![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/3138392e38352e3130382e302f32322d3232203d3e20323730353533.roa
File: 3138392e38352e3130382e302f32322d3232203d3e20323730353533.roa (raw, json)
Hash identifier: jaWvdkMKyjHZwyo/yr0pyBdbf5ocBSZcDTPBSnrY2c0=
Subject key identifier: 48:65:5C:EA:C8:BC:44:00:C7:1D:36:7E:C3:39:BD:02:F6:9F:7F:30
Certificate issuer: /CN=15889C5162837021C59BA680CF94CDC5D5DB8D43
Certificate serial: 3C3F8C6B6FD634D0CD5914B56C0EDABDF4FC06A9
Authority key identifier: 15:88:9C:51:62:83:70:21:C5:9B:A6:80:CF:94:CD:C5:D5:DB:8D:43
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15889C5162837021C59BA680CF94CDC5D5DB8D43.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/3138392e38352e3130382e302f32322d3232203d3e20323730353533.roa
Signing time: Tue 11 Jul 2023 14:54:02 +0000
ROA not before: Tue 11 Jul 2023 14:49:02 +0000
ROA not after: Tue 09 Jul 2024 14:54:02 +0000
asID: 270553
IP address blocks: 189.85.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:3f:8c:6b:6f:d6:34:d0:cd:59:14:b5:6c:0e:da:bd:f4:fc:06:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15889C5162837021C59BA680CF94CDC5D5DB8D43
Validity
Not Before: Jul 11 14:49:02 2023 GMT
Not After : Jul 9 14:54:02 2024 GMT
Subject: CN=48655CEAC8BC4400C71D367EC339BD02F69F7F30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:85:80:e4:48:b4:d4:98:04:83:8b:1d:3f:20:
05:7c:71:5f:db:4f:d9:b4:82:b3:84:61:0a:08:18:
e2:ac:a3:42:9e:1c:51:53:1b:a8:e9:77:58:e4:a1:
92:ad:76:9f:1c:9b:64:88:b1:ce:04:97:c9:39:a5:
aa:79:51:b0:fc:10:e2:aa:9d:f6:9b:ee:e5:40:67:
12:d7:cf:92:de:3f:c4:f1:21:c9:7f:61:3e:e6:de:
61:b4:71:8e:21:38:1f:62:51:04:8b:24:33:81:fc:
98:b5:57:ed:f9:4c:63:4e:f1:9c:e7:82:b4:ab:9d:
c0:e7:2c:41:7e:4e:45:ac:ea:e2:b9:fb:31:8c:5c:
6e:ce:61:58:3b:4f:ce:0a:16:ac:57:ff:73:79:63:
f6:2e:9c:ee:19:47:6e:89:6a:79:78:37:44:5c:bd:
40:cf:9b:67:24:44:a8:1f:b7:e2:b9:51:01:85:52:
7d:b5:0e:88:15:c7:52:95:34:1f:46:8d:66:c9:5e:
be:3c:61:46:fd:22:d3:03:64:a0:99:24:e1:c8:df:
1a:ae:c3:41:0b:88:33:41:eb:dc:6a:c8:7a:9f:da:
1a:a7:81:1d:af:08:9d:40:44:09:9d:80:b4:6e:0e:
c7:6b:3a:0f:03:27:05:94:3a:5b:fd:d0:f9:fc:fe:
e1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:65:5C:EA:C8:BC:44:00:C7:1D:36:7E:C3:39:BD:02:F6:9F:7F:30
X509v3 Authority Key Identifier:
keyid:15:88:9C:51:62:83:70:21:C5:9B:A6:80:CF:94:CD:C5:D5:DB:8D:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/15889C5162837021C59BA680CF94CDC5D5DB8D43.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15889C5162837021C59BA680CF94CDC5D5DB8D43.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/3138392e38352e3130382e302f32322d3232203d3e20323730353533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.85.108.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:fb:f7:ce:32:85:f2:83:6d:3d:a8:db:fe:5a:67:17:6d:45:
3a:67:7f:6a:00:36:20:1a:b3:2b:18:67:56:7f:fc:96:63:08:
66:b1:c9:5a:12:02:ca:87:7f:16:b1:fe:b0:b0:64:22:c9:65:
f6:1a:0b:f0:6a:12:c1:5c:5b:6b:eb:e8:53:81:49:a6:c4:34:
a2:67:f4:68:95:b3:1c:c7:35:da:27:96:3f:35:11:e3:a6:2a:
86:4b:f1:ef:7f:db:d3:03:fc:ee:3c:f8:b9:1f:3f:7e:e2:61:
89:aa:29:91:56:f7:e2:86:9a:6b:cc:e5:5c:5f:73:a6:66:26:
05:fa:6a:4f:1c:cc:4f:21:f5:68:04:82:d5:f8:57:67:14:de:
71:91:d2:60:69:c8:c5:4f:45:04:24:ef:74:24:ce:28:89:b5:
d6:f0:79:02:f3:9c:5e:54:aa:60:33:23:59:ae:ec:8f:91:3c:
07:81:96:cc:73:d1:d3:6a:55:1d:19:99:ca:39:01:11:47:5a:
e0:fe:01:69:aa:08:d0:9e:98:62:a6:23:43:64:59:1c:24:db:
ae:e0:03:bb:f8:fc:f7:4f:6e:c1:49:d9:db:bb:bf:96:55:85:
2c:27:78:f0:1f:df:cc:7c:e1:ee:ed:29:ff:81:d8:3e:cb:5e:
9e:d4:7e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:56:28 2025 by rpki-client