![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/0/3133382e3230342e3233352e302f32342d3234203d3e20323633393137.roa
File: 3133382e3230342e3233352e302f32342d3234203d3e20323633393137.roa (raw, json)
Hash identifier: yA6m8mqizV0M0shu675s9QcURpMtEoO9UixVXdCb1Dw=
Subject key identifier: 85:49:1A:7E:02:09:AB:8A:FF:BD:6D:77:3F:D3:E1:E5:69:79:2C:7F
Certificate issuer: /CN=0533041425AD9B79362F91E0E8FDCC1A65E2CFD3
Certificate serial: 15134836B68A583644E5D64F5474EA46839A8D95
Authority key identifier: 05:33:04:14:25:AD:9B:79:36:2F:91:E0:E8:FD:CC:1A:65:E2:CF:D3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0533041425AD9B79362F91E0E8FDCC1A65E2CFD3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/0/3133382e3230342e3233352e302f32342d3234203d3e20323633393137.roa
Signing time: Sat 16 Dec 2023 00:00:00 +0000
ROA not before: Fri 15 Dec 2023 23:55:00 +0000
ROA not after: Sat 14 Dec 2024 00:00:00 +0000
asID: 263917
IP address blocks: 138.204.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:13:48:36:b6:8a:58:36:44:e5:d6:4f:54:74:ea:46:83:9a:8d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0533041425AD9B79362F91E0E8FDCC1A65E2CFD3
Validity
Not Before: Dec 15 23:55:00 2023 GMT
Not After : Dec 14 00:00:00 2024 GMT
Subject: CN=85491A7E0209AB8AFFBD6D773FD3E1E569792C7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:29:0e:e3:8f:c7:cf:49:e3:a5:8b:c4:a8:d4:
f9:a0:6a:52:29:10:5d:b6:d8:7e:93:df:5c:e7:bb:
d6:1f:7e:8c:f6:cb:ef:28:a0:d4:02:07:48:2b:34:
23:64:c3:b7:25:f4:eb:7e:5b:83:91:5b:5b:a7:99:
6d:08:e3:00:9f:c8:0b:80:bb:1b:d1:a4:1c:8b:8d:
46:5c:7b:7c:99:93:26:b5:21:95:1a:a9:0f:5a:d4:
26:8f:c3:6d:c9:19:20:2a:39:7e:c7:d5:61:0b:c2:
47:3b:bd:0f:08:ef:71:ac:bb:df:01:83:9d:a6:bf:
ba:16:aa:bc:10:79:de:34:d0:af:b8:1f:7b:d4:8e:
33:33:c7:54:fc:4e:53:3f:3a:0a:a0:f0:00:1c:54:
9d:6d:8c:0c:fe:ac:4b:df:f8:97:5a:43:e0:d8:b6:
c3:29:04:f9:e6:1b:cb:b3:4d:11:44:7e:eb:9b:a2:
09:f8:ee:ac:d9:d3:8f:c0:43:24:a3:95:9a:f0:0f:
29:23:dd:11:2c:2f:06:3c:83:e8:bf:32:cd:a3:e5:
4d:1f:3c:dd:83:66:e7:f2:21:0e:12:7b:9d:62:63:
52:e3:2e:71:ab:45:0a:d3:ea:a6:c0:24:7c:e0:90:
5b:ac:86:71:64:88:9e:5f:7c:ad:d8:e9:5e:45:e4:
87:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:49:1A:7E:02:09:AB:8A:FF:BD:6D:77:3F:D3:E1:E5:69:79:2C:7F
X509v3 Authority Key Identifier:
keyid:05:33:04:14:25:AD:9B:79:36:2F:91:E0:E8:FD:CC:1A:65:E2:CF:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/0/0533041425AD9B79362F91E0E8FDCC1A65E2CFD3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0533041425AD9B79362F91E0E8FDCC1A65E2CFD3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/0/3133382e3230342e3233352e302f32342d3234203d3e20323633393137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.235.0/24
Signature Algorithm: sha256WithRSAEncryption
60:40:9e:91:d8:18:3e:3e:51:07:f8:22:41:e6:18:97:fd:67:
a8:0d:80:0a:e8:e0:c5:31:fa:a4:12:2a:ae:bd:58:08:e4:f4:
ac:18:97:bb:aa:cf:5f:71:90:81:88:5e:9b:9c:ed:9c:7c:c2:
a2:34:6e:11:6d:4b:27:ca:74:97:91:eb:3d:6e:fd:78:fb:3a:
75:83:f2:41:b5:7b:e4:c6:e0:95:00:49:06:19:8b:59:ee:95:
89:de:27:5a:47:2b:69:51:89:de:61:88:f8:74:e0:b2:d7:4a:
e4:1b:86:cf:76:57:20:6b:e5:d4:c2:b4:18:00:15:f4:45:da:
21:66:33:55:c6:e8:97:fb:53:f1:8d:c0:e0:34:7a:33:a4:e1:
1c:e8:0c:03:f1:a9:43:f5:57:ac:2f:8e:61:9a:15:8a:ae:65:
1a:45:8c:fe:00:03:cc:4b:f9:bd:35:dc:a2:10:77:fe:ce:bc:
c0:98:cf:78:2a:13:f9:76:62:cb:d4:24:12:4b:12:9c:14:43:
1b:a5:59:c7:a4:90:02:97:16:0a:d2:07:ca:be:1f:b2:ba:7c:
6a:eb:9c:7d:92:83:b2:45:e9:ac:2e:ba:4f:4b:b4:ea:20:81:
74:27:e5:3e:f7:cd:6c:b6:44:04:40:cb:0c:56:f6:f7:5d:78:
54:6f:f5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:55:43 2025 by rpki-client