![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/0/3139312e3234332e33362e302f32322d3232203d3e20323633343932.roa
File: 3139312e3234332e33362e302f32322d3232203d3e20323633343932.roa (raw, json)
Hash identifier: frYiCcxQyyqFUa93XSaPfK976cDaOgbfQsh1alWsq7w=
Subject key identifier: EC:42:15:3B:D0:AF:80:6E:70:54:86:BD:65:50:0F:2D:EE:DF:2E:74
Certificate issuer: /CN=EC63F9E2F3CC53B3BB0BF4E2B9F1A0C1B014E52E
Certificate serial: 33435ED222F94A5AD66D8E4BB952780942CC637C
Authority key identifier: EC:63:F9:E2:F3:CC:53:B3:BB:0B:F4:E2:B9:F1:A0:C1:B0:14:E5:2E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC63F9E2F3CC53B3BB0BF4E2B9F1A0C1B014E52E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/0/3139312e3234332e33362e302f32322d3232203d3e20323633343932.roa
Signing time: Tue 16 Jan 2024 04:00:00 +0000
ROA not before: Tue 16 Jan 2024 03:55:00 +0000
ROA not after: Tue 14 Jan 2025 04:00:00 +0000
asID: 263492
IP address blocks: 191.243.36.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:43:5e:d2:22:f9:4a:5a:d6:6d:8e:4b:b9:52:78:09:42:cc:63:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC63F9E2F3CC53B3BB0BF4E2B9F1A0C1B014E52E
Validity
Not Before: Jan 16 03:55:00 2024 GMT
Not After : Jan 14 04:00:00 2025 GMT
Subject: CN=EC42153BD0AF806E705486BD65500F2DEEDF2E74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e7:fa:61:ed:6b:61:d3:5a:a6:6b:28:c7:3e:
51:ea:35:27:c2:fc:51:2b:f8:3f:50:2a:f1:1d:22:
b6:00:79:b3:74:62:1c:f9:13:ad:e4:95:d0:9d:0e:
21:04:0a:18:66:75:66:e3:ff:5d:62:25:fb:5f:9c:
8d:0c:e5:ea:5a:c0:4b:5f:96:65:d9:3a:31:03:2f:
f5:ac:c0:51:d4:8f:91:c5:6c:fe:8e:12:e4:84:63:
5a:05:dd:47:f3:70:64:63:0c:9b:67:c2:fb:73:db:
09:8f:96:44:df:c7:17:e2:69:47:9f:ae:17:37:e2:
23:ae:87:66:b4:08:04:4a:94:ab:02:45:a9:0c:a5:
0b:14:2e:58:90:0e:e7:d2:ac:23:bb:c7:b2:bf:6c:
3b:3f:79:b3:a2:14:a4:71:99:f0:77:4b:19:18:76:
37:9b:c1:d3:8d:a8:a0:d7:ab:35:19:46:f7:55:74:
1f:55:1e:ff:a2:68:88:bc:83:4b:76:b2:c2:34:e7:
21:c1:3a:25:b5:50:bb:b7:70:a8:55:1f:9f:44:68:
51:f7:7c:00:8a:e7:9f:d2:3b:34:d5:4f:e3:b6:bb:
b4:fc:f8:42:54:fd:a2:df:f1:57:63:d5:d9:4b:54:
b6:0f:a1:9e:52:0d:02:54:43:a6:ff:39:e4:73:1a:
04:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:42:15:3B:D0:AF:80:6E:70:54:86:BD:65:50:0F:2D:EE:DF:2E:74
X509v3 Authority Key Identifier:
keyid:EC:63:F9:E2:F3:CC:53:B3:BB:0B:F4:E2:B9:F1:A0:C1:B0:14:E5:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/0/EC63F9E2F3CC53B3BB0BF4E2B9F1A0C1B014E52E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC63F9E2F3CC53B3BB0BF4E2B9F1A0C1B014E52E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/0/3139312e3234332e33362e302f32322d3232203d3e20323633343932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.243.36.0/22
Signature Algorithm: sha256WithRSAEncryption
50:a8:fa:64:95:72:a6:12:6c:51:f3:a9:b6:10:2c:4d:88:6d:
0f:da:bb:de:34:2c:18:bd:e7:17:c6:1c:6d:65:aa:3a:5b:4f:
ca:e5:67:84:91:a2:78:e9:4d:11:2c:fa:40:a3:5d:48:52:e3:
1e:98:4e:89:e8:79:92:a0:1a:e0:9c:e0:36:01:99:4b:00:71:
b8:04:d3:40:8a:35:c6:82:61:3a:ca:7e:49:d7:92:0a:58:35:
c1:ee:f3:98:f2:eb:f9:27:32:30:da:06:7d:05:7a:55:7c:0e:
49:8b:dc:06:8c:f5:e7:08:8f:d2:ad:14:f2:d1:c5:36:4c:47:
96:ba:32:aa:a6:0e:05:9b:bf:4a:99:5f:87:b7:a4:f2:43:e2:
6b:09:ee:53:d9:9b:57:1e:81:14:72:08:9b:bb:8e:ec:e9:a6:
38:c7:76:fc:ad:34:17:3d:66:ba:38:72:98:18:3d:3b:d6:1a:
99:b6:21:78:46:e7:50:43:80:f7:3f:13:f2:0d:1c:3e:8e:61:
a0:a5:64:10:37:bb:9f:6b:20:fc:23:6f:a4:32:05:38:8e:52:
50:98:8e:f6:d4:2e:b8:ff:49:2e:2f:a7:0a:59:27:86:bf:55:
60:05:49:56:4a:e0:63:b3:e6:e0:e1:93:e6:b2:84:d0:f2:64:
31:c9:7d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:50 2025 by rpki-client