![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3234382e302f32322d3232203d3e20323639333539.roa
File: 3136382e3139342e3234382e302f32322d3232203d3e20323639333539.roa (raw, json)
Hash identifier: RgDCyyORal19PDi9tLy6N/7yDIqKrOUKUAMAWHDlBWI=
Subject key identifier: A7:6C:69:59:82:74:96:96:A1:0C:AA:44:DD:A6:65:10:02:3D:B5:31
Certificate issuer: /CN=64E08193273EEA26A89B833428798A9E6FFD296C
Certificate serial: 0CA2AF51429380E33B56AF712EBAFD73664DE2A0
Authority key identifier: 64:E0:81:93:27:3E:EA:26:A8:9B:83:34:28:79:8A:9E:6F:FD:29:6C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64E08193273EEA26A89B833428798A9E6FFD296C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3234382e302f32322d3232203d3e20323639333539.roa
Signing time: Mon 26 Aug 2024 19:33:07 +0000
ROA not before: Mon 26 Aug 2024 19:28:07 +0000
ROA not after: Mon 25 Aug 2025 19:33:07 +0000
asID: 269359
IP address blocks: 168.194.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:a2:af:51:42:93:80:e3:3b:56:af:71:2e:ba:fd:73:66:4d:e2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64E08193273EEA26A89B833428798A9E6FFD296C
Validity
Not Before: Aug 26 19:28:07 2024 GMT
Not After : Aug 25 19:33:07 2025 GMT
Subject: CN=A76C695982749696A10CAA44DDA66510023DB531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1d:96:40:1b:13:47:ec:a1:1a:6e:c9:4e:5e:
17:bc:f3:16:27:24:01:9f:0b:73:33:d1:06:65:4f:
78:40:f0:f6:b1:9f:77:1d:c3:09:d6:db:e1:80:a3:
e2:d7:4b:79:32:9b:51:0b:c8:8c:b0:02:6d:96:36:
df:03:d2:31:9f:b7:ed:64:3f:e1:ca:55:a0:ce:a9:
97:86:a4:06:40:18:68:1c:28:38:10:ca:f3:33:73:
e7:94:e5:5f:2e:f3:e4:88:0f:39:b7:af:1b:3a:0c:
11:2b:dc:39:bd:01:3d:b5:87:df:4f:53:c1:a2:bf:
73:cb:ff:a0:e1:45:8a:ad:83:87:9f:86:33:ea:83:
32:5f:c7:07:c9:9f:3e:9e:b6:7d:1d:76:87:52:0f:
b5:3d:52:eb:2b:12:26:02:f4:3d:61:76:1b:02:e7:
77:75:b6:ed:13:db:01:5c:aa:43:cf:db:fa:4d:33:
f1:53:fe:7b:7b:52:82:df:6a:ff:9a:0d:0d:d5:e3:
17:9c:dd:cb:fe:93:e4:7c:1b:dc:f0:79:23:fc:38:
0e:a8:dd:c0:1a:f0:b8:16:ec:86:d5:2c:c7:ef:be:
26:7b:94:e5:2c:8f:3c:e6:84:d3:af:14:dc:b3:33:
06:a5:f8:0d:8a:f3:95:7b:26:cd:19:b8:ee:11:79:
07:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6C:69:59:82:74:96:96:A1:0C:AA:44:DD:A6:65:10:02:3D:B5:31
X509v3 Authority Key Identifier:
keyid:64:E0:81:93:27:3E:EA:26:A8:9B:83:34:28:79:8A:9E:6F:FD:29:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/64E08193273EEA26A89B833428798A9E6FFD296C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64E08193273EEA26A89B833428798A9E6FFD296C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3234382e302f32322d3232203d3e20323639333539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.248.0/22
Signature Algorithm: sha256WithRSAEncryption
99:33:5d:39:41:a7:0a:96:82:ae:c9:44:83:49:00:28:54:0d:
8d:c7:6f:28:5c:b7:8b:09:2b:50:be:0e:35:7b:d4:e0:92:2b:
6e:ca:62:0c:bb:15:06:ce:ce:36:2c:bf:1f:54:12:d5:c6:35:
28:c2:df:5d:5f:8f:35:63:5d:09:74:0d:fd:a1:3f:eb:c1:24:
b9:cd:37:ae:42:85:2c:eb:f8:ed:c8:69:aa:9a:3c:d5:a2:2b:
60:0d:a0:a6:90:67:fc:30:c4:2f:ab:f2:c8:eb:a9:7e:03:35:
9d:3e:38:e9:54:9b:44:b0:e5:72:51:ce:e8:fe:0f:50:b9:08:
46:bf:e7:b6:9e:78:2b:30:78:c2:4b:e6:d3:60:4b:94:26:04:
3c:c7:c1:c1:27:c3:5b:35:3b:a2:ca:3b:cc:24:64:ed:2c:54:
48:67:0c:55:3a:29:2c:f0:b7:c7:c5:34:a6:2c:0c:d5:3c:62:
1e:15:93:e0:03:54:48:7a:e0:f0:1a:8e:51:d5:30:5e:93:a5:
e1:dc:d9:55:b6:f7:d7:2f:77:73:59:df:63:59:9d:74:5c:86:
33:89:a9:33:6a:96:05:1a:86:21:92:1e:b0:ab:16:1c:72:81:
cf:ed:dd:be:3b:51:bc:11:92:5c:de:11:69:c2:5c:ab:ea:b7:
53:ee:e6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:30 2025 by rpki-client