![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/0/34352e3139312e3230342e302f32322d3234203d3e20323636353339.roa
File: 34352e3139312e3230342e302f32322d3234203d3e20323636353339.roa (raw, json)
Hash identifier: fNK6YLbZy1RjgM0glC1ojUtB3LsP+XL5u4N1NOqq7K8=
Subject key identifier: CF:8D:0F:4F:D9:E4:53:39:2A:C5:B3:8C:F1:0A:29:9E:63:06:CA:1B
Certificate issuer: /CN=EA7C9C8C00B2D4CEFE025D9003E9FF4B2331704D
Certificate serial: 067BA369AC0DD1E347D54DF8EC2D45E8213F485A
Authority key identifier: EA:7C:9C:8C:00:B2:D4:CE:FE:02:5D:90:03:E9:FF:4B:23:31:70:4D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA7C9C8C00B2D4CEFE025D9003E9FF4B2331704D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/0/34352e3139312e3230342e302f32322d3234203d3e20323636353339.roa
Signing time: Wed 29 Nov 2023 10:55:35 +0000
ROA not before: Wed 29 Nov 2023 10:50:35 +0000
ROA not after: Wed 27 Nov 2024 10:55:35 +0000
asID: 266539
IP address blocks: 45.191.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:7b:a3:69:ac:0d:d1:e3:47:d5:4d:f8:ec:2d:45:e8:21:3f:48:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA7C9C8C00B2D4CEFE025D9003E9FF4B2331704D
Validity
Not Before: Nov 29 10:50:35 2023 GMT
Not After : Nov 27 10:55:35 2024 GMT
Subject: CN=CF8D0F4FD9E453392AC5B38CF10A299E6306CA1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bc:a4:36:10:da:dd:b0:a9:cc:59:81:8b:14:
ed:d2:82:82:36:94:66:df:d8:7b:30:01:69:a0:4f:
b2:4a:0f:d3:63:ed:1c:ac:40:af:92:cf:84:f6:d8:
20:56:4c:53:c8:1e:12:5f:d3:42:f7:40:93:ba:e0:
3e:2f:2d:43:40:84:b3:ce:d8:86:4c:9d:cf:9f:8b:
5d:71:82:37:97:6f:f0:21:19:43:36:5c:40:a1:d6:
82:08:6a:ed:a7:84:e0:05:2a:8e:56:c3:94:bb:5b:
6c:3a:e4:a7:5e:76:31:4f:56:c6:67:55:0b:81:e7:
b9:df:73:3f:15:34:aa:fc:73:22:7a:a3:f6:a8:32:
41:6f:1e:9a:58:ba:11:d4:38:00:6e:9e:c7:8e:5e:
0c:f9:36:e0:01:8c:29:71:09:0c:70:bc:77:29:3a:
b9:68:c9:02:e4:43:ab:3d:b5:64:bb:79:99:4f:97:
7a:ae:1e:2f:b2:b0:98:97:41:2a:8f:12:b5:13:41:
9a:07:61:25:8e:44:fa:78:f5:70:e8:b8:69:b3:a2:
f4:b8:d2:77:c1:91:de:93:52:37:b7:5e:78:81:87:
1c:9c:fd:a9:b5:56:c5:42:3a:41:6c:91:51:4e:f4:
09:82:9f:99:c4:a2:47:75:d7:fd:43:86:ee:40:f0:
e9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8D:0F:4F:D9:E4:53:39:2A:C5:B3:8C:F1:0A:29:9E:63:06:CA:1B
X509v3 Authority Key Identifier:
keyid:EA:7C:9C:8C:00:B2:D4:CE:FE:02:5D:90:03:E9:FF:4B:23:31:70:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/0/EA7C9C8C00B2D4CEFE025D9003E9FF4B2331704D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA7C9C8C00B2D4CEFE025D9003E9FF4B2331704D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/0/34352e3139312e3230342e302f32322d3234203d3e20323636353339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.204.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:cc:c3:c6:c9:a6:1d:c0:95:a5:4b:ea:7e:b7:cb:f4:01:da:
32:fd:bd:ae:87:33:32:97:4a:2f:96:6e:a9:8b:33:3a:f2:d5:
46:72:4f:61:f8:41:b0:44:b3:9f:d5:04:ab:e3:f4:13:7a:a7:
48:e8:b9:a5:a1:63:a8:d4:3f:b7:e4:b0:d8:c5:3e:5e:c7:4f:
42:3b:ab:35:0e:5a:a7:74:1a:00:6b:8f:d9:e0:66:e6:31:c6:
6a:be:ac:83:43:df:2b:21:30:4a:b5:e5:22:e6:44:b8:85:29:
e4:62:44:2a:0d:f0:2c:6c:e9:85:f4:2a:80:97:0f:4f:70:25:
99:d6:b0:3d:2b:f0:1f:0d:41:01:2c:e8:2d:63:4e:96:5f:2c:
e1:84:37:8f:a8:bc:24:98:6c:1a:09:43:e4:ef:88:64:07:a6:
bc:bb:ef:7a:f3:98:f2:78:2d:61:76:2a:e0:37:2b:e5:a0:ac:
2c:c7:44:99:7a:db:73:20:f4:81:7f:f5:14:7d:35:a9:b0:a3:
5e:a5:ec:0a:87:28:94:b7:e6:52:de:f2:49:fa:89:03:82:55:
38:de:ca:94:09:e8:c0:28:9b:28:df:7d:8e:42:88:1b:79:2e:
db:f7:0a:7d:7c:63:61:e5:85:21:32:82:ec:75:0b:63:40:af:
ba:d4:35:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:03 2025 by rpki-client