![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/3133312e3235352e3234352e302f32342d3234203d3e20323632393632.roa
File: 3133312e3235352e3234352e302f32342d3234203d3e20323632393632.roa (raw, json)
Hash identifier: u2OlYFDfgNvWYZnyMzWX85PBxOXBO/cwXc33NrYkTs4=
Subject key identifier: C1:32:ED:3E:22:F7:5C:85:0A:04:40:32:2B:C7:E1:6F:70:50:BA:8E
Certificate issuer: /CN=391CEA542A70D11AAAF4D9ACC5C14A2237B8C040
Certificate serial: 1E8FF009468F5FD1A7CC64CE8E206ED3D4FEBF3E
Authority key identifier: 39:1C:EA:54:2A:70:D1:1A:AA:F4:D9:AC:C5:C1:4A:22:37:B8:C0:40
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/391CEA542A70D11AAAF4D9ACC5C14A2237B8C040.cer
Subject info access: rsync://rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/3133312e3235352e3234352e302f32342d3234203d3e20323632393632.roa
Signing time: Fri 13 Oct 2023 17:09:18 +0000
ROA not before: Fri 13 Oct 2023 17:04:18 +0000
ROA not after: Fri 11 Oct 2024 17:09:18 +0000
asID: 262962
IP address blocks: 131.255.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:8f:f0:09:46:8f:5f:d1:a7:cc:64:ce:8e:20:6e:d3:d4:fe:bf:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391CEA542A70D11AAAF4D9ACC5C14A2237B8C040
Validity
Not Before: Oct 13 17:04:18 2023 GMT
Not After : Oct 11 17:09:18 2024 GMT
Subject: CN=C132ED3E22F75C850A0440322BC7E16F7050BA8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b3:61:a2:ad:cd:b2:ac:57:44:8d:a4:b0:b9:
8a:66:9f:bd:98:97:fb:d8:bc:3f:24:23:56:d9:bd:
7a:88:86:91:68:2b:89:08:a5:cc:27:9d:22:21:60:
cb:13:63:72:da:d6:08:24:9d:a1:a1:45:39:d9:60:
2c:ba:1f:de:8f:ba:09:68:38:14:36:fa:1a:06:ec:
ea:ee:ea:e7:7e:2e:81:92:c9:76:c0:ac:22:e4:91:
56:94:de:0e:f6:8b:f1:0c:a4:e2:6d:41:de:b9:63:
a5:2c:1e:bf:84:e8:b7:0b:da:df:88:8a:57:46:46:
1a:7a:a1:c2:3d:f4:44:a8:f2:2b:dc:e6:96:e6:fd:
06:86:ec:c0:e3:47:ca:3e:27:64:19:1c:b9:2d:43:
9a:46:83:86:bf:1a:5c:d2:d2:a9:df:f5:ec:1b:12:
0c:d3:96:76:c5:9a:45:e5:c2:91:4f:70:38:0e:f1:
ed:a4:e6:de:d4:9b:55:96:79:a2:29:d0:2d:1c:b3:
85:e8:a2:05:5a:3b:b3:98:aa:22:1b:95:17:86:7f:
0e:51:d2:81:65:a6:c8:9f:a6:7e:bc:f1:7f:f9:8b:
25:98:cf:7c:0d:50:eb:17:5c:f9:69:ba:52:b1:8e:
a3:b8:09:ec:21:09:35:29:de:02:82:8d:b2:54:63:
7b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:32:ED:3E:22:F7:5C:85:0A:04:40:32:2B:C7:E1:6F:70:50:BA:8E
X509v3 Authority Key Identifier:
keyid:39:1C:EA:54:2A:70:D1:1A:AA:F4:D9:AC:C5:C1:4A:22:37:B8:C0:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/391CEA542A70D11AAAF4D9ACC5C14A2237B8C040.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/391CEA542A70D11AAAF4D9ACC5C14A2237B8C040.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/3133312e3235352e3234352e302f32342d3234203d3e20323632393632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.255.245.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:44:4b:39:f2:d6:ae:bc:60:e3:7a:0c:d1:0f:e7:e1:c9:2a:
8a:26:e2:7b:fe:b3:04:b6:6e:c1:b2:bb:fc:7a:ab:74:49:8a:
9b:d7:21:83:1b:f6:f0:3d:95:ba:b3:6a:bf:db:69:fd:42:1b:
f3:82:7f:f0:d6:6a:fd:71:fe:9a:ba:77:90:65:bd:4f:17:15:
4d:b5:99:2f:96:e9:0b:dc:f9:ee:62:9e:d8:e2:a2:6f:0b:fe:
73:32:c5:c0:f8:94:db:67:69:6b:32:f0:60:7b:2b:83:f4:cf:
8a:c8:af:8b:8b:94:24:44:45:09:6d:a2:a7:2f:db:dc:47:e1:
fc:a6:4f:d8:4b:e7:87:b7:a2:ff:04:19:28:61:59:c7:65:a2:
9b:94:f2:4b:fb:82:e1:e5:be:30:2f:f2:3d:24:c1:16:c4:35:
36:47:0f:5e:4c:12:e2:6a:57:9b:8e:90:a5:43:2d:c9:f5:35:
e0:98:ba:6a:8b:24:85:22:da:f5:e1:32:50:3c:6f:b9:7d:21:
52:e5:a7:3d:d1:2e:85:6e:fd:3c:1b:76:e0:ce:76:9b:9e:c7:
22:86:e1:cb:fe:59:ba:6e:0f:c9:79:9e:3d:e1:14:0f:47:70:
53:21:0e:68:14:6e:72:e6:79:ee:57:d4:c9:6b:d5:ec:91:9b:
5f:16:2a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:19:56 2025 by rpki-client