![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/3137302e3234342e3138322e3132382f32352d3235203d3e20323636353036.roa
File: 3137302e3234342e3138322e3132382f32352d3235203d3e20323636353036.roa (raw, json)
Hash identifier: r3niQzTcZOkl7q2pkcs4VooFF7a4ditsQ5LjlJ/FfjQ=
Subject key identifier: 1D:6B:EA:F6:AE:3B:A7:3F:7F:DC:2A:11:36:5E:BC:02:B9:3E:EA:8A
Certificate issuer: /CN=CD595B734685C1E1321F4AE24C925EA2C710159F
Certificate serial: 768C25AF0D6D28B8DDE88749383693F1BA44678E
Authority key identifier: CD:59:5B:73:46:85:C1:E1:32:1F:4A:E2:4C:92:5E:A2:C7:10:15:9F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD595B734685C1E1321F4AE24C925EA2C710159F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/3137302e3234342e3138322e3132382f32352d3235203d3e20323636353036.roa
Signing time: Thu 26 Oct 2023 01:21:34 +0000
ROA not before: Thu 26 Oct 2023 01:16:34 +0000
ROA not after: Thu 24 Oct 2024 01:21:34 +0000
asID: 266506
IP address blocks: 170.244.182.128/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:8c:25:af:0d:6d:28:b8:dd:e8:87:49:38:36:93:f1:ba:44:67:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD595B734685C1E1321F4AE24C925EA2C710159F
Validity
Not Before: Oct 26 01:16:34 2023 GMT
Not After : Oct 24 01:21:34 2024 GMT
Subject: CN=1D6BEAF6AE3BA73F7FDC2A11365EBC02B93EEA8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f9:2e:84:11:27:44:a4:23:18:95:b9:78:bb:
d1:d8:aa:c9:c3:61:88:18:f7:84:54:a4:14:fa:45:
99:0b:8e:46:a8:dd:cf:a4:fc:08:6a:c4:53:9c:c7:
68:7a:26:34:dd:96:95:49:7d:da:3f:fa:92:16:da:
cc:2c:a7:44:14:e1:7a:7b:d0:29:07:34:9b:15:b8:
12:e6:05:58:31:00:dc:ca:10:c9:ff:d9:d2:53:98:
ca:ae:33:0a:be:a4:0e:63:0b:00:a1:dc:4c:62:88:
e9:0c:f0:08:5e:d7:01:8b:01:db:20:45:2e:42:0c:
7b:73:91:6a:35:a5:83:8b:75:8c:07:5a:8e:23:71:
0f:f7:8c:b4:bf:af:7a:b1:ce:b1:f2:d2:1c:c5:27:
c4:c0:c5:f7:a6:4c:51:cf:fe:c2:56:94:ad:4c:ed:
79:37:79:79:e6:17:d2:40:16:79:6b:6f:06:cf:97:
a9:e7:eb:e9:20:dd:d3:a1:b7:f4:15:cb:ee:cb:eb:
bd:96:85:cb:ac:c0:42:e5:3d:93:6e:79:67:0a:91:
7c:07:aa:83:55:cc:f1:db:98:45:a2:0b:78:a8:f1:
f0:9b:48:77:17:a2:87:82:e2:0e:90:0e:03:98:55:
fd:7f:41:69:a8:fb:bc:e5:05:61:12:8a:35:d6:c0:
3b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6B:EA:F6:AE:3B:A7:3F:7F:DC:2A:11:36:5E:BC:02:B9:3E:EA:8A
X509v3 Authority Key Identifier:
keyid:CD:59:5B:73:46:85:C1:E1:32:1F:4A:E2:4C:92:5E:A2:C7:10:15:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/CD595B734685C1E1321F4AE24C925EA2C710159F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD595B734685C1E1321F4AE24C925EA2C710159F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/3137302e3234342e3138322e3132382f32352d3235203d3e20323636353036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.244.182.128/25
