![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3138362e3234392e3137362e302f32332d3233203d3e20323632353332.roa
File: 3138362e3234392e3137362e302f32332d3233203d3e20323632353332.roa (raw, json)
Hash identifier: hGd6bEz5aD5TKGJNlxjYmYPyK9iaoX8sCe2OwRBc4H4=
Subject key identifier: AA:24:FD:84:E9:DA:7E:8E:74:1E:36:FC:8C:B1:1D:77:A5:D3:4A:38
Certificate issuer: /CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Certificate serial: 384533DFAC40B43BAFACC50A31C25788B7054587
Authority key identifier: C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3138362e3234392e3137362e302f32332d3233203d3e20323632353332.roa
Signing time: Wed 28 Feb 2024 14:12:40 +0000
ROA not before: Wed 28 Feb 2024 14:07:40 +0000
ROA not after: Wed 26 Feb 2025 14:12:40 +0000
asID: 262532
IP address blocks: 186.249.176.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:45:33:df:ac:40:b4:3b:af:ac:c5:0a:31:c2:57:88:b7:05:45:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Validity
Not Before: Feb 28 14:07:40 2024 GMT
Not After : Feb 26 14:12:40 2025 GMT
Subject: CN=AA24FD84E9DA7E8E741E36FC8CB11D77A5D34A38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c2:8f:6b:12:07:cb:96:1f:64:d6:ba:a4:22:
23:06:b8:12:a2:a3:c6:c4:5f:ec:e4:2b:c9:08:a1:
45:11:7e:3e:3f:e2:7d:bb:a8:e2:20:c8:9b:1d:6c:
5d:26:94:74:25:60:e2:59:06:a1:b3:82:c2:57:b4:
6e:5b:68:cc:50:b9:44:08:e2:c3:ab:1c:29:38:b1:
27:60:ec:6e:fc:b7:56:4a:6d:cf:0c:a3:4b:a0:8f:
e0:a6:cb:15:42:e5:fc:23:f7:b5:68:e9:f1:7a:fa:
f9:7b:98:8b:0d:65:fc:f2:49:ff:1c:b3:d0:60:75:
be:cf:d2:7d:6a:8e:39:69:6c:8b:0e:a8:61:93:ba:
d2:d2:54:6e:ae:2b:13:e3:07:20:1d:ae:74:3e:66:
99:95:da:5c:4d:35:aa:9c:ac:6a:e6:9b:c9:31:b5:
97:c5:01:7a:ed:44:15:d1:ca:02:f1:31:ab:51:dc:
71:fb:7f:23:b6:8c:fb:ec:f1:6c:99:1d:d9:ae:75:
de:51:48:92:e0:b3:bd:2f:44:9d:17:e1:d4:b0:b2:
58:1a:72:33:7b:47:f1:92:4d:4f:2e:0e:8b:32:05:
20:e7:47:43:67:4c:b3:a8:29:09:cf:d7:85:92:11:
43:12:84:99:9f:10:7b:b7:6a:d2:1e:1e:14:56:0b:
ba:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:24:FD:84:E9:DA:7E:8E:74:1E:36:FC:8C:B1:1D:77:A5:D3:4A:38
X509v3 Authority Key Identifier:
keyid:C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3138362e3234392e3137362e302f32332d3233203d3e20323632353332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.249.176.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:f9:00:c2:41:f1:2d:2e:82:e4:3c:83:8b:16:00:f3:cc:90:
1e:02:13:55:f7:d7:87:23:05:ee:c7:8f:02:a5:04:83:8a:67:
47:14:35:78:ce:27:23:9c:72:04:23:3b:ac:bb:e9:af:90:67:
f1:cb:a3:51:51:f2:fb:21:33:86:9f:8d:5c:3b:ea:e3:ba:2c:
51:53:c6:7c:dd:4a:a5:1b:83:ff:59:02:f8:83:f9:72:2b:d8:
6e:5e:66:c4:b6:b1:25:40:98:b1:06:83:33:fb:a2:7e:81:07:
95:0f:53:d3:8f:f1:b1:f6:2e:a0:8c:4b:67:3e:3e:07:b7:5f:
74:ca:cb:1b:3c:ba:18:e3:5f:f3:89:e4:49:1b:06:a8:00:1a:
c2:13:b7:e3:d6:df:52:87:73:d8:9e:4c:af:a2:6d:f8:f1:2b:
d2:26:7e:1f:ea:02:4d:40:71:c5:1e:86:a4:ab:91:67:13:d2:
a3:c9:18:8b:52:02:fd:73:d2:3b:0f:b4:a3:2a:7a:e2:a4:f9:
81:99:31:84:79:86:cb:16:e8:db:34:14:c8:f0:90:21:f6:73:
0e:b3:22:1b:91:9d:36:14:02:a3:77:9c:5c:26:2e:61:f8:2f:
f4:6c:0a:e5:31:3f:0b:ab:80:7b:cb:79:31:6b:f7:57:72:c3:
c4:28:60:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:27 2025 by rpki-client