![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3132382e3230312e3132322e302f32332d3233203d3e20323632353332.roa
File: 3132382e3230312e3132322e302f32332d3233203d3e20323632353332.roa (raw, json)
Hash identifier: R/rIDYYriTj7LAC+lQ1d9TjWb5Vjn/8mL6BckZk+3so=
Subject key identifier: 88:A7:8B:0E:48:94:54:A9:9E:C8:86:B1:FE:95:9C:89:1F:C8:29:9B
Certificate issuer: /CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Certificate serial: 03FB8B081DA0F101FF084D0F4453094F06EE6C93
Authority key identifier: C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3132382e3230312e3132322e302f32332d3233203d3e20323632353332.roa
Signing time: Wed 28 Feb 2024 14:12:47 +0000
ROA not before: Wed 28 Feb 2024 14:07:47 +0000
ROA not after: Wed 26 Feb 2025 14:12:47 +0000
asID: 262532
IP address blocks: 128.201.122.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:fb:8b:08:1d:a0:f1:01:ff:08:4d:0f:44:53:09:4f:06:ee:6c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Validity
Not Before: Feb 28 14:07:47 2024 GMT
Not After : Feb 26 14:12:47 2025 GMT
Subject: CN=88A78B0E489454A99EC886B1FE959C891FC8299B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:20:15:78:39:cc:13:c3:2b:13:fc:3b:72:be:
7e:c3:5c:20:6d:a9:76:f2:4f:ce:d5:27:47:7a:1f:
44:21:23:77:64:24:53:bf:87:4a:e0:9e:c8:99:99:
b8:8d:d6:60:28:bf:b0:d3:d7:41:b8:e5:5a:58:ca:
e9:26:ec:1b:0d:1f:8c:d6:36:cd:39:c1:1b:85:3b:
5b:e6:e2:ea:40:92:71:b5:9b:84:30:9e:45:80:cb:
88:23:76:4c:81:06:89:12:85:78:42:a2:05:b4:8d:
7e:9f:e7:dc:40:b6:00:80:e0:48:42:eb:39:ec:34:
99:db:f1:fc:55:a5:3b:c8:59:e3:86:f6:3a:23:fb:
c7:40:e1:f1:74:c5:a5:e8:98:fd:27:ec:96:66:46:
c0:c3:2a:38:bc:9a:80:60:d9:62:dd:c1:da:19:c5:
ab:65:8d:ab:eb:7b:00:0f:8a:4b:f7:6f:0d:d0:0a:
99:8b:fb:9a:1f:36:5e:d4:28:a6:80:70:3a:5e:ca:
fb:19:f6:73:da:6c:a5:61:ff:01:48:b9:ed:4c:29:
47:fb:90:0d:4c:5b:49:65:75:16:c9:99:f5:ba:a1:
18:cf:94:89:60:dd:e9:9d:48:44:ce:a9:24:41:cb:
4c:bf:0d:0e:2c:b2:dc:f1:b4:50:0d:9a:e2:9a:36:
b3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A7:8B:0E:48:94:54:A9:9E:C8:86:B1:FE:95:9C:89:1F:C8:29:9B
X509v3 Authority Key Identifier:
keyid:C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3132382e3230312e3132322e302f32332d3233203d3e20323632353332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.122.0/23
Signature Algorithm: sha256WithRSAEncryption
15:58:75:4b:ca:99:fc:b4:e3:e3:d4:7f:57:1a:0a:65:e2:aa:
15:79:3e:07:f9:5d:c7:f4:ee:5e:30:92:e1:da:ed:7d:7b:7a:
e9:5f:93:9c:3d:24:b5:2c:53:fe:7d:f6:8b:cc:23:4e:57:4c:
de:e6:65:89:4d:8f:9d:dd:75:a7:5f:41:7f:30:ad:b2:a4:7a:
03:10:99:3d:d0:35:bf:7a:c2:dd:96:a6:3e:98:5a:0c:2b:0c:
a7:86:85:f6:ca:13:1b:07:fe:1d:57:56:54:fb:87:79:46:a9:
70:dd:cf:10:31:aa:b2:fc:02:05:94:f8:4e:4c:f3:0a:eb:f0:
e9:a9:fa:35:0a:38:d5:03:6d:46:6c:91:5e:f4:09:b8:f4:5e:
f5:41:e2:ca:57:e7:1a:16:4e:a7:a8:ab:45:1c:3c:43:fa:f3:
32:a4:3d:25:eb:f9:fa:fb:1e:7e:16:8a:3f:4f:a7:63:1a:10:
62:59:c7:19:dc:4f:22:b3:8c:2b:1d:cc:9c:69:4e:6e:b2:33:
1f:7b:18:ae:ce:f5:53:0c:82:1a:ab:6c:fd:ac:18:60:7a:3f:
5e:51:62:2f:dd:f4:a1:fa:3d:44:93:a2:3a:1d:bf:a1:a1:41:
90:be:71:c0:17:de:9b:1a:a3:d5:88:5e:98:d7:c7:f9:04:ca:
3f:51:a9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:39 2025 by rpki-client