![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e34392e3139322e302f32302d3230203d3e203533303539.roa
File: 3138372e34392e3139322e302f32302d3230203d3e203533303539.roa (raw, json)
Hash identifier: rfCl8aPXQjed6ij3JoLwB5CzwWfH1Txp+yZEqNHWg9k=
Subject key identifier: 08:6B:08:2B:40:9A:D6:C7:54:58:35:A7:C7:04:37:10:0D:F2:AC:EA
Certificate issuer: /CN=1069B718ECC11FD57959EFCAFE86D44EC241D7D1
Certificate serial: 2C486B028F7124A302ABA5B13AF14D8E5C056CFE
Authority key identifier: 10:69:B7:18:EC:C1:1F:D5:79:59:EF:CA:FE:86:D4:4E:C2:41:D7:D1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1069B718ECC11FD57959EFCAFE86D44EC241D7D1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e34392e3139322e302f32302d3230203d3e203533303539.roa
Signing time: Fri 03 Mar 2023 11:51:04 +0000
ROA not before: Fri 03 Mar 2023 11:46:04 +0000
ROA not after: Fri 01 Mar 2024 11:51:04 +0000
asID: 53059
IP address blocks: 187.49.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:48:6b:02:8f:71:24:a3:02:ab:a5:b1:3a:f1:4d:8e:5c:05:6c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1069B718ECC11FD57959EFCAFE86D44EC241D7D1
Validity
Not Before: Mar 3 11:46:04 2023 GMT
Not After : Mar 1 11:51:04 2024 GMT
Subject: CN=086B082B409AD6C7545835A7C70437100DF2ACEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ed:09:f2:06:f0:e1:06:a5:4e:b9:e1:d8:7c:
8c:d1:4a:8c:ef:27:60:27:28:a1:60:c0:3d:1b:03:
02:ea:99:8d:22:1a:44:bf:c8:52:e8:18:ac:94:9e:
56:a8:5e:10:ef:3c:27:cf:ed:19:a5:1e:2f:3e:f9:
b9:e9:ed:fe:e6:5e:06:43:0c:d3:15:ed:00:6d:ad:
af:ac:f1:b7:74:8d:81:0d:39:4b:25:56:12:88:a4:
57:80:d2:2e:c6:d4:6b:16:6d:68:10:ee:b9:4e:4e:
3e:f4:dd:76:19:91:81:56:59:78:a6:41:ce:98:85:
a5:c6:ba:1a:b0:09:99:88:7c:f6:22:11:f2:50:c5:
3c:1e:7d:a5:28:18:30:19:06:52:c3:bb:8c:0f:2d:
c4:54:a4:f2:73:9a:79:e5:a8:d1:03:3f:34:85:4e:
42:7f:f9:d2:f2:9a:f6:e5:59:1e:57:f2:38:20:28:
f1:0b:0b:6f:0b:34:99:09:14:f3:c4:df:19:39:12:
c0:3b:f8:f9:72:3b:09:b5:0d:3a:28:f4:f2:f6:88:
0f:f7:cb:b1:77:f8:50:ec:5d:17:88:74:35:36:1b:
5f:fd:17:3b:b8:47:45:21:b6:7b:6f:d9:60:92:6f:
87:d9:7e:ad:02:94:dc:61:6e:ed:8d:8d:c6:0f:de:
87:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6B:08:2B:40:9A:D6:C7:54:58:35:A7:C7:04:37:10:0D:F2:AC:EA
X509v3 Authority Key Identifier:
keyid:10:69:B7:18:EC:C1:1F:D5:79:59:EF:CA:FE:86:D4:4E:C2:41:D7:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/1069B718ECC11FD57959EFCAFE86D44EC241D7D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1069B718ECC11FD57959EFCAFE86D44EC241D7D1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e34392e3139322e302f32302d3230203d3e203533303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.49.192.0/20
