![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3136302e3233382e3232302e302f32322d3232203d3e20323636353535.roa
File: 3136302e3233382e3232302e302f32322d3232203d3e20323636353535.roa (raw, json)
Hash identifier: BM5/h/olA16+GWY+j7+SxhCdYDk+Ct8kirlxoxk+Ugk=
Subject key identifier: D6:16:8B:9D:C4:54:D3:5D:88:4B:11:CE:8B:77:23:84:F3:B7:1A:00
Certificate issuer: /CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
Certificate serial: 07CF27365ACFD09D500E151C4D87E84682A2C923
Authority key identifier: 85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3136302e3233382e3232302e302f32322d3232203d3e20323636353535.roa
Signing time: Fri 16 Dec 2022 19:45:30 +0000
ROA not before: Fri 16 Dec 2022 19:40:30 +0000
ROA not after: Fri 15 Dec 2023 19:45:30 +0000
asID: 266555
IP address blocks: 160.238.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:cf:27:36:5a:cf:d0:9d:50:0e:15:1c:4d:87:e8:46:82:a2:c9:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
Validity
Not Before: Dec 16 19:40:30 2022 GMT
Not After : Dec 15 19:45:30 2023 GMT
Subject: CN=D6168B9DC454D35D884B11CE8B772384F3B71A00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c4:aa:bc:46:94:99:55:72:9e:9e:3f:61:64:
71:41:75:5d:dc:ff:4b:ff:44:6e:4d:db:eb:06:90:
47:1b:70:fb:9a:e6:6f:e9:bc:b4:7f:9c:b4:1e:71:
25:0d:4f:f7:e0:3f:e3:df:24:2b:59:12:36:a2:99:
02:87:d2:42:4b:db:e5:c9:9e:1c:e0:eb:33:8c:93:
61:85:5b:7d:d9:2d:b4:43:56:e0:b8:88:c0:be:f0:
29:41:63:60:32:98:08:38:69:bd:63:1c:7f:d6:1a:
c6:2d:91:54:fe:ec:bb:69:f3:67:5e:5c:0b:4d:0f:
4e:9f:5b:c1:81:23:25:2f:0c:b4:a2:a8:c7:50:7d:
94:f5:6c:af:a9:2a:1d:86:d6:e7:8b:c9:83:16:99:
5a:49:99:8d:05:7a:7b:fc:30:3d:9c:e4:8e:78:9c:
d4:8f:74:65:c6:c6:22:0a:36:32:09:9a:e4:14:84:
f6:8b:49:9f:4b:60:41:cb:b1:75:22:3d:97:1c:0a:
96:36:ba:82:7a:29:2b:33:ed:c5:7c:75:99:4e:77:
14:ed:e8:70:f1:51:11:db:83:d4:29:60:1e:69:e1:
57:27:29:70:9c:96:15:dd:bf:d2:46:e1:83:7e:11:
31:b7:ed:69:98:ee:60:71:0c:0c:bc:7d:81:fd:bc:
26:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:16:8B:9D:C4:54:D3:5D:88:4B:11:CE:8B:77:23:84:F3:B7:1A:00
X509v3 Authority Key Identifier:
keyid:85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3136302e3233382e3232302e302f32322d3232203d3e20323636353535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.238.220.0/22
Signature Algorithm: sha256WithRSAEncryption
d8:29:af:84:91:77:c0:d7:b4:63:e2:be:53:9b:14:54:58:f1:
35:b4:17:c9:69:17:2a:c0:c2:f7:96:5c:95:b1:f6:91:c8:96:
b0:cf:00:3c:06:ad:c8:b6:d5:ab:0f:c7:f5:0e:7b:da:47:1f:
de:ab:14:f2:af:78:d5:8e:9a:b0:4a:95:b3:f8:08:13:8e:5b:
e3:06:7a:c0:a8:36:2d:47:8c:46:8e:a5:8f:34:42:86:91:84:
81:39:b0:ac:e7:09:16:55:08:e7:88:d3:7d:32:cb:c0:94:4a:
fb:1f:e7:cd:f5:e5:7d:84:cc:a1:6f:20:6a:69:cc:62:97:32:
14:b6:e3:ae:0a:a5:11:05:d3:29:68:46:9d:2a:d5:26:df:ea:
5d:9d:82:99:9b:34:c0:ff:49:1e:83:0e:65:ab:08:98:ae:7d:
ec:4d:62:6e:53:31:6a:2c:aa:dc:d7:b2:d9:bd:eb:f5:9c:b6:
30:26:49:ff:1c:fe:be:97:b3:6a:6a:04:12:dd:a2:77:fc:bb:
58:5d:dd:be:8a:8a:77:61:e1:e9:93:ea:61:7b:a1:a9:8c:83:
de:13:e6:f4:43:7d:d5:3d:6b:5c:04:00:23:df:a8:b2:63:b5:
6b:48:73:33:5e:23:39:76:28:c0:29:9f:68:79:92:b4:4d:c5:
25:fc:18:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:14:54 2025 by rpki-client