![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/1/34352e3136322e39342e302f32342d3234203d3e20323638353137.roa
File: 34352e3136322e39342e302f32342d3234203d3e20323638353137.roa (raw, json)
Hash identifier: FAN5bbZNbrOHmHSFATttwi1fwHIbgMylKEInxtTY0LI=
Subject key identifier: FA:C2:D5:BB:BE:14:1A:1F:60:67:A1:19:EB:07:70:1D:0D:FE:39:88
Certificate issuer: /CN=D029A3E7478998493D96D0D6B9C212CDC5530659
Certificate serial: 654018040133283C5D82056A063BE8C9B3CCE08E
Authority key identifier: D0:29:A3:E7:47:89:98:49:3D:96:D0:D6:B9:C2:12:CD:C5:53:06:59
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D029A3E7478998493D96D0D6B9C212CDC5530659.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/1/34352e3136322e39342e302f32342d3234203d3e20323638353137.roa
Signing time: Thu 11 Apr 2024 03:02:36 +0000
ROA not before: Thu 11 Apr 2024 02:57:36 +0000
ROA not after: Thu 10 Apr 2025 03:02:36 +0000
asID: 268517
IP address blocks: 45.162.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:40:18:04:01:33:28:3c:5d:82:05:6a:06:3b:e8:c9:b3:cc:e0:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D029A3E7478998493D96D0D6B9C212CDC5530659
Validity
Not Before: Apr 11 02:57:36 2024 GMT
Not After : Apr 10 03:02:36 2025 GMT
Subject: CN=FAC2D5BBBE141A1F6067A119EB07701D0DFE3988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b5:24:f0:b8:10:57:7f:dc:5a:b8:fe:ec:f1:
7e:6f:9c:77:18:dd:ac:82:dc:a8:7a:c6:cb:a1:0b:
89:0a:18:1f:d2:0c:64:fe:f5:a4:e2:b7:a3:60:0f:
b5:2c:69:7b:ce:5b:00:ce:f7:1a:75:89:c1:3d:bc:
f2:f3:aa:37:c3:96:6a:8f:fc:a7:0c:15:56:c2:ee:
c2:bc:4c:5a:27:6d:6a:bb:39:20:2e:fe:38:28:7f:
33:2b:6e:1e:a0:41:df:f7:50:a5:bc:2e:a6:43:db:
fb:f3:25:40:99:fd:92:86:97:a5:76:19:f0:2d:32:
26:1a:6b:75:11:9e:08:36:96:63:07:32:c6:60:c0:
be:58:69:dd:09:ea:ed:29:0f:95:2c:62:48:e2:a1:
7d:86:63:e9:1a:df:44:cb:c5:d7:26:aa:65:4f:f6:
af:bc:1e:f0:31:d5:85:be:53:1f:3d:e7:94:d0:ce:
ea:ac:cb:db:56:a1:25:6a:20:dd:7d:cf:34:76:bb:
ac:4e:91:6b:43:03:76:9a:47:23:7b:20:2b:3a:8d:
f5:21:03:00:70:06:0c:1b:e6:24:48:af:ec:d6:5c:
6e:56:0e:b9:c6:1f:47:ee:b9:6c:14:06:ca:6f:97:
de:f2:1c:4e:55:cf:d2:85:bb:1a:1b:73:d9:7a:ba:
71:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C2:D5:BB:BE:14:1A:1F:60:67:A1:19:EB:07:70:1D:0D:FE:39:88
X509v3 Authority Key Identifier:
keyid:D0:29:A3:E7:47:89:98:49:3D:96:D0:D6:B9:C2:12:CD:C5:53:06:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/1/D029A3E7478998493D96D0D6B9C212CDC5530659.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D029A3E7478998493D96D0D6B9C212CDC5530659.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/1/34352e3136322e39342e302f32342d3234203d3e20323638353137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.162.94.0/24
Signature Algorithm: sha256WithRSAEncryption
85:1c:eb:d0:88:7c:37:18:07:86:97:70:1a:69:bc:d9:de:9c:
c6:43:91:e7:be:4a:be:e1:b7:a8:35:26:5e:f1:2c:68:c2:63:
4a:3b:09:ce:fe:66:86:01:75:86:0f:82:13:3e:c4:1d:c2:ab:
1e:aa:e0:8f:92:77:25:77:b8:11:c5:da:7a:85:6b:56:b8:44:
25:9c:d5:9b:a0:0b:23:e0:52:ef:48:b7:39:b1:b0:16:4d:d0:
c5:03:fe:83:5b:97:f7:9c:1b:28:41:f1:34:39:8f:70:fc:97:
c3:50:6e:34:0f:fc:68:49:0a:da:6b:f0:83:d0:72:65:80:74:
b8:04:1f:e5:ba:b2:5e:80:8a:42:4f:98:14:00:3c:1d:32:50:
a3:d3:5a:73:bf:af:ec:b6:31:da:8f:9f:7a:3d:09:0f:6d:6d:
5f:b2:a0:6a:db:ad:32:97:5c:34:b1:a7:6e:51:34:19:42:24:
c9:27:e9:b1:91:91:a1:fb:b7:a3:5d:f1:e6:a2:e5:fc:80:af:
bc:a0:49:70:aa:ac:cf:aa:27:e6:e9:9e:e0:11:86:3d:22:b3:
3e:2a:df:2e:0c:68:bc:9e:8d:57:1b:3f:4f:1b:d2:81:5b:29:
dd:30:e2:f2:04:e0:dc:fa:1e:d1:e4:d4:d3:01:b7:25:8b:26:
77:34:f3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:28 2025 by rpki-client