![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/1/3138312e3138392e3130362e302f32342d3234203d3e20323731333930.roa
File: 3138312e3138392e3130362e302f32342d3234203d3e20323731333930.roa (raw, json)
Hash identifier: ZX2lArMT3fNrzr7giKdNi084IxCes/eIm7rjhmkuAog=
Subject key identifier: 0D:11:5C:47:47:AF:1A:1D:3F:5B:1A:8A:65:40:A4:D1:0D:2C:8A:7D
Certificate issuer: /CN=4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0
Certificate serial: 35D8A26008B53000118EB9A9539AF029DB335A20
Authority key identifier: 4F:E5:5F:3E:0B:07:DC:29:D9:2B:8B:C2:4F:F8:90:44:E9:8E:19:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/1/3138312e3138392e3130362e302f32342d3234203d3e20323731333930.roa
Signing time: Fri 12 Apr 2024 16:19:56 +0000
ROA not before: Fri 12 Apr 2024 16:14:56 +0000
ROA not after: Fri 11 Apr 2025 16:19:56 +0000
asID: 271390
IP address blocks: 181.189.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:d8:a2:60:08:b5:30:00:11:8e:b9:a9:53:9a:f0:29:db:33:5a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0
Validity
Not Before: Apr 12 16:14:56 2024 GMT
Not After : Apr 11 16:19:56 2025 GMT
Subject: CN=0D115C4747AF1A1D3F5B1A8A6540A4D10D2C8A7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7f:35:c4:74:9b:2a:93:7c:22:98:39:c8:69:
51:ad:0d:c6:22:92:ae:01:22:a0:0d:c1:19:52:fb:
e0:a3:4f:d1:4f:04:09:e1:dc:0c:83:b8:87:29:a7:
19:ba:5b:51:c9:17:3a:e6:45:68:5f:d3:05:99:2f:
67:76:e1:36:00:87:d4:e2:20:c8:0b:6b:9d:43:5b:
11:2b:c2:f5:ce:71:06:30:ee:9a:9e:77:de:35:6e:
56:2b:fc:a7:9e:c5:ae:ef:20:9e:00:f2:a3:ff:06:
c1:cd:bc:f8:18:2a:81:b6:3c:f9:91:4a:89:ef:0f:
2b:96:e5:58:b5:98:7d:3d:97:fd:9d:56:62:e9:74:
05:fc:d7:3a:b4:87:67:f9:74:91:ad:51:c8:be:49:
0e:43:71:bb:1d:4d:43:5e:bb:32:88:28:1f:30:ce:
78:1e:38:02:9e:8d:5b:5b:56:0f:39:37:89:2f:8a:
9b:22:36:22:ec:b2:6a:11:85:a2:2a:09:75:14:e8:
49:0f:9b:b9:c2:07:0d:24:a1:0b:1e:0a:ab:b1:d5:
31:bd:9a:07:44:55:c7:1d:66:68:93:84:fb:95:57:
91:57:32:97:5c:4e:7b:67:92:a3:04:a2:18:9a:6f:
e8:77:96:b3:9c:48:9f:73:dd:f2:15:aa:e7:d6:51:
f6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:11:5C:47:47:AF:1A:1D:3F:5B:1A:8A:65:40:A4:D1:0D:2C:8A:7D
X509v3 Authority Key Identifier:
keyid:4F:E5:5F:3E:0B:07:DC:29:D9:2B:8B:C2:4F:F8:90:44:E9:8E:19:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/1/4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/1/3138312e3138392e3130362e302f32342d3234203d3e20323731333930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.189.106.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:61:58:9e:77:dd:2b:1b:54:bb:8c:39:90:41:db:66:20:85:
ba:55:b7:e7:9e:47:71:6f:60:87:44:04:ac:dc:cb:d6:8c:d5:
b0:19:af:9c:17:82:d4:5b:49:5b:81:79:99:00:57:b0:37:df:
86:be:04:45:73:20:24:8b:7f:2d:f3:73:df:bb:d4:55:c4:22:
eb:32:f8:d6:2d:b8:90:49:b1:5f:80:40:b6:a9:1d:92:ed:31:
64:17:9d:28:0a:63:b5:7d:1a:d7:d3:a9:58:05:f2:f5:bd:f2:
8e:5f:89:be:3f:ea:97:84:5e:42:77:66:eb:93:cc:96:07:19:
3c:1e:93:a3:6c:52:ef:a9:d2:e5:35:14:8d:22:b7:20:cc:47:
b5:52:73:ed:14:f5:ae:29:ff:d7:19:f3:91:23:b4:03:09:c1:
76:40:a8:4a:b4:ab:34:98:c2:e6:d1:8e:22:91:5d:cf:a0:d7:
46:2f:fc:52:ed:6e:04:44:a5:0f:31:b6:7a:dd:38:cd:1d:1e:
39:18:6f:29:07:fd:10:bd:be:a6:8f:44:e4:d0:70:aa:cd:1a:
97:96:02:f3:1a:39:ca:9c:c4:9e:d8:bf:c8:79:6d:46:41:09:
9c:4b:0b:3c:d3:36:b3:78:bc:de:61:5f:f5:b5:30:66:dc:dc:
c9:3b:8e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:18 2025 by rpki-client