![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GCfjw2QpBi6qT6nAvntviGD4rhyeRfUyy2ZwooQocPTW/0/3138392e3132372e3135392e302f32342d3234203d3e20323730373037.roa
File: 3138392e3132372e3135392e302f32342d3234203d3e20323730373037.roa (raw, json)
Hash identifier: Uf15dym12fPOXhRfNKtWQfL0ESP7Q2gpyP4MP12iEKM=
Subject key identifier: 3D:A8:4B:20:9C:CA:6A:0E:06:6E:C2:A4:D9:A1:96:B9:5A:B8:DB:C2
Certificate issuer: /CN=70D42EF292639D20E817DA32AA3DE2306DCD4C45
Certificate serial: 3E82DCDBD8950259062650CD0B544C4374A09EB6
Authority key identifier: 70:D4:2E:F2:92:63:9D:20:E8:17:DA:32:AA:3D:E2:30:6D:CD:4C:45
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70D42EF292639D20E817DA32AA3DE2306DCD4C45.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GCfjw2QpBi6qT6nAvntviGD4rhyeRfUyy2ZwooQocPTW/0/3138392e3132372e3135392e302f32342d3234203d3e20323730373037.roa
Signing time: Thu 01 Jun 2023 18:36:47 +0000
ROA not before: Thu 01 Jun 2023 18:31:47 +0000
ROA not after: Thu 30 May 2024 18:36:47 +0000
asID: 270707
IP address blocks: 189.127.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:82:dc:db:d8:95:02:59:06:26:50:cd:0b:54:4c:43:74:a0:9e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70D42EF292639D20E817DA32AA3DE2306DCD4C45
Validity
Not Before: Jun 1 18:31:47 2023 GMT
Not After : May 30 18:36:47 2024 GMT
Subject: CN=3DA84B209CCA6A0E066EC2A4D9A196B95AB8DBC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ad:71:3b:d2:1d:b9:60:c3:df:fa:0e:2f:11:
b7:ca:02:3d:01:49:4c:e9:5d:65:12:6c:92:6b:e6:
13:be:95:6a:93:12:7f:94:c5:68:df:2d:86:dd:a7:
22:6f:75:cd:58:0f:42:b9:2b:6c:1b:71:28:eb:5b:
c7:0a:51:b9:30:f7:d1:3d:c0:ce:16:a7:36:a0:fe:
6b:c1:e4:31:96:d5:24:5c:17:0f:c3:2d:e1:19:86:
15:dd:fa:1e:2f:dc:39:83:46:f5:18:05:ba:0c:b8:
ac:95:a7:e8:24:18:f1:b5:8c:a9:83:f7:dd:68:20:
d5:04:1b:03:32:75:b8:13:78:bf:20:17:3c:91:6e:
3e:6a:97:26:31:5b:48:7e:40:ab:e0:57:04:ab:68:
0a:dc:41:e4:a6:8d:0f:99:46:69:76:b2:70:83:57:
a6:87:e5:54:4b:5b:e1:1a:e2:6b:c4:57:7e:b9:bd:
7e:c1:fc:4b:74:5c:91:5a:ac:14:58:6e:90:7d:a3:
8e:59:eb:1e:67:14:43:e6:37:db:5b:53:20:38:8a:
b9:6f:84:c9:6d:18:c5:2d:67:f6:d6:2b:e5:93:7c:
4c:4e:e4:e6:4a:34:5a:f8:38:01:06:79:44:eb:26:
cb:db:d5:55:4b:0d:07:7e:eb:4e:05:83:7e:27:0e:
53:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A8:4B:20:9C:CA:6A:0E:06:6E:C2:A4:D9:A1:96:B9:5A:B8:DB:C2
X509v3 Authority Key Identifier:
keyid:70:D4:2E:F2:92:63:9D:20:E8:17:DA:32:AA:3D:E2:30:6D:CD:4C:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GCfjw2QpBi6qT6nAvntviGD4rhyeRfUyy2ZwooQocPTW/0/70D42EF292639D20E817DA32AA3DE2306DCD4C45.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70D42EF292639D20E817DA32AA3DE2306DCD4C45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GCfjw2QpBi6qT6nAvntviGD4rhyeRfUyy2ZwooQocPTW/0/3138392e3132372e3135392e302f32342d3234203d3e20323730373037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.127.159.0/24
Signature Algorithm: sha256WithRSAEncryption
87:c2:f1:31:e2:e2:95:5b:fb:d1:5f:5d:05:ac:9c:99:e6:9e:
2d:6c:a8:30:06:1b:15:b4:5d:ca:4e:75:ed:2c:b4:a4:1d:da:
ea:b3:73:c9:b3:ea:18:99:f8:f0:d1:93:fd:55:3a:0c:4d:3d:
59:fc:a4:3a:05:de:48:a9:63:8d:ca:b6:27:ce:6c:6a:c7:49:
93:a2:8d:3c:43:93:d7:f4:82:27:6d:51:c2:f3:c4:3f:c7:7e:
c7:3e:8c:71:ae:65:d3:72:7d:76:d2:97:66:1b:6d:2c:f5:11:
ec:55:fd:a1:ff:a4:51:85:04:84:86:aa:d0:9f:f7:bd:c5:ce:
11:5e:e2:fe:e9:bd:c7:82:5a:00:fc:41:a5:67:40:6a:fd:87:
78:6e:35:7f:7d:93:fd:1f:38:52:26:24:9e:35:30:4a:e2:f5:
56:87:e0:ec:86:b9:ff:01:f8:82:f6:55:87:9e:4d:7c:39:2a:
9f:be:dc:6a:b2:cd:9d:c4:82:20:9c:65:33:94:6d:03:f7:4c:
bf:56:a9:01:1b:fe:2a:b9:57:75:4a:8c:b1:5e:d9:c4:0c:3d:
bf:17:7f:33:1a:6d:d8:92:f9:ab:bb:83:1d:22:c9:d5:57:6a:
7e:47:21:1a:86:78:b6:14:46:d3:79:37:07:af:84:41:d6:9a:
2b:a5:e3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:16:32 2025 by rpki-client