![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GCfjw2QpBi6qT6nAvntviGD4rhyeRfUyy2ZwooQocPTW/0/3138392e3132372e3135382e302f32342d3234203d3e20323730373037.roa
File: 3138392e3132372e3135382e302f32342d3234203d3e20323730373037.roa (raw, json)
Hash identifier: AHOyg2cRRvoeNPWBmnsFuiv7qkIUkH3zB3yAFRI26xw=
Subject key identifier: 13:C6:44:84:4D:55:3F:CC:4A:9B:33:A3:95:34:90:76:CA:BA:52:99
Certificate issuer: /CN=70D42EF292639D20E817DA32AA3DE2306DCD4C45
Certificate serial: 53F33A4F62A370A239EF4DE0741A005045B89A81
Authority key identifier: 70:D4:2E:F2:92:63:9D:20:E8:17:DA:32:AA:3D:E2:30:6D:CD:4C:45
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70D42EF292639D20E817DA32AA3DE2306DCD4C45.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GCfjw2QpBi6qT6nAvntviGD4rhyeRfUyy2ZwooQocPTW/0/3138392e3132372e3135382e302f32342d3234203d3e20323730373037.roa
Signing time: Thu 01 Jun 2023 18:36:09 +0000
ROA not before: Thu 01 Jun 2023 18:31:09 +0000
ROA not after: Thu 30 May 2024 18:36:09 +0000
asID: 270707
IP address blocks: 189.127.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:f3:3a:4f:62:a3:70:a2:39:ef:4d:e0:74:1a:00:50:45:b8:9a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70D42EF292639D20E817DA32AA3DE2306DCD4C45
Validity
Not Before: Jun 1 18:31:09 2023 GMT
Not After : May 30 18:36:09 2024 GMT
Subject: CN=13C644844D553FCC4A9B33A395349076CABA5299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8a:b0:9c:7b:93:b5:90:4c:27:73:5c:24:87:
7a:96:22:f4:0e:07:77:4b:6d:ae:88:68:fb:44:3d:
ec:65:da:72:b9:60:1f:2d:6f:25:e1:98:45:7f:36:
4f:c4:3a:83:55:d6:95:c8:f3:23:c0:85:c7:ec:a8:
40:fe:02:12:de:2e:48:4b:98:e2:82:6d:ad:28:51:
25:00:92:91:75:84:7b:bc:b0:80:ff:02:a8:6c:c6:
0b:d2:55:4e:1b:8d:d8:08:54:d4:4a:0d:a8:ff:cf:
01:3e:2e:07:79:0e:1b:1a:2f:dc:f7:d0:d2:7d:3c:
8a:bb:f7:70:f0:55:fb:0a:20:26:08:dd:31:4d:6d:
61:20:dd:db:a1:6e:9a:ce:01:84:9b:f3:d8:9c:59:
63:11:93:9b:a0:5d:c6:20:8e:ff:d2:8e:a0:53:46:
cc:3d:37:5f:f5:dc:4f:01:6c:a0:f7:95:82:e4:15:
63:0d:45:d1:3b:56:69:75:18:c2:fc:a8:85:30:8b:
a5:d7:94:61:43:90:47:02:df:53:82:ac:42:19:b4:
c9:3b:cc:57:e7:09:fd:16:a7:71:31:0d:0e:60:04:
7b:e6:98:b2:9f:bc:dc:7c:27:7f:ac:c3:2b:fc:89:
ca:51:32:b2:ba:22:d1:57:cf:30:25:e0:92:33:6b:
f1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C6:44:84:4D:55:3F:CC:4A:9B:33:A3:95:34:90:76:CA:BA:52:99
X509v3 Authority Key Identifier:
keyid:70:D4:2E:F2:92:63:9D:20:E8:17:DA:32:AA:3D:E2:30:6D:CD:4C:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GCfjw2QpBi6qT6nAvntviGD4rhyeRfUyy2ZwooQocPTW/0/70D42EF292639D20E817DA32AA3DE2306DCD4C45.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70D42EF292639D20E817DA32AA3DE2306DCD4C45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GCfjw2QpBi6qT6nAvntviGD4rhyeRfUyy2ZwooQocPTW/0/3138392e3132372e3135382e302f32342d3234203d3e20323730373037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.127.158.0/24
Signature Algorithm: sha256WithRSAEncryption
62:45:b6:e3:c4:84:69:21:05:2c:70:a2:e0:93:93:2f:65:5c:
a8:64:5e:67:8c:d1:a0:ce:1e:30:04:50:ae:d0:d2:bc:3a:90:
d3:55:27:2d:89:60:cb:7a:c6:1b:f9:3b:e1:be:53:84:4f:ad:
79:e0:1c:dc:10:7a:41:66:f8:c8:62:7f:43:d5:23:a4:56:d6:
c5:f0:bc:9b:27:c7:42:d7:01:62:4f:2f:15:9c:8e:1a:4f:05:
e9:85:8a:f8:c9:e2:e0:75:c4:ca:82:fe:5c:c1:a7:06:a1:65:
a7:f3:de:47:84:ab:24:82:1b:2f:45:f1:8a:00:d5:4a:95:7a:
fb:57:ec:ef:00:72:33:73:fb:e5:e7:aa:0c:f4:2c:cd:bc:49:
70:ee:9f:0d:90:0c:4f:9c:9d:80:9a:c5:be:ef:83:c0:64:68:
3f:30:6c:81:a7:49:87:0e:2b:a4:94:b7:3d:ba:86:9f:d6:d7:
03:42:da:ab:ef:e1:66:29:2b:04:8c:23:eb:22:b7:0b:58:70:
61:10:83:68:93:3c:2c:c2:33:4a:3a:d7:76:07:a6:aa:4b:45:
e0:b3:fc:93:4b:ac:72:4a:14:b7:ee:75:ff:5a:19:61:d6:15:
9d:d1:79:88:c5:7c:32:43:65:b6:90:0a:ed:b8:5c:ed:4d:3a:
0b:28:03:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:37:03 2025 by rpki-client