![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Hyvr8kdMTNrgG9XbP7xo4k35WAdCcZP6D31eKCbPyq1c/0/3137302e3235342e38362e302f32332d3233203d3e20323635313132.roa
File: 3137302e3235342e38362e302f32332d3233203d3e20323635313132.roa (raw, json)
Hash identifier: oRGHecXQljCTCNJ/f+BGkVg6RpyML2VrHPbbmoEyL9U=
Subject key identifier: 0E:5C:CC:26:2D:76:FE:DA:B5:2A:0C:42:8F:DE:6A:4F:3B:CF:B6:40
Certificate issuer: /CN=B7326415BE734D8A751207ED27CE3E324C6FA9BE
Certificate serial: 66365D8E33AC1F7EE29CCB2A427FD11BD47736BC
Authority key identifier: B7:32:64:15:BE:73:4D:8A:75:12:07:ED:27:CE:3E:32:4C:6F:A9:BE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7326415BE734D8A751207ED27CE3E324C6FA9BE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Hyvr8kdMTNrgG9XbP7xo4k35WAdCcZP6D31eKCbPyq1c/0/3137302e3235342e38362e302f32332d3233203d3e20323635313132.roa
Signing time: Tue 19 Dec 2023 18:49:26 +0000
ROA not before: Tue 19 Dec 2023 18:44:26 +0000
ROA not after: Tue 17 Dec 2024 18:49:26 +0000
asID: 265112
IP address blocks: 170.254.86.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:36:5d:8e:33:ac:1f:7e:e2:9c:cb:2a:42:7f:d1:1b:d4:77:36:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7326415BE734D8A751207ED27CE3E324C6FA9BE
Validity
Not Before: Dec 19 18:44:26 2023 GMT
Not After : Dec 17 18:49:26 2024 GMT
Subject: CN=0E5CCC262D76FEDAB52A0C428FDE6A4F3BCFB640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dc:aa:70:a4:65:df:2d:0b:1b:a6:5b:6c:f1:
67:f8:dc:f7:4a:93:37:74:b9:c4:93:17:db:86:18:
a0:8a:ff:ea:d5:c8:1c:09:ae:3a:81:2c:25:72:75:
2c:a2:b2:10:c8:ee:4b:31:39:4c:7b:c9:09:5d:60:
e1:08:72:41:18:be:e9:2d:32:32:29:ef:52:30:e3:
60:bb:c9:65:90:fd:a0:f9:41:dd:a3:a4:a6:59:37:
f8:82:42:be:93:1c:b9:91:8a:9a:64:22:4e:c5:bb:
79:fe:e8:5d:8a:b4:06:cd:d5:0f:83:4f:a6:3b:ab:
c1:b2:4b:87:12:f2:75:4d:3b:66:7d:6f:41:2d:8f:
3d:14:49:bc:4c:ce:df:59:09:84:c5:d4:0c:66:fa:
c8:20:a6:87:ef:68:38:95:12:16:a2:6f:b9:3b:56:
cf:1c:10:76:0f:c9:2d:40:7b:b7:92:a3:87:bd:0a:
8c:53:29:2d:24:c5:14:f3:d7:cf:18:aa:13:d2:c9:
ea:d2:b1:48:22:47:3d:52:75:57:f0:9d:f1:25:61:
66:cd:7e:90:1f:37:9e:2f:72:cc:00:5d:5c:b2:b9:
58:6e:12:1a:18:db:59:22:fc:22:4b:46:9c:51:b2:
67:be:c0:61:73:44:e8:f5:07:06:7e:a5:b8:1b:22:
b4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5C:CC:26:2D:76:FE:DA:B5:2A:0C:42:8F:DE:6A:4F:3B:CF:B6:40
X509v3 Authority Key Identifier:
keyid:B7:32:64:15:BE:73:4D:8A:75:12:07:ED:27:CE:3E:32:4C:6F:A9:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Hyvr8kdMTNrgG9XbP7xo4k35WAdCcZP6D31eKCbPyq1c/0/B7326415BE734D8A751207ED27CE3E324C6FA9BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7326415BE734D8A751207ED27CE3E324C6FA9BE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hyvr8kdMTNrgG9XbP7xo4k35WAdCcZP6D31eKCbPyq1c/0/3137302e3235342e38362e302f32332d3233203d3e20323635313132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.86.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:e7:67:0f:e2:6e:58:8b:bc:23:33:7c:f0:78:17:0a:bc:37:
19:b9:10:d1:00:e8:72:24:43:1b:ce:c6:8a:18:c3:26:b7:54:
3a:f1:62:30:37:b1:de:55:4c:e6:8f:76:a9:fb:c6:f2:f9:24:
ca:a4:b9:45:b4:74:a5:76:4c:25:7d:a0:70:ff:00:f6:88:d5:
26:50:28:31:8e:6a:40:45:8d:a3:ed:ed:61:62:6d:aa:86:da:
b9:61:52:6b:e3:db:1a:cf:19:fc:8d:3f:ae:08:e4:db:61:8b:
67:d5:78:bc:0c:a3:23:1f:79:47:8d:d1:ad:3c:ec:33:68:bf:
82:60:b6:c0:91:e9:2a:ab:ab:a1:0e:97:50:e5:9c:89:d4:00:
36:d7:21:19:54:97:38:51:9a:72:13:12:66:00:2e:f1:d6:a7:
2c:6b:d9:f2:12:c4:75:2f:cd:ef:26:11:82:e7:12:84:21:f9:
d3:68:0f:a6:c8:15:f5:64:a7:cc:a8:90:04:e8:05:a8:51:89:
e3:ab:b9:bb:04:6c:1b:2d:a0:55:65:2b:fb:c4:97:c1:a8:5a:
40:7d:25:e8:cb:17:77:51:2a:7f:67:fb:a5:be:35:a1:52:ab:
99:03:1b:d9:f3:04:d4:a8:13:81:b3:15:98:9a:7a:26:b3:3e:
42:f5:a6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:13:34 2025 by rpki-client