![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/3133382e3131382e3232332e302f32342d3234203d3e20323634323733.roa
File: 3133382e3131382e3232332e302f32342d3234203d3e20323634323733.roa (raw, json)
Hash identifier: qEx9nJHl1fp/xBNlZOit5lQwb31eUGyQ5JbbyYO9ZFk=
Subject key identifier: 9E:10:13:55:C3:74:C1:D1:4B:C8:16:54:F5:23:37:22:1C:84:A8:46
Certificate issuer: /CN=F42A0DCA25F30767A6CCA69324EE2356AC775DE7
Certificate serial: 4258326D9FE3B275B3C4B737F27A25BE168EBD92
Authority key identifier: F4:2A:0D:CA:25:F3:07:67:A6:CC:A6:93:24:EE:23:56:AC:77:5D:E7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F42A0DCA25F30767A6CCA69324EE2356AC775DE7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/3133382e3131382e3232332e302f32342d3234203d3e20323634323733.roa
Signing time: Wed 07 Feb 2024 12:58:37 +0000
ROA not before: Wed 07 Feb 2024 12:53:37 +0000
ROA not after: Wed 05 Feb 2025 12:58:37 +0000
asID: 264273
IP address blocks: 138.118.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:58:32:6d:9f:e3:b2:75:b3:c4:b7:37:f2:7a:25:be:16:8e:bd:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F42A0DCA25F30767A6CCA69324EE2356AC775DE7
Validity
Not Before: Feb 7 12:53:37 2024 GMT
Not After : Feb 5 12:58:37 2025 GMT
Subject: CN=9E101355C374C1D14BC81654F52337221C84A846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:38:5a:58:f8:7f:5c:cc:83:d9:d7:c5:be:a1:
51:93:f2:22:14:23:ac:e4:ff:ff:93:2b:5e:73:45:
31:ac:7a:b9:06:c1:a0:15:d7:9a:d3:a7:6f:74:0b:
b6:97:90:02:c7:32:68:9e:58:be:8b:44:ff:4a:70:
d6:8d:5d:8b:a7:1d:d5:99:ce:ec:87:fd:2f:3f:aa:
19:7a:02:39:5c:01:66:92:41:f8:15:31:95:75:b5:
a8:72:19:75:96:b1:81:cf:10:a4:9c:3b:8d:b9:7f:
2e:4d:eb:20:8f:ce:f1:aa:87:65:c5:ac:55:10:91:
41:9e:70:c8:06:5b:ae:74:4d:f0:27:27:27:75:44:
2c:f4:7c:e3:59:72:2b:37:7f:06:8e:e1:7f:58:25:
10:c0:eb:b2:81:a5:b2:1e:0c:1e:bb:5b:a2:a6:57:
8b:24:be:0f:23:e3:7a:2f:20:ce:a6:ff:a9:c2:2b:
18:15:40:48:19:93:d7:77:62:4b:dc:db:db:f3:29:
2d:33:14:10:43:51:8f:01:d4:59:05:22:f1:97:65:
53:ef:13:73:57:2d:e1:26:99:01:d5:83:ae:44:ed:
68:4f:de:4e:fc:c0:70:09:75:75:ea:7d:d2:d2:44:
b6:ce:92:29:9e:b9:e5:db:0d:eb:e7:66:bb:43:0c:
84:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:10:13:55:C3:74:C1:D1:4B:C8:16:54:F5:23:37:22:1C:84:A8:46
X509v3 Authority Key Identifier:
keyid:F4:2A:0D:CA:25:F3:07:67:A6:CC:A6:93:24:EE:23:56:AC:77:5D:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/F42A0DCA25F30767A6CCA69324EE2356AC775DE7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F42A0DCA25F30767A6CCA69324EE2356AC775DE7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/3133382e3131382e3232332e302f32342d3234203d3e20323634323733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.223.0/24
