![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/3133382e3131382e3232322e302f32332d3233203d3e20323634323733.roa
File: 3133382e3131382e3232322e302f32332d3233203d3e20323634323733.roa (raw, json)
Hash identifier: DstD3Xjf5cWhncSTU5i6emvB6iJp/cc7gOpZ2wfJb0A=
Subject key identifier: 42:7D:F9:B8:0B:B8:4F:BD:FA:BE:B3:70:5E:67:B5:47:0C:0B:68:8D
Certificate issuer: /CN=F42A0DCA25F30767A6CCA69324EE2356AC775DE7
Certificate serial: 6F10495A62E9759D5BE690328D9BD0888A90FA22
Authority key identifier: F4:2A:0D:CA:25:F3:07:67:A6:CC:A6:93:24:EE:23:56:AC:77:5D:E7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F42A0DCA25F30767A6CCA69324EE2356AC775DE7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/3133382e3131382e3232322e302f32332d3233203d3e20323634323733.roa
Signing time: Wed 07 Feb 2024 12:58:39 +0000
ROA not before: Wed 07 Feb 2024 12:53:39 +0000
ROA not after: Wed 05 Feb 2025 12:58:39 +0000
asID: 264273
IP address blocks: 138.118.222.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:10:49:5a:62:e9:75:9d:5b:e6:90:32:8d:9b:d0:88:8a:90:fa:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F42A0DCA25F30767A6CCA69324EE2356AC775DE7
Validity
Not Before: Feb 7 12:53:39 2024 GMT
Not After : Feb 5 12:58:39 2025 GMT
Subject: CN=427DF9B80BB84FBDFABEB3705E67B5470C0B688D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a2:c9:ee:b4:08:23:5e:74:5c:eb:d1:07:27:
0e:eb:7e:34:38:8f:bf:1d:9a:84:56:5f:90:8c:7f:
76:35:4b:b9:25:2e:6e:31:ab:03:6c:20:2e:fe:7a:
c5:db:98:ee:49:41:bd:70:e0:5a:30:b5:63:12:76:
20:1f:b2:19:2a:bf:1b:e7:21:cf:7a:9b:68:ce:70:
94:21:6c:de:f2:4c:7b:1d:09:d3:4c:d6:04:f6:11:
6b:45:87:90:c8:b3:f2:52:69:80:bd:a5:40:5c:f8:
35:cd:7c:11:3a:49:2b:19:24:83:92:f1:0d:f3:de:
35:0e:f4:ed:f8:10:40:d6:2e:c6:4a:aa:9d:d6:39:
ed:21:ab:1f:a5:0c:e5:30:df:a6:21:4c:78:64:8e:
da:be:1d:fa:cf:60:8f:01:f8:fc:06:e5:74:59:14:
f8:f5:ae:e5:2b:39:5d:80:3d:61:cd:fa:f2:fd:cc:
d9:12:78:e5:48:7a:81:ec:ce:02:bc:da:58:28:01:
d2:22:2c:be:5b:51:7d:a5:14:21:6d:7a:4d:33:32:
fb:66:f6:f2:6f:1d:6f:60:00:9f:98:8c:8c:6e:67:
c8:7a:e8:b3:21:e3:d7:d6:6b:06:89:c5:aa:91:b3:
56:6d:94:ff:ee:cc:73:8a:53:f1:a7:b5:e2:e0:c4:
7a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7D:F9:B8:0B:B8:4F:BD:FA:BE:B3:70:5E:67:B5:47:0C:0B:68:8D
X509v3 Authority Key Identifier:
keyid:F4:2A:0D:CA:25:F3:07:67:A6:CC:A6:93:24:EE:23:56:AC:77:5D:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/F42A0DCA25F30767A6CCA69324EE2356AC775DE7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F42A0DCA25F30767A6CCA69324EE2356AC775DE7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/3133382e3131382e3232322e302f32332d3233203d3e20323634323733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.222.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:74:1a:37:48:7c:08:da:76:88:95:53:85:8e:08:30:83:4e:
66:eb:75:34:3c:3f:ac:32:54:86:90:b3:fa:ab:17:fd:cb:1a:
b5:fd:14:4c:de:14:fc:cd:bb:b9:3f:2e:15:85:53:06:78:9a:
51:70:40:b5:3c:ce:0c:bd:26:54:c7:50:b1:6b:f6:2b:f6:49:
3c:83:39:ed:72:9d:00:3e:91:80:90:d3:4f:37:7d:d8:6b:08:
ae:36:cf:8f:e2:54:7d:e9:5f:ef:78:b5:e8:da:ed:39:71:11:
bf:44:9c:05:d5:24:61:74:e8:40:14:3a:a3:9b:39:90:1b:74:
7c:3b:99:30:04:a0:4c:1f:7f:49:13:d3:60:81:af:68:de:b0:
64:12:11:c8:e1:fb:23:24:88:f2:4c:87:17:3e:9f:f2:78:db:
fc:9c:c6:7a:61:75:d7:b6:6c:2f:f8:34:08:21:2c:92:08:10:
7f:76:27:53:33:fb:da:4a:5c:44:be:c7:cf:40:3b:8f:40:75:
9b:98:24:0b:d5:5e:8c:5a:92:89:38:ab:18:37:54:e6:67:1f:
c4:c6:d7:ce:a7:5a:d9:6b:e9:fc:cb:f7:ce:24:b2:50:ae:99:
07:98:43:e2:fb:2e:80:af:3d:bc:25:67:7b:de:22:97:f5:93:
6c:2f:ed:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:19:56 2025 by rpki-client