![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3138362e3234392e3137362e302f32302d3230203d3e20323632353332.roa
File: 3138362e3234392e3137362e302f32302d3230203d3e20323632353332.roa (raw, json)
Hash identifier: DHBr4w2AU5uJJ3cq8VqEJiLBXq1j9v1eivTdRe+PBIQ=
Subject key identifier: 5E:62:30:43:3B:C2:FC:A7:45:60:7B:1B:58:B7:39:D0:98:25:16:57
Certificate issuer: /CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Certificate serial: 5DD8BD7A7E8C40B7FD5F2999DFD3F5AA2FEAF051
Authority key identifier: C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3138362e3234392e3137362e302f32302d3230203d3e20323632353332.roa
Signing time: Wed 28 Feb 2024 14:12:35 +0000
ROA not before: Wed 28 Feb 2024 14:07:35 +0000
ROA not after: Wed 26 Feb 2025 14:12:35 +0000
asID: 262532
IP address blocks: 186.249.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:d8:bd:7a:7e:8c:40:b7:fd:5f:29:99:df:d3:f5:aa:2f:ea:f0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Validity
Not Before: Feb 28 14:07:35 2024 GMT
Not After : Feb 26 14:12:35 2025 GMT
Subject: CN=5E6230433BC2FCA745607B1B58B739D098251657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0c:c8:7e:64:ce:c7:3c:4e:bc:98:28:aa:b1:
9e:4c:b1:db:d5:39:11:9b:c9:2d:99:df:e5:0f:e4:
66:9d:44:74:46:b4:2b:6c:67:eb:4e:19:6a:d7:f2:
3e:ec:e3:bd:6a:c9:60:52:51:18:e6:37:55:88:dd:
0b:c6:dc:6b:dc:16:ac:b3:f2:d0:34:69:4f:8d:c2:
f9:cf:93:f0:e9:07:c5:57:6c:c2:f0:f2:c5:26:24:
16:1c:fa:62:eb:f4:07:a1:f7:91:a1:2c:7d:48:d6:
f8:2c:64:3b:5d:c2:f2:7a:70:c2:78:41:f3:40:56:
c8:52:91:75:e1:c4:c5:0d:0a:ca:10:b1:fa:b4:47:
6a:fa:ce:8d:e6:00:de:62:1c:c3:e1:8d:08:41:c6:
9f:ca:77:26:e4:13:a4:d2:da:14:81:f0:46:30:c7:
d2:dd:8b:73:e1:d4:d3:30:ee:49:35:28:e0:ec:19:
4d:a2:af:f8:5a:c3:18:49:1d:8a:82:af:30:e2:51:
e3:2f:f8:bf:f9:1e:06:87:87:27:7e:ce:75:e5:e6:
01:1d:bd:38:99:3c:bc:c7:68:3d:1e:34:42:0e:b7:
6d:4f:86:80:e5:05:f8:82:39:4d:ff:b3:15:83:ff:
a9:31:53:15:13:e5:2b:e1:3d:75:58:79:bf:b3:7c:
3f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:62:30:43:3B:C2:FC:A7:45:60:7B:1B:58:B7:39:D0:98:25:16:57
X509v3 Authority Key Identifier:
keyid:C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3138362e3234392e3137362e302f32302d3230203d3e20323632353332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.249.176.0/20
Signature Algorithm: sha256WithRSAEncryption
83:38:17:23:eb:9b:79:3a:24:c4:45:bc:f1:cb:2a:61:59:cf:
4c:eb:ea:4b:b7:46:7f:8f:99:a2:f0:e0:03:40:9f:8d:81:f7:
72:b0:a6:f8:32:64:da:41:c0:cc:a5:4b:e5:93:34:ed:b7:9d:
15:23:ce:38:45:e1:a9:18:f8:4c:cb:f4:27:2d:2d:93:80:20:
68:fd:ea:03:29:f0:c7:22:d5:4d:19:95:1f:3d:fd:d7:5b:6f:
d1:a0:95:3f:cf:2b:ad:5f:3a:c6:89:c0:d4:88:16:fa:d1:4b:
6e:c4:43:f5:26:31:a6:27:17:9a:a4:b6:77:e0:91:0f:1c:74:
ec:78:c1:66:88:08:23:da:f5:75:2f:fc:74:94:86:6a:22:c3:
11:36:7f:89:83:7c:58:f8:07:c3:07:06:ed:b2:20:0a:a6:a7:
a1:4d:58:9a:2f:a4:cd:50:29:3f:b7:fa:77:ae:fc:f1:08:61:
85:7e:c0:2f:bb:c6:68:cb:0a:13:9a:ae:22:b3:d7:00:8a:10:
ff:0d:ee:20:0a:a1:ed:e9:9b:26:0e:4a:0d:f8:7e:4e:75:82:
73:0e:5e:eb:cc:d8:64:e5:80:af:87:ba:ff:3d:f6:23:70:2d:
83:db:25:c0:5c:ee:b7:1c:c4:1e:7e:61:44:26:7f:61:9b:e6:
95:df:ef:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:02 2025 by rpki-client