![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/1/34352e3139312e33322e302f32342d3234203d3e20323639363635.roa
File: 34352e3139312e33322e302f32342d3234203d3e20323639363635.roa (raw, json)
Hash identifier: jvzwk84ledPBEy0hA5DvRa42Ds1vb9hUWwVMdbtrAy8=
Subject key identifier: 1D:FA:FD:37:8A:E3:27:65:33:E7:A4:CA:B2:88:21:D8:79:33:18:0B
Certificate issuer: /CN=C4044C3EF6708490018AF81FD2B4D6E2657DC055
Certificate serial: 7C717344A10A44BE4CD64D678BE8A938F9D0DE26
Authority key identifier: C4:04:4C:3E:F6:70:84:90:01:8A:F8:1F:D2:B4:D6:E2:65:7D:C0:55
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C4044C3EF6708490018AF81FD2B4D6E2657DC055.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/1/34352e3139312e33322e302f32342d3234203d3e20323639363635.roa
Signing time: Thu 14 Dec 2023 14:16:19 +0000
ROA not before: Thu 14 Dec 2023 14:11:19 +0000
ROA not after: Thu 12 Dec 2024 14:16:19 +0000
asID: 269665
IP address blocks: 45.191.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:71:73:44:a1:0a:44:be:4c:d6:4d:67:8b:e8:a9:38:f9:d0:de:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C4044C3EF6708490018AF81FD2B4D6E2657DC055
Validity
Not Before: Dec 14 14:11:19 2023 GMT
Not After : Dec 12 14:16:19 2024 GMT
Subject: CN=1DFAFD378AE3276533E7A4CAB28821D87933180B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0c:e3:cd:b5:c4:42:51:f3:89:71:75:64:e1:
59:76:49:70:16:c2:40:5d:47:59:b1:9d:32:af:93:
71:84:cc:eb:67:52:fc:4c:e9:96:a9:7d:a8:b6:3b:
b3:3c:6b:ca:a0:9b:00:ba:b6:46:bb:bc:ea:94:bb:
2c:6b:0d:31:4e:20:91:91:af:16:41:c2:51:08:64:
a8:53:86:a3:2f:46:27:7b:22:5a:c1:de:d0:92:d1:
03:56:bd:d6:21:73:8e:aa:c2:c9:3d:89:8d:64:58:
6f:bb:df:3a:02:be:5b:5a:0a:76:55:cc:20:89:cc:
c0:f3:aa:f6:31:36:df:f7:36:7d:b6:ad:6f:0d:ac:
15:55:c0:c2:54:f1:99:cd:76:9f:aa:4e:0e:a1:19:
10:f1:e3:e2:a5:4a:72:de:7d:58:f1:cd:1b:00:5c:
70:b3:25:5b:15:b4:d5:0b:91:9a:4b:91:79:6c:d6:
f7:3d:28:05:c4:d1:6a:01:93:e3:3d:0a:1d:24:bf:
b4:c5:7c:fd:c6:b5:38:4e:c6:4b:28:60:64:46:ea:
9a:85:62:b7:0f:2f:6d:1c:15:84:cc:1e:88:b8:d9:
42:e5:38:de:a4:29:ba:d0:64:85:4f:60:c1:f1:aa:
92:9f:4d:00:53:d0:27:e9:14:c1:57:24:19:e8:ac:
f5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:FA:FD:37:8A:E3:27:65:33:E7:A4:CA:B2:88:21:D8:79:33:18:0B
X509v3 Authority Key Identifier:
keyid:C4:04:4C:3E:F6:70:84:90:01:8A:F8:1F:D2:B4:D6:E2:65:7D:C0:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/1/C4044C3EF6708490018AF81FD2B4D6E2657DC055.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C4044C3EF6708490018AF81FD2B4D6E2657DC055.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/1/34352e3139312e33322e302f32342d3234203d3e20323639363635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.32.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:5b:4c:10:ed:59:c1:b1:22:4f:a3:b6:9e:4d:7f:51:f5:50:
24:54:df:16:94:16:07:b5:0a:ac:b4:90:16:98:47:ac:f7:bb:
bf:bf:eb:99:43:35:c7:c5:ce:22:a8:3c:02:cb:36:bb:08:4a:
0d:ab:f5:72:84:20:34:51:03:b8:81:5f:3e:ab:67:12:ff:30:
0c:d3:7f:36:77:0c:3b:d8:35:35:5c:b5:de:c3:5a:4f:c4:e5:
71:6a:e1:12:b6:0c:e7:5b:a6:bf:2e:de:33:c5:5b:27:5e:c6:
e5:a7:2e:de:b4:58:5e:6f:f9:2b:6f:ed:04:bd:47:56:7c:90:
99:49:89:8e:0c:46:2a:bb:c1:67:e1:7b:4c:12:2a:74:8e:9c:
0c:81:27:a6:10:a1:57:f7:49:d5:c3:fe:f2:c3:bd:c9:0d:be:
b7:4c:a5:ce:1a:0b:24:fd:d3:7f:cd:70:e1:f4:c5:9e:0e:52:
98:f2:ce:a9:f2:e3:79:e8:16:10:8e:82:54:81:47:6e:9c:d3:
66:d6:8a:9e:fe:7f:75:87:61:8c:93:42:3a:6c:bb:ce:77:f6:
b9:c7:50:db:d9:40:42:2c:f1:06:99:ff:92:a8:67:38:1f:46:
38:69:42:4d:65:8d:9a:55:3e:c9:0e:6b:ee:51:c5:ed:a6:e2:
85:91:ad:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:39:07 2025 by rpki-client