![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/MScaAk9Ty3weVLBcZ5vkDWSf4Z2obT3XXiicpiv2vPL/0/34352e3136372e3137352e302f32342d3234203d3e20323638303334.roa
File: 34352e3136372e3137352e302f32342d3234203d3e20323638303334.roa (raw, json)
Hash identifier: 95ZESDXdO7kyaAaSYRwMuoDPyApG8CPlu02Cjhypdg0=
Subject key identifier: 44:0A:2F:91:C1:87:25:9F:28:51:3E:82:53:E3:22:66:C4:CE:F3:B6
Certificate issuer: /CN=9E22BA4D8000A0BC2ED9B9BEFC9E9A30F77166FC
Certificate serial: 7E0FCAB62C81DC1893B16B664D9B48C1F640C607
Authority key identifier: 9E:22:BA:4D:80:00:A0:BC:2E:D9:B9:BE:FC:9E:9A:30:F7:71:66:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E22BA4D8000A0BC2ED9B9BEFC9E9A30F77166FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/MScaAk9Ty3weVLBcZ5vkDWSf4Z2obT3XXiicpiv2vPL/0/34352e3136372e3137352e302f32342d3234203d3e20323638303334.roa
Signing time: Fri 13 Jan 2023 15:35:14 +0000
ROA not before: Fri 13 Jan 2023 15:30:14 +0000
ROA not after: Fri 12 Jan 2024 15:35:14 +0000
asID: 268034
IP address blocks: 45.167.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:0f:ca:b6:2c:81:dc:18:93:b1:6b:66:4d:9b:48:c1:f6:40:c6:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E22BA4D8000A0BC2ED9B9BEFC9E9A30F77166FC
Validity
Not Before: Jan 13 15:30:14 2023 GMT
Not After : Jan 12 15:35:14 2024 GMT
Subject: CN=440A2F91C187259F28513E8253E32266C4CEF3B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:dc:fc:91:a5:33:4c:bc:21:4b:0d:99:7d:3a:
75:91:cd:41:0a:7d:bc:80:e2:c4:7b:c7:2c:53:45:
d9:d3:b5:c9:9b:a8:cf:94:0b:6a:7f:96:88:21:30:
48:94:cd:22:37:ae:a0:8b:7f:e9:fb:58:e1:3b:59:
72:66:1b:bd:eb:25:6d:b5:7c:d6:ec:34:55:5c:13:
bf:c7:3f:51:e4:cc:50:d7:fd:01:7c:12:d7:b6:25:
20:85:91:3c:c2:e7:39:d3:a6:aa:52:92:af:11:a7:
c0:a5:47:e3:6e:f3:03:67:99:01:eb:e7:d2:32:a8:
08:13:66:af:b8:1f:63:4a:5f:e9:96:3a:a2:63:68:
10:82:07:ff:04:2a:a5:90:86:82:29:e9:b8:91:59:
fd:1b:cc:7f:20:ee:bb:6e:ee:86:b2:a9:c7:99:c4:
3a:3f:ad:aa:7d:7b:c8:2a:e5:6a:80:d2:6b:24:a4:
85:8b:72:c5:6b:dd:cd:73:69:da:77:ac:ae:be:14:
93:93:72:63:65:2f:bf:2b:e1:a1:4a:df:99:77:6d:
d5:54:d0:35:06:7c:26:4b:70:4c:26:76:5a:43:e7:
f0:60:c0:69:5d:02:d6:d1:17:68:29:8e:e9:88:03:
a2:e0:70:cd:8e:db:b6:cc:bf:f8:6f:c0:d2:9a:93:
2f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0A:2F:91:C1:87:25:9F:28:51:3E:82:53:E3:22:66:C4:CE:F3:B6
X509v3 Authority Key Identifier:
keyid:9E:22:BA:4D:80:00:A0:BC:2E:D9:B9:BE:FC:9E:9A:30:F7:71:66:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/MScaAk9Ty3weVLBcZ5vkDWSf4Z2obT3XXiicpiv2vPL/0/9E22BA4D8000A0BC2ED9B9BEFC9E9A30F77166FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E22BA4D8000A0BC2ED9B9BEFC9E9A30F77166FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/MScaAk9Ty3weVLBcZ5vkDWSf4Z2obT3XXiicpiv2vPL/0/34352e3136372e3137352e302f32342d3234203d3e20323638303334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.167.175.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:55:df:a4:10:28:d8:db:a1:3b:9c:ce:ac:c4:bc:8e:76:e3:
97:81:bc:d3:bc:f6:e1:5f:0c:7a:0f:d3:8a:b2:79:fa:a9:e2:
a0:3a:36:45:35:92:a9:cf:51:9d:d1:59:a6:22:a6:76:ed:ef:
44:d8:8d:ab:a4:cf:95:eb:fb:ef:60:1f:8e:2b:1c:36:3e:64:
7f:0a:50:87:7f:bb:91:f3:63:18:b2:e2:f3:38:97:66:21:1c:
60:94:d1:ee:c3:20:df:53:11:57:99:d6:d3:11:87:ab:f8:74:
b5:72:e2:bb:5c:6a:ba:61:35:5a:50:44:52:e9:7c:73:d3:ae:
1f:cb:30:84:19:15:cd:68:47:e0:cc:f6:4b:c9:51:99:80:11:
52:4d:c5:7b:da:2b:d5:ba:c3:1c:04:d4:72:d2:1d:60:95:61:
eb:54:ae:a5:9c:2d:88:c0:38:a1:95:ad:08:f7:55:16:9f:29:
85:17:0e:1c:c9:de:5c:e7:f0:47:d6:84:6e:e4:6e:96:71:04:
ae:bf:65:2d:79:ac:a5:87:9f:ae:56:45:29:33:07:69:b6:c7:
f0:03:49:c0:bf:2a:0b:db:77:de:4d:8e:85:88:45:3e:17:fe:
0a:08:2b:4a:20:36:f6:84:4d:cc:4b:5f:14:63:f6:47:b1:00:
4a:80:49:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:08 2025 by rpki-client