8681988894070DBE9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EstCeSggA2m3NQmiYYdxS1XmB6mMaWtKasrpiTcx286A/0/3134332e3230382e3130382e302f32322d3234203d3e20323635313237.roa
Signing time: Fri 06 Oct 2023 13:48:40 +0000
ROA not before: Fri 06 Oct 2023 13:43:40 +0000
ROA not after: Fri 04 Oct 2024 13:48:40 +0000
asID: 265127
IP address blocks: 143.208.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:d5:2c:41:da:04:32:8d:75:55:e5:05:21:15:15:0c:16:1e:e8:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DBE1BBDECAC236DCAEDC2B8681988894070DBE9
Validity
Not Before: Oct 6 13:43:40 2023 GMT
Not After : Oct 4 13:48:40 2024 GMT
Subject: CN=FD9CC8C9AFA7F88BCEF2D2AC89981006FEE2E29B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:eb:ef:d1:63:a7:c5:d7:cd:8e:b4:25:e0:87:
18:5f:bb:cd:5d:7f:58:ed:e1:fd:e1:65:2d:ff:56:
b5:8e:e8:de:bc:31:bc:9b:f6:61:18:25:c5:f3:ef:
a7:47:8c:77:98:9e:3f:67:d6:96:80:a3:7a:0b:07:
1d:3f:5f:60:65:86:f5:f9:26:24:75:0f:1e:a0:8b:
e4:86:a2:2c:8a:16:c0:87:86:74:6e:e6:50:dc:50:
c6:f3:66:45:83:02:7d:13:79:e6:b0:fd:c4:0d:aa:
62:fd:8e:5a:6f:d6:73:f4:cd:f6:30:ca:fc:4e:eb:
42:25:db:14:89:e5:60:9e:ff:c1:d1:ee:d0:83:18:
87:e4:5c:3a:c3:aa:37:85:0f:7e:30:8c:75:75:b2:
2c:cf:3a:1f:e3:a5:cd:b0:6e:fc:db:83:76:e7:3f:
c4:cf:61:0e:18:49:3b:d0:52:78:fd:1f:7b:d4:67:
5e:bf:3a:08:b8:33:bb:ce:5d:cf:c0:56:92:10:fb:
cc:bc:03:b4:1c:ea:76:cb:70:f2:1a:ea:61:40:82:
c5:79:43:88:95:42:1a:46:e7:99:6f:ce:5d:9b:8b:
e5:31:2b:e1:75:8e:1f:d5:56:b3:c2:80:92:0a:a1:
83:6a:7c:e7:1d:9d:69:84:68:2b:8a:8c:0d:b2:d9:
58:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9C:C8:C9:AF:A7:F8:8B:CE:F2:D2:AC:89:98:10:06:FE:E2:E2:9B
X509v3 Authority Key Identifier:
keyid:9D:BE:1B:BD:EC:AC:23:6D:CA:ED:C2:B8:68:19:88:89:40:70:DB:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EstCeSggA2m3NQmiYYdxS1XmB6mMaWtKasrpiTcx286A/0/9DBE1BBDECAC236DCAEDC2B8681988894070DBE9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DBE1BBDECAC236DCAEDC2B8681988894070DBE9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EstCeSggA2m3NQmiYYdxS1XmB6mMaWtKasrpiTcx286A/0/3134332e3230382e3130382e302f32322d3234203d3e20323635313237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.208.108.0/22
Signature Algorithm: sha256WithRSAEncryption
ee:ed:6a:de:c7:c0:42:44:a5:c3:ff:18:a0:8b:76:0b:2d:0e:
d8:12:5c:50:ee:b2:a5:3a:ff:48:ab:74:1f:13:35:6b:2c:4d:
7e:c5:df:80:0b:0b:28:09:23:e1:93:a4:c6:8f:df:33:e5:a4:
18:9c:57:8c:53:0b:a9:a5:77:7d:cf:60:e3:d5:cd:81:1e:49:
e6:d7:62:e7:8d:b2:a9:23:0d:b1:17:d6:26:d7:e9:61:60:95:
67:7f:58:2a:84:9e:f1:79:6c:c8:8f:4a:1a:d6:9b:e8:13:25:
42:86:b2:84:a4:46:5a:4c:2e:91:8c:f0:4c:1f:18:19:33:7f:
3c:13:2b:12:8a:e2:d9:3d:cb:cb:2d:5f:9e:75:a9:8c:28:eb:
c9:c7:5a:bc:1c:bc:4b:da:06:d4:49:fd:a0:08:bf:63:07:10:
be:2a:88:32:ab:57:a1:0c:ba:4d:4c:2e:64:ae:4f:79:d4:78:
8d:c1:6c:ad:14:0f:89:8a:b9:b1:38:6d:e5:eb:03:cb:10:42:
a8:ca:40:ac:c3:ac:8b:10:aa:80:7a:5f:64:f5:ec:c4:d8:e1:
ff:02:5c:c8:cc:18:a6:24:58:52:81:34:5a:8b:09:03:d6:9c:
ed:49:50:fa:7c:c5:bc:7f:d6:8f:33:02:98:c3:90:2b:2c:55:
aa:d6:f4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:44:40 2025 by rpki-client