![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/3138372e3131312e31342e302f32342d3234203d3e20323632373039.roa
File: 3138372e3131312e31342e302f32342d3234203d3e20323632373039.roa (raw, json)
Hash identifier: 7ag9wi+jxTM4eRL2xHHDYMcsBVSu4jUCdAiX6wee7aE=
Subject key identifier: 9B:4B:42:75:6F:3A:6A:FC:D3:EA:D9:3D:74:3E:79:A0:4E:EE:1C:A8
Certificate issuer: /CN=486B0A016919FF614B0BDA23F974C7BB3EECDA00
Certificate serial: 35AA3619B39DF98E582A5A23B6D2B532F0801871
Authority key identifier: 48:6B:0A:01:69:19:FF:61:4B:0B:DA:23:F9:74:C7:BB:3E:EC:DA:00
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/486B0A016919FF614B0BDA23F974C7BB3EECDA00.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/3138372e3131312e31342e302f32342d3234203d3e20323632373039.roa
Signing time: Sun 23 Apr 2023 20:49:30 +0000
ROA not before: Sun 23 Apr 2023 20:44:30 +0000
ROA not after: Sun 21 Apr 2024 20:49:30 +0000
asID: 262709
IP address blocks: 187.111.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:aa:36:19:b3:9d:f9:8e:58:2a:5a:23:b6:d2:b5:32:f0:80:18:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=486B0A016919FF614B0BDA23F974C7BB3EECDA00
Validity
Not Before: Apr 23 20:44:30 2023 GMT
Not After : Apr 21 20:49:30 2024 GMT
Subject: CN=9B4B42756F3A6AFCD3EAD93D743E79A04EEE1CA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:70:84:ee:2d:e9:be:5b:3f:d8:a4:32:3a:19:
33:66:d8:0b:06:19:2a:c1:4d:22:e1:66:9b:8e:c1:
29:e1:f6:fe:10:42:3a:f9:d9:b7:aa:93:a0:df:cf:
6d:11:e5:83:08:e5:54:6f:37:50:c6:f5:22:a2:61:
a0:67:53:12:63:2a:95:db:23:b9:41:03:73:4e:33:
da:9d:ab:23:5e:34:a3:1f:e1:32:5c:bc:8b:fa:66:
a1:41:ec:9c:67:73:95:9f:71:5e:fb:68:0f:42:26:
f8:8e:80:3d:e9:e8:17:d4:06:93:7c:ee:70:19:5d:
b8:dd:21:50:64:9e:49:6d:56:94:55:45:e9:b5:90:
75:34:db:bd:da:66:2b:a6:57:97:e5:a1:fd:ec:ed:
e7:5e:d6:bc:04:c7:8b:45:8f:ec:f4:c1:0d:58:4b:
84:2a:6c:b1:95:ac:65:98:a8:3e:dd:93:23:61:0b:
ea:08:03:cd:9f:e9:1e:ed:a3:8c:c7:a3:a4:30:5a:
f8:ed:09:00:c5:d2:6b:40:18:0a:60:7a:f3:d4:98:
7e:51:1b:03:6d:21:97:dd:ca:85:37:67:ad:87:38:
a0:9e:1b:49:9a:29:18:45:fb:12:66:16:2b:a7:8f:
0e:a8:50:bc:ac:02:e2:ed:e0:a6:5c:bd:e3:ec:79:
91:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4B:42:75:6F:3A:6A:FC:D3:EA:D9:3D:74:3E:79:A0:4E:EE:1C:A8
X509v3 Authority Key Identifier:
keyid:48:6B:0A:01:69:19:FF:61:4B:0B:DA:23:F9:74:C7:BB:3E:EC:DA:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/486B0A016919FF614B0BDA23F974C7BB3EECDA00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/486B0A016919FF614B0BDA23F974C7BB3EECDA00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/3138372e3131312e31342e302f32342d3234203d3e20323632373039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.111.14.0/24
Signature Algorithm: sha256WithRSAEncryption
67:bd:38:a3:60:21:1f:75:86:e6:8c:c4:ea:29:bb:17:b5:4f:
b7:c0:5f:f1:64:ce:1c:94:26:9a:4d:cc:39:ae:9c:90:b6:1f:
9e:5d:49:94:c8:a3:19:3e:7a:a7:71:5c:8d:3a:fa:40:c2:17:
2f:59:5e:e2:ba:d6:fb:5f:b1:b9:90:7a:79:12:72:1d:4b:53:
43:39:a4:91:69:c7:38:f5:e6:60:04:69:73:b6:9e:c3:a8:86:
61:8f:d9:28:b1:79:81:a6:25:6e:24:aa:e5:e8:73:e5:79:a4:
73:c7:77:c9:16:06:e5:5e:2d:f7:81:53:19:f7:81:30:ad:3a:
f2:8f:ad:69:f9:92:26:3e:9d:d0:0e:3e:1d:2f:20:eb:88:ab:
cf:a5:79:28:7a:b2:9a:c2:c9:8d:35:34:32:dd:06:04:94:dd:
6d:c1:3f:c5:b7:2c:db:97:d9:31:11:0a:94:44:40:30:68:c7:
d2:ed:d7:1b:0a:97:cb:4a:8a:fe:f3:d4:8d:f8:5c:25:b2:82:
45:c4:3f:20:35:8b:f8:d3:29:64:d3:16:66:8c:5a:71:9b:3e:
7a:84:29:6e:d2:34:17:77:97:4d:9c:60:33:ea:3e:d5:a0:48:
47:7a:25:e1:76:59:02:89:ea:56:09:12:f4:fb:5a:80:f9:93:
af:7e:b6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:44 2025 by rpki-client