![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/0/3137372e3132352e3134342e302f32312d3234203d3e203533313332.roa
File: 3137372e3132352e3134342e302f32312d3234203d3e203533313332.roa (raw, json)
Hash identifier: vYPGfQ71xlVYQuztFUq87FfrmLwi6eBol3dRLs6Alkw=
Subject key identifier: FC:6B:53:B4:9C:B7:B2:77:7B:15:B8:11:3A:7D:4A:67:BF:FD:83:3B
Certificate issuer: /CN=71AF851FA1AB7F3F8FF59D7E8C212F578189CFB0
Certificate serial: 77E1B9A4F7824102F8704324CA5FB25E14C0C708
Authority key identifier: 71:AF:85:1F:A1:AB:7F:3F:8F:F5:9D:7E:8C:21:2F:57:81:89:CF:B0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71AF851FA1AB7F3F8FF59D7E8C212F578189CFB0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/0/3137372e3132352e3134342e302f32312d3234203d3e203533313332.roa
Signing time: Wed 25 Oct 2023 19:47:46 +0000
ROA not before: Wed 25 Oct 2023 19:42:46 +0000
ROA not after: Wed 23 Oct 2024 19:47:46 +0000
asID: 53132
IP address blocks: 177.125.144.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:e1:b9:a4:f7:82:41:02:f8:70:43:24:ca:5f:b2:5e:14:c0:c7:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71AF851FA1AB7F3F8FF59D7E8C212F578189CFB0
Validity
Not Before: Oct 25 19:42:46 2023 GMT
Not After : Oct 23 19:47:46 2024 GMT
Subject: CN=FC6B53B49CB7B2777B15B8113A7D4A67BFFD833B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c3:b0:b1:6e:76:62:9f:82:95:51:40:3d:01:
5b:5f:38:2c:72:e5:9a:67:b5:c0:31:8e:3d:84:5f:
9d:5c:d5:10:15:29:24:e3:d8:1d:41:86:a1:b8:a2:
a5:92:4a:ba:50:3d:eb:ac:c0:d2:6a:14:38:6f:3b:
fe:40:01:ab:cd:e2:d2:ed:9e:c2:7c:70:ee:d0:da:
48:f6:97:b9:18:08:46:8f:40:45:d4:a3:49:13:66:
b9:f3:c5:6f:6e:35:f4:07:1b:c6:ab:fc:24:6e:44:
dd:6b:ae:d1:f9:f8:89:37:8f:c7:0f:5f:26:d3:4d:
cd:54:fc:30:19:b2:b3:2a:64:cf:72:e5:b1:0b:7c:
73:1c:b1:89:3b:78:94:d5:83:e3:4a:98:89:23:dd:
9d:72:8a:92:a6:64:36:42:42:9a:a7:15:22:6b:c2:
f7:6d:ff:ca:9d:ca:b2:e9:f0:e7:84:86:d7:5d:ba:
29:bf:50:22:35:03:40:03:99:13:8a:2a:3c:2b:c3:
26:ef:07:80:70:5a:6f:e0:16:93:fd:14:f4:4a:d9:
e7:c9:f4:eb:53:28:c1:f7:ba:bf:92:e6:69:95:ef:
b6:10:1f:fe:57:10:23:74:bb:3f:03:47:06:1d:f8:
d2:ac:c9:9f:4a:2c:40:db:fa:23:d2:45:3b:ef:fd:
65:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6B:53:B4:9C:B7:B2:77:7B:15:B8:11:3A:7D:4A:67:BF:FD:83:3B
X509v3 Authority Key Identifier:
keyid:71:AF:85:1F:A1:AB:7F:3F:8F:F5:9D:7E:8C:21:2F:57:81:89:CF:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/0/71AF851FA1AB7F3F8FF59D7E8C212F578189CFB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71AF851FA1AB7F3F8FF59D7E8C212F578189CFB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/0/3137372e3132352e3134342e302f32312d3234203d3e203533313332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.125.144.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:8c:9b:e0:1f:13:5f:22:d7:f7:e3:ae:b1:e1:b8:05:69:1c:
8f:44:23:c7:91:1f:82:0f:83:18:30:99:c0:05:4a:25:c7:9c:
45:7a:2b:18:2d:b9:3c:e0:9a:36:6b:1f:34:11:ed:30:47:b8:
be:45:d3:05:66:dd:da:12:89:ad:51:9c:00:50:ef:38:8b:67:
fe:e2:70:5d:ee:d2:7b:b6:10:e2:18:cd:5f:be:d4:da:d0:a2:
70:f3:42:e6:d7:94:7e:43:46:d9:d9:30:c6:90:a0:89:3d:e2:
49:02:f4:e3:c6:d1:42:40:b9:25:ca:38:fe:1a:e4:1c:e6:a9:
bb:e5:5a:ce:96:d7:85:95:f9:4a:fa:37:09:fc:8b:cb:aa:20:
2f:15:31:7a:d3:0f:f1:9c:a3:0e:70:fa:39:0f:8f:b4:ae:1b:
38:c2:f1:e2:b6:49:42:99:d8:94:b7:9a:ee:6f:21:f9:27:49:
b3:78:2b:cf:5b:f5:22:99:61:f4:3f:2e:bc:25:56:85:2e:f2:
2e:f8:2b:c1:c8:56:32:51:4f:b2:65:96:97:86:ae:48:e8:90:
5e:b2:b5:eb:b9:fc:d4:62:b4:2f:6f:12:de:87:9f:3a:a1:94:
ff:b6:a4:d3:84:b5:c4:b5:57:de:d8:52:c2:2e:81:a3:d4:22:
89:32:14:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:02 2025 by rpki-client