![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3230322e302f32332d3233203d3e203238323334.roa
File: 3138392e3132372e3230322e302f32332d3233203d3e203238323334.roa (raw, json)
Hash identifier: UVe2MbFzhIa0JwU6/xTO7mKu3ajIxqXkDhVNlRKR1Qk=
Subject key identifier: 14:1F:EF:39:53:F4:ED:23:72:A8:CA:39:46:54:8E:FD:F7:ED:F4:B3
Certificate issuer: /CN=5929470213BAFF684FBF82D56F8228968AA3EADA
Certificate serial: 0643E24B29D372A754DCDA4253769B684350F43D
Authority key identifier: 59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3230322e302f32332d3233203d3e203238323334.roa
Signing time: Wed 20 Dec 2023 20:00:03 +0000
ROA not before: Wed 20 Dec 2023 19:55:03 +0000
ROA not after: Wed 18 Dec 2024 20:00:03 +0000
asID: 28234
IP address blocks: 189.127.202.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:43:e2:4b:29:d3:72:a7:54:dc:da:42:53:76:9b:68:43:50:f4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5929470213BAFF684FBF82D56F8228968AA3EADA
Validity
Not Before: Dec 20 19:55:03 2023 GMT
Not After : Dec 18 20:00:03 2024 GMT
Subject: CN=141FEF3953F4ED2372A8CA3946548EFDF7EDF4B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:71:1c:4f:eb:a3:56:33:10:c8:4f:46:8b:9e:
72:55:1a:cc:d4:39:61:2f:d7:ff:56:a9:79:df:71:
8a:04:b4:89:6d:a9:6e:46:06:df:13:40:c9:43:1b:
22:28:9e:1e:e9:ac:9e:2e:49:35:dd:21:0a:b7:28:
26:92:7c:dd:bd:5b:25:90:2f:57:12:06:4d:a2:37:
e3:33:99:c0:6b:4e:31:b9:dc:d7:45:97:20:ae:e3:
d7:7f:ca:e2:74:49:ae:67:73:58:9f:92:f9:0a:22:
5f:37:a3:96:13:3c:86:c0:79:aa:e2:3e:c7:16:05:
04:c9:fb:b9:88:eb:a6:5d:39:9a:11:41:99:d9:c9:
bd:f7:72:67:41:f4:44:0e:25:9f:ec:51:77:96:df:
d5:61:f2:e6:a0:94:42:c7:14:57:e0:eb:8f:bd:f6:
c1:ac:1a:cf:3d:2c:9a:e5:dd:ae:2b:9f:de:2b:96:
93:c4:8f:bd:ff:70:3b:d1:c5:57:3c:78:98:67:ba:
87:df:17:8e:4b:bf:fa:23:a3:8a:9e:55:df:c6:05:
2e:d6:f4:e6:4b:52:82:2a:93:46:c6:be:7c:a7:af:
e1:db:09:ce:30:e1:5a:34:37:e3:8f:81:83:7c:86:
22:b5:59:fd:d2:bd:19:55:2f:37:5e:1f:54:b0:c8:
fd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1F:EF:39:53:F4:ED:23:72:A8:CA:39:46:54:8E:FD:F7:ED:F4:B3
X509v3 Authority Key Identifier:
keyid:59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/5929470213BAFF684FBF82D56F8228968AA3EADA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3230322e302f32332d3233203d3e203238323334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.127.202.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:77:46:d4:81:c2:07:d6:70:20:bf:1a:54:d9:27:7e:d9:1a:
4c:53:d4:89:6e:82:df:47:08:8c:f9:4b:e8:9c:eb:86:ac:39:
5b:0d:34:6a:ee:25:88:8f:39:ad:47:37:f5:81:1b:ba:91:c1:
d2:62:0c:18:34:a3:11:05:cb:1c:31:de:04:90:4f:ef:68:da:
e2:e6:97:f6:1e:4e:89:38:f3:91:00:aa:5a:37:17:31:fe:29:
c0:0f:84:50:f2:6b:ab:d5:c7:31:a0:dc:2d:5a:d0:7e:b2:bb:
69:56:36:79:d2:e0:49:02:04:63:23:37:39:9e:e9:64:84:3c:
5f:d8:13:c7:21:32:d8:ec:17:37:5d:3c:7a:26:bb:24:22:74:
10:60:53:7e:da:03:47:68:78:1e:51:14:5d:15:fd:52:ed:70:
b4:09:1a:c5:e7:fd:2a:2a:fc:24:95:92:02:74:b7:eb:5e:d9:
2f:b1:60:b4:4b:9d:a9:da:d8:cc:f1:1a:e9:eb:f5:2b:62:3c:
5b:10:4e:36:ca:b4:9d:c2:4d:50:94:6e:cd:e4:4b:09:2d:a0:
45:e2:8f:9e:8f:ad:ca:c1:9d:3d:82:57:09:75:47:50:c0:c2:
cb:86:51:91:2f:6c:a4:74:2f:dc:6a:7c:ed:e1:c0:c6:b8:f7:
18:57:8a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:58 2025 by rpki-client