![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/3136382e3139362e3132392e302f32342d3234203d3e20323633323839.roa
File: 3136382e3139362e3132392e302f32342d3234203d3e20323633323839.roa (raw, json)
Hash identifier: Mxt9R9RZGKd/c928djdgkCllY7rWRbd4YGhIFBrsLJY=
Subject key identifier: EA:87:47:80:5C:DE:A0:10:7B:B7:94:EC:ED:ED:4F:CF:31:BF:DE:30
Certificate issuer: /CN=8CA2336475BC551CD8B0D5ECDA42170036666F54
Certificate serial: 1FA632CE0BF7FA3B3C9628159844D014385AF442
Authority key identifier: 8C:A2:33:64:75:BC:55:1C:D8:B0:D5:EC:DA:42:17:00:36:66:6F:54
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CA2336475BC551CD8B0D5ECDA42170036666F54.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/3136382e3139362e3132392e302f32342d3234203d3e20323633323839.roa
Signing time: Tue 16 Jan 2024 20:01:40 +0000
ROA not before: Tue 16 Jan 2024 19:56:40 +0000
ROA not after: Tue 14 Jan 2025 20:01:40 +0000
asID: 263289
IP address blocks: 168.196.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:a6:32:ce:0b:f7:fa:3b:3c:96:28:15:98:44:d0:14:38:5a:f4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8CA2336475BC551CD8B0D5ECDA42170036666F54
Validity
Not Before: Jan 16 19:56:40 2024 GMT
Not After : Jan 14 20:01:40 2025 GMT
Subject: CN=EA8747805CDEA0107BB794ECEDED4FCF31BFDE30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d1:f2:b2:27:37:26:a4:e6:74:cc:7f:4d:4f:
4e:18:bf:fc:d5:7f:85:2e:75:b2:31:1b:af:59:73:
fe:bc:b4:53:ac:25:69:92:45:24:90:8e:c8:50:42:
25:b5:a6:c4:8c:f5:6d:df:96:e1:bd:a5:05:ad:b4:
a0:3f:52:60:bb:2c:9c:f5:10:d2:f6:96:1a:0f:d1:
41:6f:fe:ac:24:64:84:2f:b7:e2:18:af:6e:0f:69:
fd:6f:ec:ca:42:86:bb:03:6b:4d:a6:72:29:53:7a:
bc:f6:75:38:72:13:19:9c:c5:84:2a:e6:36:9a:8e:
9f:45:07:63:70:74:bd:7c:8e:37:f5:c5:6b:9d:2a:
df:3f:47:e2:0a:05:dd:d6:bf:cc:ee:07:c4:41:e9:
41:29:7f:e6:81:3b:73:fb:3d:e7:45:bf:d0:6d:d5:
c2:20:7d:7d:0c:ff:b4:ba:4e:ec:02:2c:9b:0c:e0:
17:51:a9:52:9c:47:aa:b1:99:94:b3:99:00:2f:74:
9a:49:6f:fe:60:42:47:d5:9e:5a:06:fd:a2:fd:1c:
bb:eb:de:3a:7b:4d:fb:bd:ff:44:0c:3a:0a:f5:58:
33:0c:d6:11:c1:ef:e2:86:95:85:ea:ee:53:97:41:
81:ae:7a:9e:0f:6f:68:cb:a2:2c:30:a3:5c:72:0a:
71:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:87:47:80:5C:DE:A0:10:7B:B7:94:EC:ED:ED:4F:CF:31:BF:DE:30
X509v3 Authority Key Identifier:
keyid:8C:A2:33:64:75:BC:55:1C:D8:B0:D5:EC:DA:42:17:00:36:66:6F:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/8CA2336475BC551CD8B0D5ECDA42170036666F54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CA2336475BC551CD8B0D5ECDA42170036666F54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/3136382e3139362e3132392e302f32342d3234203d3e20323633323839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.196.129.0/24
