![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137372e3130342e3132332e302f32342d3234203d3e203238353938.roa
File: 3137372e3130342e3132332e302f32342d3234203d3e203238353938.roa (raw, json)
Hash identifier: KevlrY5pokG2AS9mnou9Wnoy6BY3witGrbdbpXGf6z0=
Subject key identifier: 9B:78:5C:EF:43:0E:71:10:A1:C1:26:44:BC:0E:88:41:87:FD:3C:39
Certificate issuer: /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial: 7FC225B9CE09F2E54C31251AB4DB43E6C8D373D7
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137372e3130342e3132332e302f32342d3234203d3e203238353938.roa
Signing time: Mon 23 Oct 2023 13:00:57 +0000
ROA not before: Mon 23 Oct 2023 12:55:57 +0000
ROA not after: Mon 21 Oct 2024 13:00:57 +0000
asID: 28598
IP address blocks: 177.104.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:c2:25:b9:ce:09:f2:e5:4c:31:25:1a:b4:db:43:e6:c8:d3:73:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Validity
Not Before: Oct 23 12:55:57 2023 GMT
Not After : Oct 21 13:00:57 2024 GMT
Subject: CN=9B785CEF430E7110A1C12644BC0E884187FD3C39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:68:20:88:86:15:8d:7f:b6:a9:97:be:0d:b1:
15:c6:7c:99:f3:73:09:d0:b3:a1:1d:e2:12:de:f9:
f1:3a:8f:c4:77:77:0a:d1:3f:66:3a:ee:45:b0:5a:
f3:e8:5d:bb:fa:14:d5:b0:c9:2b:40:75:da:b4:e2:
b5:bc:c1:24:89:78:f6:86:39:8f:58:4d:3d:6b:ff:
53:85:b4:6b:90:e3:52:3f:34:52:ce:1b:06:0e:cd:
a9:8f:fd:f7:20:20:7d:bd:09:51:8e:44:05:23:90:
70:1e:54:10:41:95:b8:2d:c6:c0:f1:ea:39:99:3f:
17:57:98:3c:bd:d2:33:18:de:08:40:9f:50:00:b0:
ca:71:66:03:d9:53:7b:1a:ef:ba:6a:a0:48:7e:4b:
b9:b6:80:57:0f:2b:4c:c6:d9:0c:78:31:65:8c:49:
21:56:cd:de:f4:ac:ef:d0:f4:06:9a:d4:3f:67:6e:
34:41:fd:cb:f9:dc:05:a1:31:0f:70:07:c7:c7:91:
42:4f:f0:06:9c:63:78:74:57:95:b6:e8:21:39:9b:
9a:3f:3e:88:b3:61:94:71:86:5f:1b:28:b1:df:ef:
48:32:3f:31:f5:9d:b7:7a:3a:00:b8:d5:27:f4:f8:
0d:78:5e:94:e2:4f:29:f8:f7:da:94:b2:98:9e:74:
a2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:78:5C:EF:43:0E:71:10:A1:C1:26:44:BC:0E:88:41:87:FD:3C:39
X509v3 Authority Key Identifier:
keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137372e3130342e3132332e302f32342d3234203d3e203238353938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.104.123.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:fb:99:d4:8c:63:e9:7c:b1:8b:e1:a0:53:3f:69:56:17:c4:
b1:37:c1:e2:90:f3:cd:75:2a:a3:c7:0e:d5:5b:69:81:5f:52:
ba:64:86:dc:3f:2f:84:82:d0:ce:76:62:82:d6:ba:67:09:56:
78:9f:b5:9d:e3:a3:8d:70:6a:ac:9a:98:ba:08:fb:ad:87:0b:
3a:7c:d7:af:5b:44:92:a9:01:08:5a:e4:58:da:6b:74:6a:0a:
c8:f1:13:b5:01:29:a8:42:fd:ed:64:aa:32:e5:32:5c:d4:8e:
fa:89:57:b8:8e:91:5b:dd:f6:07:0c:64:bb:87:07:52:9a:eb:
ad:c2:20:d7:0c:a4:b9:90:69:3b:58:fa:fb:f3:bb:83:23:9e:
b8:a2:af:34:1d:01:7a:38:98:0f:a5:88:19:5c:fc:83:ba:b0:
a2:5e:97:95:e6:49:be:d3:81:f2:88:1c:db:77:58:84:ea:92:
e9:63:48:7b:8e:93:40:6b:c0:cd:a0:16:e4:e7:1a:68:09:e6:
90:32:14:95:40:e8:b5:6d:61:d4:8d:1b:56:47:26:9b:98:70:
16:4e:5e:7c:39:0d:b3:14:74:12:9e:a6:78:49:4e:d3:6e:4c:
3e:ab:4e:17:16:eb:91:94:ab:17:7e:21:dd:5a:83:b8:07:03:
d0:ac:f7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:01 2025 by rpki-client