![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/3137372e3135342e33322e302f32302d3234203d3e20323632323732.roa
File: 3137372e3135342e33322e302f32302d3234203d3e20323632323732.roa (raw, json)
Hash identifier: VTpsb5lhbAxvzLj8NGOl/BjdkTByvA1meBgvlPr2TLY=
Subject key identifier: A6:DE:44:13:4F:5C:72:9F:6B:61:28:F9:1B:1B:08:D1:7A:89:10:03
Certificate issuer: /CN=8EB5640E5E527878FC946C7E404DEEF0F92CB53F
Certificate serial: 7D23C176F3160F0A71EC478117F9573B253E56A0
Authority key identifier: 8E:B5:64:0E:5E:52:78:78:FC:94:6C:7E:40:4D:EE:F0:F9:2C:B5:3F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/3137372e3135342e33322e302f32302d3234203d3e20323632323732.roa
Signing time: Wed 12 Jun 2024 13:14:50 +0000
ROA not before: Wed 12 Jun 2024 13:09:50 +0000
ROA not after: Wed 11 Jun 2025 13:14:50 +0000
asID: 262272
IP address blocks: 177.154.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:23:c1:76:f3:16:0f:0a:71:ec:47:81:17:f9:57:3b:25:3e:56:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8EB5640E5E527878FC946C7E404DEEF0F92CB53F
Validity
Not Before: Jun 12 13:09:50 2024 GMT
Not After : Jun 11 13:14:50 2025 GMT
Subject: CN=A6DE44134F5C729F6B6128F91B1B08D17A891003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b6:40:c8:50:84:af:ad:6c:c7:36:23:e6:29:
eb:f9:5d:e5:6c:4a:cb:44:c1:44:57:61:46:f2:38:
1a:ef:46:85:8c:97:9b:e1:36:6e:db:a4:17:e7:a2:
75:49:cd:3b:7e:86:6f:90:b8:31:6e:b8:5a:46:f1:
68:5c:f5:65:2e:91:c7:0e:67:1e:1b:f9:ac:68:e8:
89:71:6d:65:0c:a3:8b:19:71:62:ad:25:8e:90:88:
e9:cb:7c:69:92:4e:9a:90:23:82:a3:dd:a9:b6:0d:
b4:1f:25:09:c3:84:73:6a:b0:8d:92:b6:96:51:8a:
38:13:e2:a7:02:0e:b1:61:4a:a1:fe:24:87:74:93:
42:9f:9f:eb:82:09:c7:a5:45:3d:27:07:36:15:c7:
a4:a0:bb:ca:de:29:cd:58:08:c9:06:ff:11:79:10:
39:32:e8:45:e3:4d:22:c9:b6:9c:d7:41:cc:75:e8:
c1:6a:89:e4:2e:9b:d4:0f:2f:14:5f:86:a2:79:6c:
cc:9b:88:19:06:5b:fd:0c:32:1e:0d:99:6c:ac:52:
08:5a:ca:bb:37:18:01:5b:92:5b:eb:44:af:c9:f8:
67:34:15:26:8a:19:94:f9:eb:ee:98:cf:62:83:3d:
7d:be:6d:f3:74:01:0f:5f:31:23:bd:1e:05:42:94:
2d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:DE:44:13:4F:5C:72:9F:6B:61:28:F9:1B:1B:08:D1:7A:89:10:03
X509v3 Authority Key Identifier:
keyid:8E:B5:64:0E:5E:52:78:78:FC:94:6C:7E:40:4D:EE:F0:F9:2C:B5:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/3137372e3135342e33322e302f32302d3234203d3e20323632323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.154.32.0/20
Signature Algorithm: sha256WithRSAEncryption
66:6c:c1:a8:50:dd:88:ff:a5:de:00:e7:ab:77:fd:7f:12:d3:
b6:92:a9:e9:18:e4:e6:05:dc:c1:5a:24:56:19:27:cb:13:0c:
78:2b:cb:92:82:6b:68:1f:26:f8:98:eb:4d:b7:2d:2a:3a:f6:
19:3e:3a:34:30:b6:d7:bc:39:a5:83:7b:a0:28:10:34:33:2d:
fb:f0:2a:7f:00:7d:74:18:81:b2:c2:17:2b:d1:6c:a3:07:91:
d4:10:2b:e3:c1:40:6e:8c:a9:5d:f4:b1:af:19:1b:5d:17:44:
2a:e2:a9:68:b8:d9:22:be:75:c4:dc:87:53:52:c6:8b:66:d0:
b9:21:4e:c1:b4:26:ff:cf:8c:1c:5b:42:e2:0a:c3:ba:77:51:
6a:52:38:df:49:8d:0f:3e:6f:5d:ea:d2:6e:86:31:20:d5:8e:
65:9e:4a:d8:e6:73:2a:4c:e3:f0:86:9a:52:6c:a6:d1:27:26:
81:5c:5e:41:d1:6b:ab:6b:3e:cf:44:10:01:2b:c6:7d:13:6a:
e0:fc:06:e6:06:dc:9d:05:79:70:b4:3d:6b:bd:f6:43:26:23:
92:a8:1e:46:a8:0b:f7:75:34:da:a5:dd:eb:77:cb:aa:f1:6d:
4a:e6:97:3d:80:ec:da:d6:af:8b:18:44:e0:79:d5:e8:d1:01:
65:cb:61:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:14:41 2025 by rpki-client