![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139372e302f32342d3234203d3e203238323334.roa
File: 3138392e3132372e3139372e302f32342d3234203d3e203238323334.roa (raw, json)
Hash identifier: dlL5gMGSKo1MMiaBjzJOVpGY5LbXucxuah+AyMoKGhM=
Subject key identifier: 73:72:2D:5E:80:11:FE:DC:16:F9:C7:EF:02:A5:D7:F7:AD:FE:F1:75
Certificate issuer: /CN=5929470213BAFF684FBF82D56F8228968AA3EADA
Certificate serial: 52C255663EBA6B8C4476D40CD5148472D45B7DBE
Authority key identifier: 59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139372e302f32342d3234203d3e203238323334.roa
Signing time: Wed 20 Dec 2023 20:00:01 +0000
ROA not before: Wed 20 Dec 2023 19:55:01 +0000
ROA not after: Wed 18 Dec 2024 20:00:01 +0000
asID: 28234
IP address blocks: 189.127.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:c2:55:66:3e:ba:6b:8c:44:76:d4:0c:d5:14:84:72:d4:5b:7d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5929470213BAFF684FBF82D56F8228968AA3EADA
Validity
Not Before: Dec 20 19:55:01 2023 GMT
Not After : Dec 18 20:00:01 2024 GMT
Subject: CN=73722D5E8011FEDC16F9C7EF02A5D7F7ADFEF175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ff:de:8f:1b:47:0f:9b:b7:7e:0c:e0:8c:03:
5e:44:e7:f6:12:3a:55:9a:8a:73:ce:1e:20:a8:e7:
5d:cc:56:e4:28:e9:6a:f1:dd:b3:8d:e9:6f:83:25:
85:6d:40:fc:e7:12:45:24:a1:d7:e7:82:15:ba:db:
6e:99:75:9b:2d:fd:3d:ab:4d:99:34:12:95:5b:e6:
df:22:14:40:7c:8c:63:56:b9:c2:17:fe:62:d7:29:
8d:85:f6:46:42:58:ce:10:62:23:b7:11:b7:9a:50:
4d:db:7b:c6:32:61:70:3c:6e:0a:2c:52:19:68:24:
41:bf:66:e6:75:b7:3a:c9:ac:1f:ad:f7:81:f9:eb:
38:13:6e:ad:70:ea:64:38:80:7b:a7:a9:21:e9:a7:
f4:a9:53:8e:ef:0b:5c:1d:f8:dc:95:05:7f:e1:59:
a0:e7:8d:08:a3:08:95:6c:36:a8:41:62:65:62:70:
02:d6:eb:40:8f:13:e3:9e:a8:b8:a5:09:a8:95:78:
e5:83:0f:8c:3e:e0:39:08:0d:17:77:1c:2b:88:99:
f1:ee:b4:ff:56:0c:ad:b4:41:65:ea:ca:4a:04:a5:
01:4e:6a:31:8d:b5:b0:f9:e2:a9:ed:bb:af:e1:68:
60:47:bb:99:f6:c0:cd:7c:16:65:13:f7:9c:0f:d7:
04:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:72:2D:5E:80:11:FE:DC:16:F9:C7:EF:02:A5:D7:F7:AD:FE:F1:75
X509v3 Authority Key Identifier:
keyid:59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/5929470213BAFF684FBF82D56F8228968AA3EADA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139372e302f32342d3234203d3e203238323334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.127.197.0/24
Signature Algorithm: sha256WithRSAEncryption
43:4a:c0:69:56:f8:d8:f3:81:d5:7e:6d:21:03:ed:8f:4f:49:
94:79:71:00:76:bd:eb:2c:44:d2:62:dd:20:f0:54:a9:3a:37:
69:3d:c4:93:f8:9e:f9:6a:8b:c3:c5:60:ad:f4:fd:0f:e2:06:
4a:59:a6:81:78:df:82:8d:60:54:32:5f:55:8c:c4:c8:0d:90:
28:63:80:0a:78:a5:d0:4d:80:e7:cb:11:18:cb:5f:72:1d:5e:
a6:ac:68:d7:b8:5c:eb:3d:19:2b:58:dc:6a:9f:95:0d:87:10:
8b:46:c7:eb:ef:44:da:d4:d2:a2:b2:2a:f7:f3:6e:53:7c:36:
c4:42:a7:c5:9f:25:be:d2:07:cd:b7:d9:6a:b1:27:f1:c9:ee:
68:3e:fa:07:fd:50:fe:3a:ce:76:15:5f:31:c1:76:3d:b3:13:
44:f2:b8:6b:94:5d:f9:c4:0c:6f:b7:6b:82:19:df:35:90:4b:
f3:28:77:db:f8:31:0c:32:b3:88:e0:8c:8e:3e:06:47:d6:17:
e1:6a:d7:9d:ec:db:71:38:a6:8d:3c:d0:1b:22:53:a3:e4:e9:
9d:0b:b9:ec:89:1d:02:97:f1:8d:2b:19:cb:c3:ef:98:3e:50:
77:87:99:de:d1:d1:8c:61:34:1b:41:57:2b:fc:5d:a0:55:5f:
27:5b:08:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:48 2025 by rpki-client