Signature Algorithm: sha256WithRSAEncryption
44:a2:87:11:9c:ea:9c:87:89:5a:4a:13:49:48:a3:38:81:f1:
50:37:fb:57:d1:8a:70:86:ce:2e:8b:2f:a4:ae:52:50:eb:a1:
6a:2a:f7:4a:b8:54:4d:c1:06:ed:d3:31:f9:15:fd:2b:12:df:
d0:0f:1d:f1:f7:7d:9e:99:54:fb:6d:52:40:bf:e8:37:7a:aa:
dd:bb:81:9b:20:08:c6:62:63:bf:b0:85:a8:50:52:23:5c:00:
fe:50:49:9a:b3:75:b1:57:17:8a:e0:9b:09:c1:8b:3d:77:cc:
69:06:1b:00:9d:49:e0:ea:d9:43:a5:97:5d:e9:0f:6c:8f:61:
09:3d:2a:61:20:f9:b8:f8:0e:26:f4:15:30:69:36:49:d1:f8:
11:97:3f:0e:57:cc:06:db:e3:94:db:46:e0:04:d6:03:52:e9:
28:33:04:80:46:09:a3:fc:82:86:50:e8:0c:5d:b5:e6:9d:97:
6b:3d:b7:8f:3e:88:54:93:0a:4a:b7:f3:76:c8:48:95:70:c6:
19:40:4d:cc:db:ce:66:5e:7a:24:97:ab:b6:90:de:9f:69:2e:
54:e1:ea:36:2f:1f:81:48:2b:de:91:79:cc:59:b7:67:c6:e6:
61:dd:c2:75:7f:2a:52:f9:82:45:34:1d:0c:42:14:e3:44:78:
82:87:fd:62
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULEhrAo9xJKMCq6WxOvFNjlwFbP4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA2OUI3MThFQ0MxMUZENTc5NTlFRkNBRkU4NkQ0NEVD
MjQxRDdEMTAeFw0yMzAzMDMxMTQ2MDRaFw0yNDAzMDExMTUxMDRaMDMxMTAvBgNV
BAMTKDA4NkIwODJCNDA5QUQ2Qzc1NDU4MzVBN0M3MDQzNzEwMERGMkFDRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU7QnyBvDhBqVOueHYfIzRSozv
J2AnKKFgwD0bAwLqmY0iGkS/yFLoGKyUnlaoXhDvPCfP7RmlHi8++bnp7f7mXgZD
DNMV7QBtra+s8bd0jYENOUslVhKIpFeA0i7G1GsWbWgQ7rlOTj703XYZkYFWWXim
Qc6YhaXGuhqwCZmIfPYiEfJQxTwefaUoGDAZBlLDu4wPLcRUpPJzmnnlqNEDPzSF
TkJ/+dLymvblWR5X8jggKPELC28LNJkJFPPE3xk5EsA7+PlyOwm1DToo9PL2iA/3
y7F3+FDsXReIdDU2G1/9Fzu4R0Uhtntv2WCSb4fZfq0ClNxhbu2NjcYP3oczAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUCGsIK0Ca1sdUWDWnxwQ3EA3yrOowHwYDVR0j
BBgwFoAUEGm3GOzBH9V5We/K/obUTsJB19EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMS8xMDY5QjcxOEVDQzExRkQ1Nzk1OUVGQ0FGRTg2RDQ0RUMyNDFEN0QxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEwNjlCNzE4RUNDMTFGRDU3
OTU5RUZDQUZFODZENDRFQzI0MUQ3RDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkR0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzEv
MzEzODM3MmUzNDM5MmUzMTM5MzIyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzNTMz
MzAzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEuzHAMA0GCSqGSIb3DQEBCwUAA4IBAQBEoocRnOqc
h4laShNJSKM4gfFQN/tX0Ypwhs4uiy+krlJQ66FqKvdKuFRNwQbt0zH5Ff0rEt/Q
Dx3x932emVT7bVJAv+g3eqrdu4GbIAjGYmO/sIWoUFIjXAD+UEmas3WxVxeK4JsJ
wYs9d8xpBhsAnUng6tlDpZdd6Q9sj2EJPSphIPm4+A4m9BUwaTZJ0fgRlz8OV8wG
2+OU20bgBNYDUukoMwSARgmj/IKGUOgMXbXmnZdrPbePPohUkwpKt/N2yEiVcMYZ
QE3M285mXnokl6u2kN6faS5U4eo2Lx+BSCvekXnMWbdnxuZh3cJ1fypS+YJFNB0M
QhTjRHiCh/1i
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:18 2025 by rpki-client