![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/0/3136382e3230352e3232342e302f32322d3232203d3e20323634383637.roa
File: 3136382e3230352e3232342e302f32322d3232203d3e20323634383637.roa (raw, json)
Hash identifier: 0Qxu41lN4TZVy5fmkkRXYH5f80dn7Gpt36cylbS7Bdw=
Subject key identifier: 57:4A:5F:D8:36:CE:2C:8D:20:4D:4D:62:53:6B:E5:67:33:F5:DF:8E
Certificate issuer: /CN=A81080075593D65A04DB9FC78CAC8CA9E1EE8246
Certificate serial: 30DEBB6918967A716576BF63C376B774F01C3E74
Authority key identifier: A8:10:80:07:55:93:D6:5A:04:DB:9F:C7:8C:AC:8C:A9:E1:EE:82:46
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A81080075593D65A04DB9FC78CAC8CA9E1EE8246.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/0/3136382e3230352e3232342e302f32322d3232203d3e20323634383637.roa
Signing time: Fri 29 Dec 2023 02:31:11 +0000
ROA not before: Fri 29 Dec 2023 02:26:11 +0000
ROA not after: Fri 27 Dec 2024 02:31:11 +0000
asID: 264867
IP address blocks: 168.205.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:de:bb:69:18:96:7a:71:65:76:bf:63:c3:76:b7:74:f0:1c:3e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A81080075593D65A04DB9FC78CAC8CA9E1EE8246
Validity
Not Before: Dec 29 02:26:11 2023 GMT
Not After : Dec 27 02:31:11 2024 GMT
Subject: CN=574A5FD836CE2C8D204D4D62536BE56733F5DF8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:87:72:bf:f3:9e:17:26:c5:6c:77:62:e4:ab:
eb:e7:df:46:07:97:0d:05:0e:07:07:83:df:1c:80:
b2:7b:2d:84:90:50:53:1a:ab:46:88:68:87:f6:81:
a6:c7:5f:0d:ec:c9:dd:a5:88:98:d8:dd:d0:c7:e8:
ce:2b:fa:49:b2:7a:bf:b9:c8:30:02:1b:1a:73:ea:
44:45:e1:48:09:8a:27:ee:e8:6d:56:70:f8:bd:d5:
ce:7e:54:31:a1:99:8f:9b:13:e7:98:dc:62:50:53:
f0:f0:31:7a:6a:98:ca:36:b8:43:a4:c0:22:9b:97:
4f:be:be:6f:11:5d:43:27:f0:35:90:b2:dc:72:c1:
76:36:e6:51:0c:c5:a6:96:69:aa:9b:49:90:f8:b4:
ad:dc:de:a6:2a:49:92:04:bf:34:29:38:94:8a:4a:
40:ad:0d:12:60:f2:fb:1b:3d:c0:6a:6e:d7:4b:3e:
76:d5:56:53:51:4f:a3:04:83:d4:3d:a0:fe:2c:39:
f1:bd:b5:3b:fe:e4:5d:cc:db:73:9f:8a:44:5d:5d:
81:85:d0:f1:f0:18:ed:b8:0c:9f:13:6a:d0:e1:1d:
7b:66:5a:a6:22:8b:dd:f4:22:f3:48:45:2e:cf:d9:
2c:60:66:d2:c2:c0:8a:54:0d:e9:71:58:48:d4:53:
1b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4A:5F:D8:36:CE:2C:8D:20:4D:4D:62:53:6B:E5:67:33:F5:DF:8E
X509v3 Authority Key Identifier:
keyid:A8:10:80:07:55:93:D6:5A:04:DB:9F:C7:8C:AC:8C:A9:E1:EE:82:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/0/A81080075593D65A04DB9FC78CAC8CA9E1EE8246.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A81080075593D65A04DB9FC78CAC8CA9E1EE8246.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/0/3136382e3230352e3232342e302f32322d3232203d3e20323634383637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.205.224.0/22
