![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GqcxLGYFgKaNJFn11Hj25E6D6a2xpyppiWmvJR7Jxqs7/0/34352e36352e3138302e302f32322d3332203d3e20323636323636.roa
File: 34352e36352e3138302e302f32322d3332203d3e20323636323636.roa (raw, json)
Hash identifier: H5aIlKECnCZi0hUn6Oepd6eA/OnUr6Vpmd5GxBaXyy4=
Subject key identifier: DF:2A:0A:AE:B5:45:DB:16:C1:1F:0F:F3:88:6B:ED:F3:2B:A9:1D:F9
Certificate issuer: /CN=FD874116DB78A7ED2BE150325A5CF55C8B6625FA
Certificate serial: 1102DFD0257D1A197B9B366E87792FD9C77D11A7
Authority key identifier: FD:87:41:16:DB:78:A7:ED:2B:E1:50:32:5A:5C:F5:5C:8B:66:25:FA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD874116DB78A7ED2BE150325A5CF55C8B6625FA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GqcxLGYFgKaNJFn11Hj25E6D6a2xpyppiWmvJR7Jxqs7/0/34352e36352e3138302e302f32322d3332203d3e20323636323636.roa
Signing time: Wed 24 May 2023 05:52:42 +0000
ROA not before: Wed 24 May 2023 05:47:42 +0000
ROA not after: Wed 22 May 2024 05:52:42 +0000
asID: 266266
IP address blocks: 45.65.180.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:02:df:d0:25:7d:1a:19:7b:9b:36:6e:87:79:2f:d9:c7:7d:11:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD874116DB78A7ED2BE150325A5CF55C8B6625FA
Validity
Not Before: May 24 05:47:42 2023 GMT
Not After : May 22 05:52:42 2024 GMT
Subject: CN=DF2A0AAEB545DB16C11F0FF3886BEDF32BA91DF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8d:31:d9:35:50:be:c4:45:f2:a5:55:92:9c:
2a:8f:ca:ce:7a:e3:61:58:8b:6d:5b:5f:8d:87:cc:
bc:73:90:4a:cd:1c:67:98:03:b2:04:2d:df:50:9f:
73:1f:dc:7a:c7:e6:99:42:b5:a8:1e:29:4c:52:16:
f6:98:6e:3e:3c:a3:7e:58:ed:57:c5:ab:52:a2:db:
8b:ef:c0:fe:91:ca:51:52:0c:3d:4d:fb:79:d4:63:
f1:09:14:4b:d7:b7:9c:05:2a:d9:8c:a3:e0:75:89:
71:01:e8:40:9d:71:c0:ab:0c:5c:6e:9a:6e:7d:12:
f6:44:ca:03:8e:c2:5c:58:8f:3a:fc:85:4f:6c:e5:
b2:4b:c3:bf:58:6d:2a:20:77:d3:63:fc:b2:9a:bb:
e7:34:f8:3d:b9:24:4b:33:a9:f2:af:2f:c0:4c:6d:
53:24:14:6b:3e:db:ab:d0:d5:6f:50:cf:b2:ac:97:
92:87:ba:e3:1e:a7:32:39:42:07:23:d0:f4:c0:a0:
1e:92:86:8e:9f:de:de:dc:67:e6:97:97:aa:1b:74:
a8:ea:8c:cc:08:0f:a7:92:6a:aa:08:92:3d:72:b0:
11:f1:58:d8:36:68:fc:7b:0f:f3:08:e0:1e:23:2d:
2a:d3:a4:38:dd:fa:ef:b7:fa:6d:76:20:d2:cf:59:
3b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2A:0A:AE:B5:45:DB:16:C1:1F:0F:F3:88:6B:ED:F3:2B:A9:1D:F9
X509v3 Authority Key Identifier:
keyid:FD:87:41:16:DB:78:A7:ED:2B:E1:50:32:5A:5C:F5:5C:8B:66:25:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GqcxLGYFgKaNJFn11Hj25E6D6a2xpyppiWmvJR7Jxqs7/0/FD874116DB78A7ED2BE150325A5CF55C8B6625FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD874116DB78A7ED2BE150325A5CF55C8B6625FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GqcxLGYFgKaNJFn11Hj25E6D6a2xpyppiWmvJR7Jxqs7/0/34352e36352e3138302e302f32322d3332203d3e20323636323636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.180.0/22
Signature Algorithm: sha256WithRSAEncryption
32:8f:35:7e:5a:dc:f2:4a:1c:c6:e7:a6:9f:89:5e:2f:fa:22:
2d:a7:63:c5:c2:5d:7f:bd:a1:81:1b:2c:42:21:ff:3d:23:71:
d9:47:e1:6a:5b:1b:8f:6a:4c:69:03:7b:de:d2:39:a9:c6:69:
30:8c:73:26:38:f2:5b:74:34:c6:08:cf:1f:34:10:aa:c0:0c:
d3:05:9f:83:f7:8d:0c:49:ce:41:a5:b5:d4:cb:d3:8e:d9:ce:
46:0e:76:39:e2:04:90:46:eb:58:98:a2:22:8b:3a:c8:fd:ec:
c2:3c:3f:be:b7:82:11:8c:0f:11:ae:dd:19:9c:ae:87:cd:52:
fb:2f:3c:95:1e:f5:a8:f2:9b:2c:80:c9:07:9d:1d:32:67:7d:
40:12:d4:57:99:01:92:aa:ce:77:55:3c:a7:3e:01:88:dd:6d:
09:98:c0:a4:ea:e0:2c:ab:10:bc:6e:a1:c6:ac:e2:1b:54:86:
55:d5:4c:1b:fa:b9:38:ad:57:2a:fe:8d:21:da:db:50:e4:50:
d8:dd:c3:c7:a2:c6:87:63:79:e0:ac:9c:5a:9d:ac:5c:ec:59:
11:3a:5e:1b:36:70:a3:f9:8a:4f:15:cf:0e:81:66:d2:40:c7:
86:e2:eb:05:fa:71:80:7a:58:c9:df:eb:45:d4:72:28:06:cd:
9e:6f:ed:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:27:50 2025 by rpki-client