![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/3138312e3138392e3130352e302f32342d3234203d3e20323731333930.roa
File: 3138312e3138392e3130352e302f32342d3234203d3e20323731333930.roa (raw, json)
Hash identifier: mebgPI7uHqfAR9kVN4tSa6+cjvfh/+oJ/wbTmlRAK00=
Subject key identifier: D4:FF:4A:B2:A6:74:BD:2A:26:76:BE:F3:67:C0:60:A9:1D:22:CC:21
Certificate issuer: /CN=7FE491F0B2990CDA06DE14C265B0E6968745689B
Certificate serial: 35079D49FA63E2E1B43AEA4244F5281FA0A663D7
Authority key identifier: 7F:E4:91:F0:B2:99:0C:DA:06:DE:14:C2:65:B0:E6:96:87:45:68:9B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FE491F0B2990CDA06DE14C265B0E6968745689B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/3138312e3138392e3130352e302f32342d3234203d3e20323731333930.roa
Signing time: Fri 12 Apr 2024 16:19:58 +0000
ROA not before: Fri 12 Apr 2024 16:14:58 +0000
ROA not after: Fri 11 Apr 2025 16:19:58 +0000
asID: 271390
IP address blocks: 181.189.105.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:07:9d:49:fa:63:e2:e1:b4:3a:ea:42:44:f5:28:1f:a0:a6:63:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7FE491F0B2990CDA06DE14C265B0E6968745689B
Validity
Not Before: Apr 12 16:14:58 2024 GMT
Not After : Apr 11 16:19:58 2025 GMT
Subject: CN=D4FF4AB2A674BD2A2676BEF367C060A91D22CC21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5d:73:ab:ff:59:a0:07:8c:9f:93:15:51:31:
e2:a2:a3:3f:7c:bd:ae:3c:ae:e3:40:b7:4a:9d:45:
61:c7:b3:36:cc:21:d8:50:98:1a:a1:f3:2a:fb:2a:
88:89:86:86:4c:ea:82:54:04:c1:4a:0f:da:b6:32:
fc:c1:19:99:9d:c4:88:75:03:5b:27:de:e3:fc:35:
e8:d7:23:c4:68:2b:88:d7:9f:ea:b8:44:ac:00:99:
1d:0b:89:68:4a:e1:10:0c:51:7b:1b:e7:a1:2d:dc:
ab:5e:2e:a0:36:8c:7f:d3:fa:c0:65:f1:99:82:9b:
da:b6:49:ec:d8:11:59:86:30:ea:3f:d6:64:88:f8:
ab:9e:6a:02:49:6c:2b:23:2c:7c:96:96:ea:06:30:
34:c3:fc:1c:30:5c:72:a6:0a:12:10:85:65:45:c4:
7a:6a:3f:68:72:21:2f:dc:8a:d0:d9:f2:e7:a1:b9:
ea:7a:30:1c:9a:9e:3b:62:a4:68:dd:e2:d1:38:ea:
5f:92:e5:83:c1:29:7e:f3:fe:2c:de:73:16:5e:b8:
e0:bc:ce:a9:a9:62:9a:d9:ea:7e:8c:55:a0:62:04:
eb:f9:2d:dd:b3:9f:56:62:9c:e6:78:51:bf:34:61:
29:73:70:01:b9:a3:82:27:12:17:85:8f:94:af:62:
af:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:FF:4A:B2:A6:74:BD:2A:26:76:BE:F3:67:C0:60:A9:1D:22:CC:21
X509v3 Authority Key Identifier:
keyid:7F:E4:91:F0:B2:99:0C:DA:06:DE:14:C2:65:B0:E6:96:87:45:68:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/7FE491F0B2990CDA06DE14C265B0E6968745689B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FE491F0B2990CDA06DE14C265B0E6968745689B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/3138312e3138392e3130352e302f32342d3234203d3e20323731333930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.189.105.0/24