Signature Algorithm: sha256WithRSAEncryption
2c:26:c3:66:de:7e:b5:97:b4:e4:76:15:e2:c2:bd:58:cb:e2:
21:6e:f2:86:43:e9:68:f5:0a:65:e4:89:8a:03:45:54:98:47:
22:85:92:29:00:79:46:a6:09:52:e8:cf:18:b4:7b:b6:9e:29:
15:04:7d:e3:30:78:ce:b2:a9:3e:6e:f8:f5:01:5e:04:d5:3a:
48:00:e5:e9:0e:6a:f9:1e:9e:da:39:f1:7d:c6:a8:8a:77:3e:
bc:50:9c:4e:3c:02:7e:a4:e4:2d:d1:dd:5c:2a:15:5b:d4:2c:
03:44:89:03:0b:77:5b:38:aa:1c:b1:99:2e:a2:4e:06:23:1c:
37:6c:37:05:05:44:b3:d2:c3:f8:aa:bf:a2:45:ff:40:b0:af:
47:7d:ba:63:30:57:a5:62:c8:e7:8a:f1:79:6c:d8:1f:8e:1d:
db:6f:2e:d3:b2:87:96:1d:41:cd:ed:0c:f8:91:29:e3:3d:ee:
d8:2e:20:2c:42:a5:a6:c7:2a:9a:7e:5c:c6:45:20:20:4f:0d:
25:57:8e:c2:bb:94:0b:44:c8:08:41:3c:5e:10:ba:21:e8:c4:
18:88:88:c6:25:ec:96:a2:b4:43:2e:88:47:9e:8b:e3:49:29:
b7:49:00:d5:82:8d:a9:5c:e5:91:70:fc:61:0f:33:74:5f:c9:
75:06:b8:ee
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUdowlrw1tKLjd6IdJODaT8bpEZ44wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Q1OTVCNzM0Njg1QzFFMTMyMUY0QUUyNEM5MjVFQTJD
NzEwMTU5RjAeFw0yMzEwMjYwMTE2MzRaFw0yNDEwMjQwMTIxMzRaMDMxMTAvBgNV
BAMTKDFENkJFQUY2QUUzQkE3M0Y3RkRDMkExMTM2NUVCQzAyQjkzRUVBOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv+S6EESdEpCMYlbl4u9HYqsnD
YYgY94RUpBT6RZkLjkao3c+k/AhqxFOcx2h6JjTdlpVJfdo/+pIW2swsp0QU4Xp7
0CkHNJsVuBLmBVgxANzKEMn/2dJTmMquMwq+pA5jCwCh3ExiiOkM8Ahe1wGLAdsg
RS5CDHtzkWo1pYOLdYwHWo4jcQ/3jLS/r3qxzrHy0hzFJ8TAxfemTFHP/sJWlK1M
7Xk3eXnmF9JAFnlrbwbPl6nn6+kg3dOht/QVy+7L672WhcuswELlPZNueWcKkXwH
qoNVzPHbmEWiC3io8fCbSHcXooeC4g6QDgOYVf1/QWmo+7zlBWESijXWwDvBAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUHWvq9q47pz9/3CoRNl68Ark+6oowHwYDVR0j
BBgwFoAUzVlbc0aFweEyH0riTJJeoscQFZ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnRGdWtrcXh0d1FVUG53d3c2U1pkekJaSDZOeGl4QTU4azFER0VQbzhy
NnQvMC9DRDU5NUI3MzQ2ODVDMUUxMzIxRjRBRTI0QzkyNUVBMkM3MTAxNTlGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NENTk1QjczNDY4NUMxRTEz
MjFGNEFFMjRDOTI1RUEyQzcxMDE1OUYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ0RnVra3F4dHdRVVBud3d3NlNaZHpCWkg2TnhpeEE1OGsxREdFUG84cjZ0LzAv
MzEzNzMwMmUzMjM0MzQyZTMxMzgzMjJlMzEzMjM4MmYzMjM1MmQzMjM1MjAzZDNl
MjAzMjM2MzYzNTMwMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYI
KwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQeq9LaAMA0GCSqGSIb3DQEBCwUAA4IB
AQAsJsNm3n61l7TkdhXiwr1Yy+IhbvKGQ+lo9Qpl5ImKA0VUmEcihZIpAHlGpglS
6M8YtHu2nikVBH3jMHjOsqk+bvj1AV4E1TpIAOXpDmr5Hp7aOfF9xqiKdz68UJxO
PAJ+pOQt0d1cKhVb1CwDRIkDC3dbOKocsZkuok4GIxw3bDcFBUSz0sP4qr+iRf9A
sK9HfbpjMFelYsjnivF5bNgfjh3bby7TsoeWHUHN7Qz4kSnjPe7YLiAsQqWmxyqa
flzGRSAgTw0lV47Cu5QLRMgIQTxeELoh6MQYiIjGJeyWorRDLohHnovjSSm3SQDV
go2pXOWRcPxhDzN0X8l1Brju
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:43:57 2025 by rpki-client