![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/3139302e3130392e38382e302f32322d3234203d3e20323634323330.roa
File: 3139302e3130392e38382e302f32322d3234203d3e20323634323330.roa (raw, json)
Hash identifier: QDNGy/5+P1g5nZwYLB5MwJJr1sVpqsNJzNgbCpLMip0=
Subject key identifier: 33:D1:B6:66:62:E3:0D:A7:D3:3C:79:81:43:D3:B4:AA:D2:58:42:AE
Certificate issuer: /CN=CD010EDDB3C2B19773CF2FC966EBE99AF185BF8F
Certificate serial: 381BB89C4B1BB508A5CF44A95421A755EA412467
Authority key identifier: CD:01:0E:DD:B3:C2:B1:97:73:CF:2F:C9:66:EB:E9:9A:F1:85:BF:8F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD010EDDB3C2B19773CF2FC966EBE99AF185BF8F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/3139302e3130392e38382e302f32322d3234203d3e20323634323330.roa
Signing time: Wed 27 Dec 2023 14:32:30 +0000
ROA not before: Wed 27 Dec 2023 14:27:30 +0000
ROA not after: Wed 25 Dec 2024 14:32:30 +0000
asID: 264230
IP address blocks: 190.109.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:1b:b8:9c:4b:1b:b5:08:a5:cf:44:a9:54:21:a7:55:ea:41:24:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD010EDDB3C2B19773CF2FC966EBE99AF185BF8F
Validity
Not Before: Dec 27 14:27:30 2023 GMT
Not After : Dec 25 14:32:30 2024 GMT
Subject: CN=33D1B66662E30DA7D33C798143D3B4AAD25842AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ff:7a:e6:6b:da:0b:f7:44:43:f0:7f:0c:d0:
68:e1:d7:6e:a9:e9:71:40:5c:c2:b1:f7:bb:f0:5b:
6e:c8:c5:ec:c7:d5:ec:ea:cc:4a:29:95:6b:2d:4e:
5a:fc:73:25:c2:04:bd:49:f3:6c:a5:1b:64:ef:8d:
17:bd:8f:f9:5c:66:ab:ac:6e:e7:8a:a3:58:69:ed:
8e:0e:72:ba:74:f2:19:c2:f7:07:65:d1:16:bf:6e:
ca:79:19:04:ef:40:20:61:73:6f:a3:d4:fe:02:14:
ee:ec:60:16:71:c8:63:c8:4a:b2:37:6e:aa:67:08:
05:36:26:38:6e:ad:25:b5:13:8c:40:4c:dd:6e:d8:
c1:42:f0:08:40:2f:79:03:ec:3b:ad:3e:67:ce:b0:
a7:fc:4a:be:c4:51:0e:f1:d1:01:8c:0c:e9:54:12:
42:02:28:90:5d:9b:45:6e:51:48:ef:9f:88:af:48:
ce:8c:bf:b9:08:80:4c:aa:f3:08:0f:08:83:fe:73:
9a:6f:8f:eb:92:29:5f:29:77:4c:5f:ad:ea:b1:6d:
73:bc:53:e1:a7:fa:63:55:88:45:a3:f0:7e:78:6b:
e7:64:5e:29:7c:b8:45:de:e5:a2:32:bb:be:93:6b:
8e:1b:6c:3a:b9:27:c4:8b:f8:c1:57:6f:f4:4d:09:
1e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D1:B6:66:62:E3:0D:A7:D3:3C:79:81:43:D3:B4:AA:D2:58:42:AE
X509v3 Authority Key Identifier:
keyid:CD:01:0E:DD:B3:C2:B1:97:73:CF:2F:C9:66:EB:E9:9A:F1:85:BF:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/CD010EDDB3C2B19773CF2FC966EBE99AF185BF8F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD010EDDB3C2B19773CF2FC966EBE99AF185BF8F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/3139302e3130392e38382e302f32322d3234203d3e20323634323330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.109.88.0/22
Signature Algorithm: sha256WithRSAEncryption
99:09:26:52:31:a1:6a:39:f0:2f:0c:96:bd:54:74:94:fb:51:
4f:bb:9c:59:0d:46:1f:7e:8e:d4:9d:eb:b6:8a:fe:6e:eb:9a:
d3:92:e8:03:1e:4b:1c:01:20:1e:ea:76:3c:f5:04:7d:d5:7f:
11:80:77:50:bf:0a:44:3e:68:49:f5:c0:c4:e5:63:a4:15:c3:
0b:84:a9:c4:63:4a:fa:2a:79:03:a5:2e:91:a1:5f:9d:96:46:
91:1f:f4:36:94:2b:3a:e3:2f:49:61:35:68:78:71:2f:74:e1:
aa:94:f3:f0:c7:ae:8a:cc:b4:e0:fc:cc:02:0b:2f:c2:94:46:
30:63:e0:c4:46:c0:eb:86:41:35:73:87:82:c2:22:06:3c:00:
90:77:51:41:48:bc:f9:eb:17:e1:2d:c5:f2:38:92:26:ef:8f:
86:af:7d:dc:cc:50:21:23:2b:77:19:3b:d5:15:51:91:b7:7f:
cc:a9:84:11:f1:e2:6d:34:31:71:40:ec:5c:38:53:ff:41:d9:
7a:11:dd:62:aa:5b:6b:0b:12:e5:d8:c6:83:30:07:b6:55:07:
75:1d:34:9e:02:fa:a6:2d:45:be:0e:bd:96:ea:46:20:66:76:
91:f7:b8:3b:b4:c9:13:06:45:5e:b7:46:e0:d4:96:ad:a8:64:
2d:cb:b0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:11 2025 by rpki-client