Signature Algorithm: sha256WithRSAEncryption
79:2b:99:b7:86:33:bd:45:0b:d0:f0:10:12:0b:5b:4c:7b:c9:
93:d5:a2:fa:eb:e8:1c:7d:da:d4:3e:31:c7:52:bd:af:ff:2c:
6f:86:e6:ec:34:6a:1e:e4:fa:63:bf:18:f7:07:c8:e9:66:a4:
f1:2c:27:3d:c6:e3:bc:2b:99:92:fd:af:75:14:e5:83:06:8d:
4d:b5:68:f4:d7:3e:45:df:9e:80:82:cc:1c:9f:22:0b:cc:23:
ca:17:c8:1d:b1:6f:db:b0:d5:92:42:f4:ae:7b:64:72:79:21:
94:eb:f6:b3:db:d6:19:57:00:68:45:b8:46:60:3d:d2:7f:6e:
83:cc:bf:3d:ae:6d:27:a3:ef:b0:41:5e:79:23:e2:75:a9:87:
d1:4f:42:b7:5c:f3:ec:9c:3f:cd:96:20:a5:9f:0b:41:77:9f:
b6:fa:b7:fd:32:4b:c8:38:c2:4a:fe:f3:39:ac:62:62:5e:e9:
14:2b:c8:2b:69:74:1b:40:08:39:ee:9e:c5:5e:84:b1:88:f5:
54:a8:e0:14:26:fb:17:9b:35:8b:9e:16:1f:fb:40:cb:5f:23:
92:5b:6c:5c:5a:d4:6b:47:c1:46:81:a2:7c:85:19:26:af:8e:
8b:16:a3:5e:c2:80:92:34:9b:c2:ff:8c:4b:d8:98:28:b3:4c:
21:c8:d4:ef
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUNQedSfpj4uG0OupCRPUoH6CmY9cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0ZFNDkxRjBCMjk5MENEQTA2REUxNEMyNjVCMEU2OTY4
NzQ1Njg5QjAeFw0yNDA0MTIxNjE0NThaFw0yNTA0MTExNjE5NThaMDMxMTAvBgNV
BAMTKEQ0RkY0QUIyQTY3NEJEMkEyNjc2QkVGMzY3QzA2MEE5MUQyMkNDMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6XXOr/1mgB4yfkxVRMeKioz98
va48ruNAt0qdRWHHszbMIdhQmBqh8yr7KoiJhoZM6oJUBMFKD9q2MvzBGZmdxIh1
A1sn3uP8NejXI8RoK4jXn+q4RKwAmR0LiWhK4RAMUXsb56Et3KteLqA2jH/T+sBl
8ZmCm9q2SezYEVmGMOo/1mSI+KueagJJbCsjLHyWluoGMDTD/BwwXHKmChIQhWVF
xHpqP2hyIS/citDZ8uehuep6MByanjtipGjd4tE46l+S5YPBKX7z/izecxZeuOC8
zqmpYprZ6n6MVaBiBOv5Ld2zn1ZinOZ4Ub80YSlzcAG5o4InEheFj5SvYq8NAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU1P9KsqZ0vSomdr7zZ8BgqR0izCEwHwYDVR0j
BBgwFoAUf+SR8LKZDNoG3hTCZbDmlodFaJswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnE5dlVVZlR4VFRCb0Y0S3NCcVphUm9VTFB1SzdvOVQxVmdzaWd3dUxy
VmUvMC83RkU0OTFGMEIyOTkwQ0RBMDZERTE0QzI2NUIwRTY5Njg3NDU2ODlCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdGRTQ5MUYwQjI5OTBDREEw
NkRFMTRDMjY1QjBFNjk2ODc0NTY4OUIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJxOXZVVWZUeFRUQm9GNEtzQnFaYVJvVUxQdUs3bzlUMVZnc2lnd3VMclZlLzAv
MzEzODMxMmUzMTM4MzkyZTMxMzAzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMTMzMzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALW9aTANBgkqhkiG9w0BAQsFAAOCAQEAeSuZ
t4YzvUUL0PAQEgtbTHvJk9Wi+uvoHH3a1D4xx1K9r/8sb4bm7DRqHuT6Y78Y9wfI
6Wak8SwnPcbjvCuZkv2vdRTlgwaNTbVo9Nc+Rd+egILMHJ8iC8wjyhfIHbFv27DV
kkL0rntkcnkhlOv2s9vWGVcAaEW4RmA90n9ug8y/Pa5tJ6PvsEFeeSPidamH0U9C
t1zz7Jw/zZYgpZ8LQXeftvq3/TJLyDjCSv7zOaxiYl7pFCvIK2l0G0AIOe6exV6E
sYj1VKjgFCb7F5s1i54WH/tAy18jkltsXFrUa0fBRoGifIUZJq+OixajXsKAkjSb
wv+MS9iYKLNMIcjU7w==
-----END CERTIFICATE-----
Generated at Sun Jun 23 19:21:42 2024 by rpki-client on console-ams.rpki-client.org