![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/0/3137302e37392e3139362e302f32322d3232203d3e20323636333130.roa
File: 3137302e37392e3139362e302f32322d3232203d3e20323636333130.roa (raw, json)
Hash identifier: oETLqgGWyffzH6MdlVajxwDoMB3/P6er+z+ioyq/YqA=
Subject key identifier: 9D:F0:A5:25:68:A1:9D:7A:64:89:4B:74:50:5C:6F:42:AB:B2:A0:6D
Certificate issuer: /CN=4314A8D7EDCECD2C467E1EF8634BDC6275077A86
Certificate serial: 2A90005035D0DC05301E62D3387003EBB065ACC1
Authority key identifier: 43:14:A8:D7:ED:CE:CD:2C:46:7E:1E:F8:63:4B:DC:62:75:07:7A:86
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4314A8D7EDCECD2C467E1EF8634BDC6275077A86.cer
Subject info access: rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/0/3137302e37392e3139362e302f32322d3232203d3e20323636333130.roa
Signing time: Mon 18 Dec 2023 17:55:10 +0000
ROA not before: Mon 18 Dec 2023 17:50:10 +0000
ROA not after: Mon 16 Dec 2024 17:55:10 +0000
asID: 266310
IP address blocks: 170.79.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:90:00:50:35:d0:dc:05:30:1e:62:d3:38:70:03:eb:b0:65:ac:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4314A8D7EDCECD2C467E1EF8634BDC6275077A86
Validity
Not Before: Dec 18 17:50:10 2023 GMT
Not After : Dec 16 17:55:10 2024 GMT
Subject: CN=9DF0A52568A19D7A64894B74505C6F42ABB2A06D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ef:0a:62:24:21:99:66:ca:0d:6d:5a:d6:35:
e8:3f:41:5a:44:30:07:47:aa:c4:c6:4f:e4:7b:bf:
de:23:7f:e9:4b:11:a6:0a:60:fc:fa:b9:03:dc:ff:
a5:14:67:51:1e:20:24:d5:ab:84:ae:e6:03:77:72:
07:94:ca:4a:21:d3:29:c7:96:77:09:83:82:71:39:
a7:9d:43:04:ad:8f:5e:d7:dc:79:d7:96:18:d5:77:
fa:24:2e:14:2e:53:9e:c4:0e:af:7d:23:9c:29:cd:
ca:c8:f5:40:8f:c9:fe:24:9c:ab:bc:a8:7c:68:d2:
98:dc:72:c5:e7:2a:f8:70:5a:22:4e:49:16:f9:85:
ac:f2:73:f3:1a:fe:02:91:26:6f:c3:0d:06:28:65:
ba:a3:15:51:0c:45:8e:29:d6:04:91:42:a0:7d:ea:
45:8b:31:4b:c4:2d:b3:9f:42:ed:8a:e6:12:fd:5e:
23:6e:6c:e5:78:ce:b5:e3:55:a9:a4:de:c1:e1:44:
4b:01:b2:8e:0b:d4:8b:42:eb:e7:87:8c:19:3a:ab:
27:0b:b9:1c:f9:14:a6:06:3d:82:f2:54:65:46:38:
11:7a:f9:e0:48:14:46:66:30:8a:62:ce:49:6d:59:
ec:ad:c1:95:19:20:d0:64:78:76:32:69:d6:87:95:
85:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F0:A5:25:68:A1:9D:7A:64:89:4B:74:50:5C:6F:42:AB:B2:A0:6D
X509v3 Authority Key Identifier:
keyid:43:14:A8:D7:ED:CE:CD:2C:46:7E:1E:F8:63:4B:DC:62:75:07:7A:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/0/4314A8D7EDCECD2C467E1EF8634BDC6275077A86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4314A8D7EDCECD2C467E1EF8634BDC6275077A86.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/0/3137302e37392e3139362e302f32322d3232203d3e20323636333130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.79.196.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:c3:84:5a:19:26:99:96:ab:d2:b7:e1:f1:bf:3e:95:23:da:
92:7a:9a:54:32:31:cb:7d:3d:f3:f2:57:71:b3:ed:12:81:20:
44:2c:d2:31:2b:96:7a:6f:32:4a:f5:90:7c:2b:0f:2c:c3:f0:
1a:15:0f:84:8c:de:f3:cf:c8:f0:13:3b:6e:99:f0:e5:ff:ad:
91:7f:b8:7e:4a:1f:a4:db:b6:19:70:06:78:0c:2e:4d:5f:5e:
0c:f7:aa:b7:f1:12:81:11:08:67:1d:d0:6c:93:f1:82:cf:2a:
90:28:4e:ae:e7:dd:5d:ab:8a:9f:16:9d:bc:6e:e1:d0:7b:0c:
34:95:b6:7d:42:d5:4e:6b:75:de:8a:7f:af:b5:5f:5b:6e:aa:
e9:1c:49:3f:79:ae:59:1f:82:d5:c1:00:49:60:f1:6d:b7:21:
28:b9:92:94:33:a6:e8:ed:4e:86:49:82:4d:07:96:58:56:cc:
ae:59:1a:01:d4:72:15:98:70:06:65:41:32:eb:9e:a4:74:bb:
ae:6d:39:71:38:a6:71:8c:06:2d:8f:85:78:c6:ae:cd:2b:23:
f2:96:e9:9e:c7:3b:4c:48:b7:cc:1e:10:2a:1f:a0:a6:8d:77:
ee:1e:4f:26:4f:35:c3:e7:ec:b1:c1:21:bd:70:20:e7:49:20:
fc:be:b2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:25 2025 by rpki-client