![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3234382e302f32322d3234203d3e20323639333539.roa
File: 3136382e3139342e3234382e302f32322d3234203d3e20323639333539.roa (raw, json)
Hash identifier: ja/rdqD9uE8La01E9JjjLZyiXkDuoDasEJxX2nMPhEU=
Subject key identifier: 0C:F6:D6:21:04:78:30:63:ED:81:A9:10:18:41:93:1D:20:29:80:90
Certificate issuer: /CN=793AA6D0CC0F6CFA0A23CA396BE713EF1AD67EB6
Certificate serial: 4C4F29CF553E71352BBD0B4CED155A053C79209D
Authority key identifier: 79:3A:A6:D0:CC:0F:6C:FA:0A:23:CA:39:6B:E7:13:EF:1A:D6:7E:B6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793AA6D0CC0F6CFA0A23CA396BE713EF1AD67EB6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3234382e302f32322d3234203d3e20323639333539.roa
Signing time: Tue 19 Nov 2024 18:58:15 +0000
ROA not before: Tue 19 Nov 2024 18:53:15 +0000
ROA not after: Tue 18 Nov 2025 18:58:15 +0000
asID: 269359
IP address blocks: 168.194.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:4f:29:cf:55:3e:71:35:2b:bd:0b:4c:ed:15:5a:05:3c:79:20:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=793AA6D0CC0F6CFA0A23CA396BE713EF1AD67EB6
Validity
Not Before: Nov 19 18:53:15 2024 GMT
Not After : Nov 18 18:58:15 2025 GMT
Subject: CN=0CF6D62104783063ED81A9101841931D20298090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:17:05:5c:6c:23:b0:4e:a4:6d:71:f3:fd:b7:
93:18:b4:2d:db:a7:dc:60:53:a0:aa:e9:a4:a1:70:
ae:95:f4:a5:96:54:26:7b:7f:b5:56:af:28:53:2d:
72:db:1d:5a:95:68:55:c6:4f:a7:db:5a:fc:da:ac:
e1:a9:69:1a:0b:33:b8:d5:cd:30:6e:92:ca:1a:4c:
79:51:bb:95:31:6e:5d:3f:2c:1c:ca:0c:e0:f8:a7:
98:7d:f5:7f:40:9f:db:a0:d6:5d:c3:76:63:04:bf:
03:74:5e:15:60:07:f8:49:19:e8:92:13:a3:a4:5b:
9f:be:99:a0:d4:b1:13:0a:97:5d:75:a8:ea:37:b9:
21:4d:72:b9:14:1b:9a:ca:69:4e:21:98:3f:94:90:
2e:5d:28:a6:ba:12:0d:b3:84:fc:8d:95:66:26:0b:
11:b1:aa:c9:9a:6f:a4:6b:28:b0:de:ee:42:84:9f:
4d:c0:9d:e2:24:ca:67:e5:08:4a:d7:d3:b0:6a:ae:
8d:47:e6:b8:9a:35:2d:5c:81:61:37:5d:88:ed:91:
60:b7:bc:ef:64:2b:8f:29:f3:ff:1e:31:49:67:dc:
00:7e:b0:9b:4b:2f:af:74:40:20:e7:7b:c9:8c:c2:
34:61:38:09:27:98:ae:40:24:01:ec:3b:29:51:aa:
7b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F6:D6:21:04:78:30:63:ED:81:A9:10:18:41:93:1D:20:29:80:90
X509v3 Authority Key Identifier:
keyid:79:3A:A6:D0:CC:0F:6C:FA:0A:23:CA:39:6B:E7:13:EF:1A:D6:7E:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/793AA6D0CC0F6CFA0A23CA396BE713EF1AD67EB6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793AA6D0CC0F6CFA0A23CA396BE713EF1AD67EB6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3234382e302f32322d3234203d3e20323639333539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.248.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:f1:82:89:e4:c2:50:f0:4b:9f:5a:f2:7b:ea:88:69:c5:12:
2e:29:1c:d9:d8:1d:45:14:28:08:0b:f1:68:45:1e:11:f8:29:
93:1e:cc:0c:e4:22:44:4d:b6:10:84:be:fd:a6:da:a0:6c:39:
9f:6d:ff:9f:b3:30:0c:c4:20:75:b2:f5:f5:23:fd:4f:cc:95:
fb:9a:83:35:b8:85:40:f7:70:2d:a2:b1:a0:ba:ca:fb:7b:72:
c4:35:06:48:3c:ca:f1:80:7c:08:cf:e4:69:20:f8:bb:b4:55:
5c:dc:6d:6e:b0:2c:c0:90:ae:59:95:f4:e3:d4:d7:a5:72:fb:
20:ca:67:95:16:a8:fd:5b:94:b7:ee:a2:34:3b:fb:31:81:b1:
01:2a:69:30:16:2f:2f:39:82:60:23:7c:d9:aa:9a:02:09:4f:
ec:1d:65:72:4b:93:d1:14:db:aa:12:44:93:04:05:57:37:c7:
a1:8e:06:68:ae:4a:68:05:af:1c:0c:46:46:b7:1a:c5:37:61:
ab:cd:2c:a3:35:54:8e:ce:37:b4:9d:31:db:42:92:68:10:8f:
2a:54:86:69:db:35:e2:ff:d9:88:6b:92:af:32:30:83:5a:28:
fd:69:63:d6:4b:f1:b2:6b:5f:b1:02:5e:2e:a5:20:23:a4:da:
8c:52:43:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:50 2025 by rpki-client