Signature Algorithm: sha256WithRSAEncryption
72:93:20:93:7b:9f:ce:6c:6d:2a:59:cc:b9:c7:d2:e5:90:be:
37:fd:14:f9:5f:19:78:fd:bf:7c:5d:46:0f:be:a2:49:d9:ec:
67:ee:26:67:31:07:ea:23:e8:11:44:3f:21:16:26:fe:e1:67:
9f:6c:0e:18:5f:0e:d6:50:a5:ef:5b:48:3b:db:cc:cd:e9:50:
b7:fb:39:bb:4c:8c:a4:a2:20:45:e2:f0:ff:58:cf:59:04:c7:
30:f3:48:39:97:d7:ee:95:26:cc:ed:9a:d4:ea:5a:15:25:2c:
df:d6:45:b1:9f:6d:d2:41:10:d8:b2:ca:b7:73:e9:b2:0f:e2:
c4:45:61:ff:26:a4:21:19:e5:f3:e6:8f:f8:56:e1:43:37:3e:
a6:f7:8d:1a:0d:dd:5d:f8:1f:58:b6:3c:a9:80:5a:ca:db:fe:
ed:6e:6c:50:0c:1a:65:35:65:f0:59:7f:3b:24:41:a3:16:14:
3b:64:6c:56:06:8e:97:bd:85:37:11:53:f5:21:80:cb:e6:56:
0a:35:33:ba:a2:d4:93:ce:ec:a7:78:40:45:73:4d:74:53:0b:
00:9b:0f:7f:d1:9d:03:3b:e2:dc:24:15:51:c4:78:03:0d:dd:
71:02:c6:ab:30:08:ee:a8:39:ae:24:5a:12:05:fe:4c:e0:2b:
7c:55:59:09
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUH6Yyzgv3+js8ligVmETQFDha9EIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOENBMjMzNjQ3NUJDNTUxQ0Q4QjBENUVDREE0MjE3MDAz
NjY2NkY1NDAeFw0yNDAxMTYxOTU2NDBaFw0yNTAxMTQyMDAxNDBaMDMxMTAvBgNV
BAMTKEVBODc0NzgwNUNERUEwMTA3QkI3OTRFQ0VERUQ0RkNGMzFCRkRFMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC40fKyJzcmpOZ0zH9NT04Yv/zV
f4UudbIxG69Zc/68tFOsJWmSRSSQjshQQiW1psSM9W3fluG9pQWttKA/UmC7LJz1
ENL2lhoP0UFv/qwkZIQvt+IYr24Paf1v7MpChrsDa02mcilTerz2dThyExmcxYQq
5jaajp9FB2NwdL18jjf1xWudKt8/R+IKBd3Wv8zuB8RB6UEpf+aBO3P7PedFv9Bt
1cIgfX0M/7S6TuwCLJsM4BdRqVKcR6qxmZSzmQAvdJpJb/5gQkfVnloG/aL9HLvr
3jp7Tfu9/0QMOgr1WDMM1hHB7+KGlYXq7lOXQYGuep4Pb2jLoiwwo1xyCnFfAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU6odHgFzeoBB7t5Ts7e1PzzG/3jAwHwYDVR0j
BBgwFoAUjKIzZHW8VRzYsNXs2kIXADZmb1QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnljRjZpV0JpdFRMTnlrVHp4Q3N6TkttUDZUbnN1RXFSdU11YmE0MlBR
M1UvMC84Q0EyMzM2NDc1QkM1NTFDRDhCMEQ1RUNEQTQyMTcwMDM2NjY2RjU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhDQTIzMzY0NzVCQzU1MUNE
OEIwRDVFQ0RBNDIxNzAwMzY2NjZGNTQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ5Y0Y2aVdCaXRUTE55a1R6eENzek5LbVA2VG5zdUVxUnVNdWJhNDJQUTNVLzAv
MzEzNjM4MmUzMTM5MzYyZTMxMzIzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzMyMzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjEgTANBgkqhkiG9w0BAQsFAAOCAQEAcpMg
k3ufzmxtKlnMucfS5ZC+N/0U+V8ZeP2/fF1GD76iSdnsZ+4mZzEH6iPoEUQ/IRYm
/uFnn2wOGF8O1lCl71tIO9vMzelQt/s5u0yMpKIgReLw/1jPWQTHMPNIOZfX7pUm
zO2a1OpaFSUs39ZFsZ9t0kEQ2LLKt3Ppsg/ixEVh/yakIRnl8+aP+FbhQzc+pveN
Gg3dXfgfWLY8qYBaytv+7W5sUAwaZTVl8Fl/OyRBoxYUO2RsVgaOl72FNxFT9SGA
y+ZWCjUzuqLUk87sp3hARXNNdFMLAJsPf9GdAzvi3CQVUcR4Aw3dcQLGqzAI7qg5
riRaEgX+TOArfFVZCQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:05 2025 by rpki-client