![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3133312e3130382e3232352e302f32342d3234203d3e20323633353232.roa
File: 3133312e3130382e3232352e302f32342d3234203d3e20323633353232.roa (raw, json)
Hash identifier: YJA8mEnwkb8negKJG2W/jvLSK5Lm2/c+RXTwia1lWtg=
Subject key identifier: 86:E2:5A:1D:5C:BE:47:4A:8E:9D:77:02:CA:7C:7A:CE:2F:79:B7:6B
Certificate issuer: /CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
Certificate serial: 0EC089E1DBF352D2D42BA58E0C04D9E0DC46C760
Authority key identifier: 6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3133312e3130382e3232352e302f32342d3234203d3e20323633353232.roa
Signing time: Thu 28 Dec 2023 17:12:15 +0000
ROA not before: Thu 28 Dec 2023 17:07:15 +0000
ROA not after: Thu 26 Dec 2024 17:12:15 +0000
asID: 263522
IP address blocks: 131.108.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:c0:89:e1:db:f3:52:d2:d4:2b:a5:8e:0c:04:d9:e0:dc:46:c7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
Validity
Not Before: Dec 28 17:07:15 2023 GMT
Not After : Dec 26 17:12:15 2024 GMT
Subject: CN=86E25A1D5CBE474A8E9D7702CA7C7ACE2F79B76B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c8:da:87:d8:73:86:66:7a:b8:80:4a:1f:2a:
ae:06:64:9c:58:74:9e:d0:e7:42:5d:18:91:b5:ec:
cf:71:49:93:44:de:6a:9c:a1:27:e8:f0:5c:5c:56:
fa:97:1a:ff:fd:36:a3:d7:21:4a:51:ae:0f:3e:c8:
57:3f:d9:b4:2f:dc:58:cf:30:82:9f:d8:c6:da:6f:
49:c1:0e:cd:ae:69:21:72:d7:ea:27:c8:11:95:90:
37:98:f5:43:46:b5:d8:36:cb:b4:19:ea:8c:d0:3d:
25:68:c1:3f:bc:ef:ad:82:d7:17:02:fd:65:af:23:
1d:9d:66:3c:c0:3f:d6:ae:b5:da:46:5f:b1:c8:04:
c1:d6:20:67:91:b7:4d:f8:69:e9:34:7f:d6:ff:94:
ab:4a:22:28:8a:b5:36:82:a5:d1:31:9c:48:2e:7c:
a6:05:b4:ea:fa:6c:85:c5:3c:c1:75:3f:a2:47:09:
3d:23:56:cd:0c:d4:7b:62:20:3a:0f:c7:ce:17:41:
d1:5f:d0:97:10:23:df:50:e5:27:1b:78:a4:ce:da:
6b:9e:00:77:b5:1f:22:5c:98:b3:15:56:cc:59:63:
31:40:07:9c:4a:5d:a5:d6:6d:3f:53:84:06:f6:8c:
a6:5e:e8:c3:7a:16:5b:24:85:95:5f:ea:b5:9a:a5:
ce:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E2:5A:1D:5C:BE:47:4A:8E:9D:77:02:CA:7C:7A:CE:2F:79:B7:6B
X509v3 Authority Key Identifier:
keyid:6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3133312e3130382e3232352e302f32342d3234203d3e20323633353232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.225.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:f8:69:96:33:6b:80:11:27:6b:0d:6a:75:44:be:7f:21:e7:
46:fa:5b:bb:54:f4:5a:62:fd:d7:c5:50:f3:8f:ab:fd:e6:93:
f1:5c:82:01:c8:01:da:4d:77:94:37:6e:03:ac:12:99:cd:43:
0e:cc:c3:dd:db:48:28:4f:e1:38:ea:d7:0d:fa:0f:44:65:df:
b6:17:f6:8c:92:ff:d4:14:26:44:b7:dd:1c:3b:68:0b:37:3f:
40:5b:3c:f7:21:2f:d5:5a:ae:0f:df:ac:56:a0:54:d6:7e:59:
1a:9b:b4:02:04:40:84:03:ce:d3:2b:3e:64:12:c2:c6:40:3c:
fb:f7:cf:bb:89:b4:7b:86:50:f0:83:24:cd:25:fc:b1:34:bf:
7d:c0:41:40:1a:d3:b5:5d:a4:c5:3a:a6:e2:73:e2:6a:de:7d:
41:08:4e:ad:62:d8:dd:1e:1c:a5:0f:6f:9a:47:5e:41:e2:90:
c4:e1:38:90:70:8b:02:00:46:76:35:1d:26:52:9f:63:8a:8b:
75:c8:9f:02:2a:d5:56:94:5a:69:27:6c:86:78:bd:84:4f:81:
39:1f:fd:8a:c8:19:cf:51:36:da:be:7b:c3:c0:b8:e5:6f:94:
f6:7a:8d:1a:db:c5:91:3e:88:33:07:a9:41:8b:78:c9:b6:07:
79:39:38:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:01:20 2025 by rpki-client