Signature Algorithm: sha256WithRSAEncryption
68:5f:4c:74:50:7d:6a:49:cb:bb:88:a7:11:3f:97:48:da:57:
cf:ae:04:4b:bc:36:44:58:7d:14:39:d8:e0:f7:ee:75:eb:48:
18:4b:f3:c1:33:8a:0c:20:ac:7f:87:ff:d1:82:92:1d:bc:49:
32:35:f6:b4:c0:8d:49:9b:0c:30:c2:7a:ab:86:af:e3:e5:06:
18:c6:66:3e:57:92:b0:24:f6:35:af:13:38:fd:23:54:01:e7:
ad:f9:a7:aa:fa:10:09:11:fa:ff:ac:f2:94:63:5c:a4:09:bf:
72:05:05:c8:7e:3b:c3:93:e8:5c:a8:8c:1f:b0:3c:ba:ba:fd:
75:5f:ca:b1:aa:a5:ac:e9:43:52:95:f5:d9:db:4e:7c:bd:0f:
88:91:ac:7c:2c:64:f8:6f:4d:b0:63:f8:f0:b7:b3:fd:29:6b:
1c:31:58:75:e5:ae:4c:6a:9d:e4:d2:b3:7a:ac:0d:fc:b2:fe:
80:61:d5:67:b6:0b:ef:91:75:11:55:43:2d:08:58:d9:86:9a:
38:a8:7e:c7:89:75:5e:79:34:06:44:21:18:90:48:35:00:13:
92:02:5c:9f:40:14:21:4d:ac:b6:71:62:01:77:b5:9a:da:70:
59:5e:e0:91:b2:25:9f:25:d1:0f:f6:46:80:6d:02:e5:a2:59:
b2:14:76:95
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQlgybZ/jsnWzxLc38nolvhaOvZIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQyQTBEQ0EyNUYzMDc2N0E2Q0NBNjkzMjRFRTIzNTZB
Qzc3NURFNzAeFw0yNDAyMDcxMjUzMzdaFw0yNTAyMDUxMjU4MzdaMDMxMTAvBgNV
BAMTKDlFMTAxMzU1QzM3NEMxRDE0QkM4MTY1NEY1MjMzNzIyMUM4NEE4NDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7OFpY+H9czIPZ18W+oVGT8iIU
I6zk//+TK15zRTGserkGwaAV15rTp290C7aXkALHMmieWL6LRP9KcNaNXYunHdWZ
zuyH/S8/qhl6AjlcAWaSQfgVMZV1tahyGXWWsYHPEKScO425fy5N6yCPzvGqh2XF
rFUQkUGecMgGW650TfAnJyd1RCz0fONZcis3fwaO4X9YJRDA67KBpbIeDB67W6Km
V4skvg8j43ovIM6m/6nCKxgVQEgZk9d3Ykvc29vzKS0zFBBDUY8B1FkFIvGXZVPv
E3NXLeEmmQHVg65E7WhP3k78wHAJdXXqfdLSRLbOkimeueXbDevnZrtDDIRhAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUnhATVcN0wdFLyBZU9SM3IhyEqEYwHwYDVR0j
BBgwFoAU9CoNyiXzB2emzKaTJO4jVqx3XecwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzFNVm5Rbmk5OXZ3QTdIcjZqV25ORXc0a1d0blQ0R1A5ZWZnWW5IbTVn
MlkvMC9GNDJBMERDQTI1RjMwNzY3QTZDQ0E2OTMyNEVFMjM1NkFDNzc1REU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y0MkEwRENBMjVGMzA3NjdB
NkNDQTY5MzI0RUUyMzU2QUM3NzVERTcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzMxTVZuUW5pOTl2d0E3SHI2alduTkV3NGtXdG5UNEdQOWVmZ1luSG01ZzJZLzAv
MzEzMzM4MmUzMTMxMzgyZTMyMzIzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDMyMzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIp23zANBgkqhkiG9w0BAQsFAAOCAQEAaF9M
dFB9aknLu4inET+XSNpXz64ES7w2RFh9FDnY4PfudetIGEvzwTOKDCCsf4f/0YKS
HbxJMjX2tMCNSZsMMMJ6q4av4+UGGMZmPleSsCT2Na8TOP0jVAHnrfmnqvoQCRH6
/6zylGNcpAm/cgUFyH47w5PoXKiMH7A8urr9dV/KsaqlrOlDUpX12dtOfL0PiJGs
fCxk+G9NsGP48Lez/SlrHDFYdeWuTGqd5NKzeqwN/LL+gGHVZ7YL75F1EVVDLQhY
2YaaOKh+x4l1Xnk0BkQhGJBINQATkgJcn0AUIU2stnFiAXe1mtpwWV7gkbIlnyXR
D/ZGgG0C5aJZshR2lQ==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:09 2025 by rpki-client