Signature Algorithm: sha256WithRSAEncryption
72:fc:d8:f6:88:12:3b:5d:7f:9f:41:17:5b:47:ec:88:0d:1a:
4e:1d:c8:bb:e6:7d:8c:b4:60:90:02:66:63:6b:ce:60:09:91:
64:c7:91:fe:be:49:90:89:41:99:2e:60:56:6c:2e:ef:a1:8c:
28:12:ae:6f:71:e4:b6:3b:ab:e1:32:5d:b6:2b:8b:4c:bd:04:
3e:7e:c1:aa:38:42:25:aa:29:e9:0e:d2:59:42:78:36:cc:30:
8e:e5:47:9d:99:4e:80:70:34:dc:ba:d3:b0:da:d5:34:bc:74:
bc:71:4e:da:4a:3d:18:65:a0:55:49:9f:62:34:65:62:8b:26:
38:c6:6b:9f:ff:b6:0f:8e:f1:65:2e:ce:73:cb:32:0f:6c:bb:
85:53:35:47:34:8a:3b:3e:08:d1:67:67:ed:29:ec:c4:2d:21:
16:a1:cd:6d:7c:f6:1a:46:93:12:47:63:6a:96:a8:1c:54:31:
9b:74:d4:02:0d:b8:ba:c0:16:34:19:6a:72:c8:bb:94:03:ce:
2d:aa:08:81:47:ce:41:27:d6:39:0d:80:86:b5:e7:c3:15:4d:
1c:fb:47:a6:8c:93:01:14:b2:8c:76:cc:eb:7b:b2:91:8f:45:
93:0d:2e:31:ed:78:28:a7:b5:e6:f2:f8:64:77:1a:67:57:b9:
37:c2:15:82
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUMN67aRiWenFldr9jw3a3dPAcPnQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTgxMDgwMDc1NTkzRDY1QTA0REI5RkM3OENBQzhDQTlF
MUVFODI0NjAeFw0yMzEyMjkwMjI2MTFaFw0yNDEyMjcwMjMxMTFaMDMxMTAvBgNV
BAMTKDU3NEE1RkQ4MzZDRTJDOEQyMDRENEQ2MjUzNkJFNTY3MzNGNURGOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2h3K/854XJsVsd2Lkq+vn30YH
lw0FDgcHg98cgLJ7LYSQUFMaq0aIaIf2gabHXw3syd2liJjY3dDH6M4r+kmyer+5
yDACGxpz6kRF4UgJiifu6G1WcPi91c5+VDGhmY+bE+eY3GJQU/DwMXpqmMo2uEOk
wCKbl0++vm8RXUMn8DWQstxywXY25lEMxaaWaaqbSZD4tK3c3qYqSZIEvzQpOJSK
SkCtDRJg8vsbPcBqbtdLPnbVVlNRT6MEg9Q9oP4sOfG9tTv+5F3M23OfikRdXYGF
0PHwGO24DJ8TatDhHXtmWqYii930IvNIRS7P2SxgZtLCwIpUDelxWEjUUxubAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUV0pf2DbOLI0gTU1iU2vlZzP1344wHwYDVR0j
BBgwFoAUqBCAB1WT1loE25/HjKyMqeHugkYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0ZoSDNjcVphOHNHY1pBM21LWGtnNjZKb2FoUG05VlNYaUVaNHJpWVpD
MTQvMC9BODEwODAwNzU1OTNENjVBMDREQjlGQzc4Q0FDOENBOUUxRUU4MjQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E4MTA4MDA3NTU5M0Q2NUEw
NERCOUZDNzhDQUM4Q0E5RTFFRTgyNDYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNGaEgzY3FaYThzR2NaQTNtS1hrZzY2Sm9haFBtOVZTWGlFWjRyaVlaQzE0LzAv
MzEzNjM4MmUzMjMwMzUyZTMyMzIzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNDM4MzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjN4DANBgkqhkiG9w0BAQsFAAOCAQEAcvzY
9ogSO11/n0EXW0fsiA0aTh3Iu+Z9jLRgkAJmY2vOYAmRZMeR/r5JkIlBmS5gVmwu
76GMKBKub3Hktjur4TJdtiuLTL0EPn7BqjhCJaop6Q7SWUJ4NswwjuVHnZlOgHA0
3LrTsNrVNLx0vHFO2ko9GGWgVUmfYjRlYosmOMZrn/+2D47xZS7Oc8syD2y7hVM1
RzSKOz4I0Wdn7SnsxC0hFqHNbXz2GkaTEkdjapaoHFQxm3TUAg24usAWNBlqcsi7
lAPOLaoIgUfOQSfWOQ2AhrXnwxVNHPtHpoyTARSyjHbM63uykY9Fkw0uMe14KKe1
5vL4ZHcaZ1e5N8IVgg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:20 2025 by rpki-client