![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3134332e3235352e37322e302f32322d3232203d3e20323632343630.roa
File: 3134332e3235352e37322e302f32322d3232203d3e20323632343630.roa (raw, json)
Hash identifier: HsXwLew6aZ23oEiAuEJSR9oD/vUo3wulPxCI6dTuJaY=
Subject key identifier: C0:83:80:89:F5:61:23:60:44:B2:A8:DF:48:8F:8B:B9:5C:D8:E8:49
Certificate issuer: /CN=3A3DF525158206E0B66C8FD23D86B1780F642002
Certificate serial: 43C10306438DCADC7D8FE6B1A24C96B81575BC9E
Authority key identifier: 3A:3D:F5:25:15:82:06:E0:B6:6C:8F:D2:3D:86:B1:78:0F:64:20:02
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3DF525158206E0B66C8FD23D86B1780F642002.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3134332e3235352e37322e302f32322d3232203d3e20323632343630.roa
Signing time: Fri 19 Apr 2024 12:37:00 +0000
ROA not before: Fri 19 Apr 2024 12:32:00 +0000
ROA not after: Fri 18 Apr 2025 12:37:00 +0000
asID: 262460
IP address blocks: 143.255.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:c1:03:06:43:8d:ca:dc:7d:8f:e6:b1:a2:4c:96:b8:15:75:bc:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A3DF525158206E0B66C8FD23D86B1780F642002
Validity
Not Before: Apr 19 12:32:00 2024 GMT
Not After : Apr 18 12:37:00 2025 GMT
Subject: CN=C0838089F561236044B2A8DF488F8BB95CD8E849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:48:3a:89:9c:ab:5b:b7:1b:51:9c:13:46:63:
e9:eb:bc:30:e0:99:4d:57:94:ad:0e:b8:97:07:35:
49:af:40:af:ae:7a:18:80:cf:f9:1b:55:53:7b:f7:
7b:eb:7f:2b:43:f3:3b:1f:21:95:69:80:98:81:d1:
a5:9b:df:e4:e3:06:fe:95:84:88:cc:8e:ec:87:6a:
e2:7e:d9:8f:48:39:a8:d7:dd:d5:b1:92:df:c9:85:
59:13:75:62:cf:48:b5:83:03:8f:22:43:16:f2:0a:
41:e1:6b:b2:d1:e7:b9:06:39:0c:e7:90:5b:37:20:
9b:99:0f:3e:86:80:88:54:2d:06:90:bc:92:79:67:
5e:e6:b2:93:81:b0:c4:7b:29:8f:fc:5b:29:a5:23:
3b:a5:2c:14:97:f3:ce:51:1e:ea:31:ef:53:56:7e:
16:32:87:aa:80:01:2f:c4:f8:9e:fe:f0:fa:3d:db:
d7:95:df:eb:23:82:05:de:a8:39:de:69:62:71:9f:
b6:84:df:ca:a3:c5:5b:67:5c:79:90:1d:d5:1d:ae:
36:5f:98:9e:e2:9a:d6:2d:65:2c:7c:cd:16:56:66:
8a:7d:1d:2b:bf:05:3c:44:77:c9:87:3c:22:b9:c3:
5a:17:fe:c4:3c:f8:f0:49:8f:ca:8a:67:f4:51:6a:
a8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:83:80:89:F5:61:23:60:44:B2:A8:DF:48:8F:8B:B9:5C:D8:E8:49
X509v3 Authority Key Identifier:
keyid:3A:3D:F5:25:15:82:06:E0:B6:6C:8F:D2:3D:86:B1:78:0F:64:20:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3A3DF525158206E0B66C8FD23D86B1780F642002.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3DF525158206E0B66C8FD23D86B1780F642002.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3134332e3235352e37322e302f32322d3232203d3e20323632343630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.255.72.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:58:cb:86:96:68:30:46:5c:b2:ee:8f:3d:7e:cf:3f:82:22:
d7:38:ae:19:44:4f:93:d2:63:5b:0b:a6:57:64:cf:e5:d4:24:
2c:8e:ea:39:e1:97:1b:2b:98:82:c6:13:7b:eb:dc:2d:a4:cd:
0d:31:31:ea:b2:40:9e:0c:e8:72:f6:00:ab:db:df:e7:71:18:
df:3a:69:54:4d:47:e1:aa:e3:ac:bb:b2:a8:a5:c2:a6:9b:e6:
90:30:e5:e2:ce:85:c5:a2:f0:23:56:7b:2f:14:10:ed:65:dd:
87:c5:90:69:cd:73:cf:58:c5:98:23:ea:29:73:e8:ec:93:c9:
8f:4b:e4:7e:c5:6b:c4:b5:2b:76:ce:20:e1:b6:c3:f4:f3:5b:
82:b4:51:7e:7f:ad:d0:15:6c:3a:ff:6c:0b:07:e7:af:8f:4d:
55:5b:ce:6d:93:38:f6:6d:4d:a8:67:32:37:f3:43:5d:15:47:
07:fd:90:49:27:ca:b9:8d:a6:43:20:23:7b:a6:ad:30:d9:48:
c0:b2:ae:4b:83:e6:8e:5f:9e:ca:ad:ad:47:cf:8b:b6:49:c6:
3e:24:6a:1a:5e:e9:56:e0:f4:bb:d6:da:40:b6:c8:28:de:8d:
56:11:b5:ff:ab:b7:46:f6:b6:e9:65:29:f5:cd:10:41:da:a1:
41:64:e0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:52 2025 by rpki-client