![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/3230302e3232392e3234312e302f32342d3234203d3e20323730383334.roa
File: 3230302e3232392e3234312e302f32342d3234203d3e20323730383334.roa (raw, json)
Hash identifier: yJ851W/+YYL5QO+YqlFMRXBZ+e8WQ1SgSiF2JVC2UEw=
Subject key identifier: B8:BB:2A:49:4E:CC:77:93:41:D4:C3:B1:CD:6C:29:99:7D:13:6E:F0
Certificate issuer: /CN=F5EBD2D8FD46BA628677A66176C73ABCE3EF2AEB
Certificate serial: 6204F8957BCA855B6817F6FC00B464FCFF49DC92
Authority key identifier: F5:EB:D2:D8:FD:46:BA:62:86:77:A6:61:76:C7:3A:BC:E3:EF:2A:EB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5EBD2D8FD46BA628677A66176C73ABCE3EF2AEB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/3230302e3232392e3234312e302f32342d3234203d3e20323730383334.roa
Signing time: Mon 26 Feb 2024 16:47:29 +0000
ROA not before: Mon 26 Feb 2024 16:42:29 +0000
ROA not after: Mon 24 Feb 2025 16:47:29 +0000
asID: 270834
IP address blocks: 200.229.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:04:f8:95:7b:ca:85:5b:68:17:f6:fc:00:b4:64:fc:ff:49:dc:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5EBD2D8FD46BA628677A66176C73ABCE3EF2AEB
Validity
Not Before: Feb 26 16:42:29 2024 GMT
Not After : Feb 24 16:47:29 2025 GMT
Subject: CN=B8BB2A494ECC779341D4C3B1CD6C29997D136EF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:9b:f4:dc:aa:a9:39:55:08:c5:12:45:bd:6f:
6c:72:3e:35:6d:cd:1c:b1:60:a9:60:88:04:fc:e9:
38:77:5e:b9:e7:30:d1:72:fc:c1:7f:f0:94:4c:de:
e7:3e:8a:10:e0:52:e3:35:4b:56:71:7b:5a:e8:26:
46:bc:84:34:9e:77:f3:44:80:5a:90:cf:cf:88:82:
e1:21:4a:3d:56:2e:6f:f7:88:48:ff:9f:0e:6e:bc:
e9:a8:aa:a6:31:b9:7b:48:cc:6a:88:3e:c5:4f:e5:
77:46:ff:ac:9e:c2:5f:a7:e7:65:cf:e2:4a:42:a8:
3f:00:e0:98:f6:59:ce:b9:40:6b:74:bd:cb:01:e5:
92:59:0e:a9:d0:07:36:e5:db:9a:13:2b:1b:67:7c:
87:65:72:fd:ba:3a:1c:3a:5f:ff:87:22:62:8b:ca:
46:a7:71:3d:5d:0f:f6:ed:f5:01:4b:7d:41:e9:aa:
6b:0c:07:e0:10:e4:0a:94:15:b8:43:5d:75:09:8f:
13:2d:58:79:9b:a6:fb:6d:5f:f5:97:2d:d5:ee:c9:
6a:c8:53:ea:86:52:8e:cf:05:9f:01:5c:3b:ff:e5:
f1:9c:f6:05:98:3c:38:ad:8e:12:d4:af:f4:b8:5a:
72:ff:9c:81:6e:a9:a5:fb:41:c2:0e:17:9a:64:40:
b9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BB:2A:49:4E:CC:77:93:41:D4:C3:B1:CD:6C:29:99:7D:13:6E:F0
X509v3 Authority Key Identifier:
keyid:F5:EB:D2:D8:FD:46:BA:62:86:77:A6:61:76:C7:3A:BC:E3:EF:2A:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/F5EBD2D8FD46BA628677A66176C73ABCE3EF2AEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5EBD2D8FD46BA628677A66176C73ABCE3EF2AEB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/3230302e3232392e3234312e302f32342d3234203d3e20323730383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.229.241.0/24
Signature Algorithm: sha256WithRSAEncryption
36:40:d1:df:19:f0:2d:27:fe:98:a7:e4:a5:5a:92:71:42:ce:
5d:89:37:7c:12:a9:2f:b5:32:ce:5e:36:d6:fc:f7:90:e6:77:
df:5f:7e:c9:40:82:d5:b3:71:4f:e0:0b:74:05:45:73:32:bf:
0c:ca:5d:55:ac:e6:5a:c7:e1:da:85:92:68:d9:28:2d:6a:d7:
02:de:e8:c9:81:6b:0d:0a:d1:41:73:e9:14:5b:62:c6:20:49:
1d:c4:bc:63:08:d9:26:14:88:9e:00:a0:49:f4:09:cb:e5:6b:
bd:79:9a:dc:5d:1c:ae:57:57:b3:c4:6e:f7:cb:20:53:f6:a5:
5e:f7:e4:cf:c0:16:e7:54:eb:50:26:61:d5:d9:30:91:c2:eb:
74:16:47:51:ba:93:cd:f4:ec:99:8a:12:60:00:ea:7e:06:43:
0a:98:3e:81:2f:09:01:41:9d:d2:09:50:94:d8:43:99:c4:39:
22:a0:09:94:b0:74:d9:61:89:6f:54:a1:94:f3:31:dc:bb:6d:
46:f3:81:d4:72:6d:2e:9a:61:82:a5:2e:45:03:4a:5b:e6:5a:
3b:e3:f6:36:f6:b4:2d:44:b6:6e:6f:64:e2:90:e4:f9:4d:3f:
9f:f6:c6:be:ef:05:b7:80:d9:fc:78:29:b3:76:31:bd:33:02:
10:4a:8e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:55:47 2025 by rpki-client