![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/0/3137372e3132382e37322e302f32312d3234203d3e203532363433.roa
File: 3137372e3132382e37322e302f32312d3234203d3e203532363433.roa (raw, json)
Hash identifier: cR7uxjkbbIw1pGhFDjmHGgTF9sy+sUyDtcK0uTz+Mmk=
Subject key identifier: EF:AA:64:8D:68:15:58:78:57:FA:AD:5E:D3:E9:85:86:37:B7:87:CE
Certificate issuer: /CN=FC7E691CC9744A29EC6542D60A2C4A90891FEDEE
Certificate serial: 5660682C920FB6BF225F8F701C76C3861D709791
Authority key identifier: FC:7E:69:1C:C9:74:4A:29:EC:65:42:D6:0A:2C:4A:90:89:1F:ED:EE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC7E691CC9744A29EC6542D60A2C4A90891FEDEE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/0/3137372e3132382e37322e302f32312d3234203d3e203532363433.roa
Signing time: Thu 04 Jan 2024 18:01:19 +0000
ROA not before: Thu 04 Jan 2024 17:56:19 +0000
ROA not after: Thu 02 Jan 2025 18:01:19 +0000
asID: 52643
IP address blocks: 177.128.72.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:60:68:2c:92:0f:b6:bf:22:5f:8f:70:1c:76:c3:86:1d:70:97:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC7E691CC9744A29EC6542D60A2C4A90891FEDEE
Validity
Not Before: Jan 4 17:56:19 2024 GMT
Not After : Jan 2 18:01:19 2025 GMT
Subject: CN=EFAA648D6815587857FAAD5ED3E9858637B787CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:58:25:99:bb:e5:72:44:ad:46:95:7a:d0:17:
a0:13:16:c8:b4:9f:82:25:65:c8:01:f3:fd:73:57:
19:ec:75:15:cf:4d:0d:f9:1c:b3:ef:fe:d9:76:90:
a6:20:07:66:d5:72:02:a9:a3:37:d1:20:85:68:e5:
5f:8b:01:48:f7:0d:c3:be:61:48:23:54:f3:c9:b8:
59:8f:bf:5a:0c:58:4e:cb:d6:e4:fc:5a:5a:72:cb:
d8:79:88:a6:4b:3c:eb:47:56:66:48:92:ad:2e:4f:
d2:02:51:d1:68:ac:7e:d8:0f:be:ee:13:04:c0:c5:
75:2c:6c:f3:e2:17:78:ac:64:d7:51:b8:c4:99:ca:
93:8f:17:ce:44:d6:93:88:02:4a:39:ff:31:84:5d:
d2:39:06:93:b5:cd:1a:9f:35:19:8a:55:5d:4e:5a:
3f:0f:99:f8:30:2e:6d:3f:60:3f:88:84:45:21:89:
77:5a:7b:27:cc:51:7a:d3:c2:f6:cf:30:25:ad:f7:
4c:63:8e:24:ea:6b:b7:a2:30:55:a0:c3:de:2a:b7:
0b:c4:95:95:63:b7:26:b1:70:ca:55:0c:6c:cf:34:
b6:05:ce:25:23:f3:1e:65:a2:c5:64:ee:55:6a:75:
86:3a:38:29:b8:2c:5a:a7:cd:7c:e8:c0:d3:7b:d1:
e6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:AA:64:8D:68:15:58:78:57:FA:AD:5E:D3:E9:85:86:37:B7:87:CE
X509v3 Authority Key Identifier:
keyid:FC:7E:69:1C:C9:74:4A:29:EC:65:42:D6:0A:2C:4A:90:89:1F:ED:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/0/FC7E691CC9744A29EC6542D60A2C4A90891FEDEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC7E691CC9744A29EC6542D60A2C4A90891FEDEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/0/3137372e3132382e37322e302f32312d3234203d3e203532363433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.128.72.0/21
Signature Algorithm: sha256WithRSAEncryption
0b:7c:b0:0f:0b:c1:61:79:32:e4:76:54:dd:0f:20:e9:db:1d:
29:61:4a:68:ef:81:f6:37:4e:4d:da:40:63:39:d8:ff:87:72:
a8:0e:07:bc:56:73:61:f5:ca:a7:6f:62:26:29:89:9f:e4:c1:
e9:b4:c0:24:be:d9:8a:e8:ba:e6:5c:96:e0:76:77:05:fd:28:
10:82:f8:a6:8d:9b:57:77:64:ef:e0:d9:1a:53:15:75:61:76:
28:9b:3c:ee:81:05:aa:c5:f6:31:39:9d:4c:b5:fc:11:7b:1c:
6a:87:b7:e0:9e:ef:c2:f8:c6:d1:51:79:48:21:9f:ae:69:c5:
a0:01:c5:cd:26:f2:3c:47:de:b8:f9:c3:9e:2a:94:ff:1c:bc:
37:ed:45:9f:3f:01:a3:a2:b2:66:99:17:2c:f3:22:bc:3c:34:
52:52:12:e6:90:db:0d:2a:84:0f:fd:37:77:0c:41:95:9a:e7:
d3:03:f4:ca:13:0b:69:c3:2e:4b:32:53:61:60:8a:92:11:ce:
b4:01:63:e7:95:8a:e1:d3:05:7e:e6:a6:4d:82:93:4b:03:11:
4c:51:41:00:f1:80:53:34:39:d5:8b:e7:c4:aa:b6:70:df:1a:
a0:b3:e7:65:c5:ac:fb:ae:a4:4e:2c:91:8b:19:6d:df:60:1d:
c3:24:e6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:09 2025 by rpki-client