![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/1/3137302e38332e33362e302f32322d3332203d3e2033333536.roa
File: 3137302e38332e33362e302f32322d3332203d3e2033333536.roa (raw, json)
Hash identifier: 5LZAuz8tKa6ji7MqzYuxQ1Bzxk3oKVyI0kpCavJEs1o=
Subject key identifier: E7:63:3C:82:1F:D3:A8:D0:E7:DA:9B:8D:53:1C:CF:46:63:ED:5E:6E
Certificate issuer: /CN=C6515BA471C9733A2EE467323C9F6EE88BE098A6
Certificate serial: 131946D417C7CC92C447AC7F011CFD9269402DCD
Authority key identifier: C6:51:5B:A4:71:C9:73:3A:2E:E4:67:32:3C:9F:6E:E8:8B:E0:98:A6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6515BA471C9733A2EE467323C9F6EE88BE098A6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/1/3137302e38332e33362e302f32322d3332203d3e2033333536.roa
Signing time: Fri 05 Apr 2024 01:03:59 +0000
ROA not before: Fri 05 Apr 2024 00:58:59 +0000
ROA not after: Fri 04 Apr 2025 01:03:59 +0000
asID: 3356
IP address blocks: 170.83.36.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:19:46:d4:17:c7:cc:92:c4:47:ac:7f:01:1c:fd:92:69:40:2d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C6515BA471C9733A2EE467323C9F6EE88BE098A6
Validity
Not Before: Apr 5 00:58:59 2024 GMT
Not After : Apr 4 01:03:59 2025 GMT
Subject: CN=E7633C821FD3A8D0E7DA9B8D531CCF4663ED5E6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:74:a6:80:d1:13:1a:f6:49:09:96:f3:0b:e7:
ea:bb:c0:d1:2a:18:7c:01:c1:e6:12:1a:eb:00:0d:
f0:f5:f4:d5:93:b3:97:f4:64:22:cc:2e:73:ff:ed:
81:d5:4c:bf:16:79:ca:fd:a5:ee:7c:5d:61:c0:86:
4d:3c:99:e6:82:1d:84:3d:67:e4:66:f4:fa:0e:67:
d4:88:d1:30:76:8e:81:ca:40:f8:ec:d4:f3:1c:f2:
fd:47:bc:e8:7e:92:96:e2:15:48:da:2c:0b:fd:26:
ae:97:f1:6e:0c:d9:1c:dd:70:75:5a:2a:2a:eb:d5:
14:ca:a6:63:54:19:c4:b8:12:c6:b1:36:47:48:a9:
41:3a:e4:b5:c8:53:81:b5:87:90:93:11:d6:dc:0e:
ea:3c:09:57:e6:19:cf:83:55:c3:be:c5:79:e8:2a:
27:15:15:f4:b4:05:d1:6f:8b:a2:a4:3a:e0:9f:00:
1a:c7:54:be:c5:71:90:92:5c:b5:07:a2:73:bb:22:
3d:74:50:69:33:8c:ab:f8:19:a5:70:c9:db:76:62:
fd:3f:10:1b:b1:2e:0e:e6:c9:85:31:19:dc:f1:21:
72:fa:6a:cf:07:9e:32:34:93:d1:58:8d:5d:6d:fa:
82:cd:cf:ec:27:0a:a9:fb:38:b8:d4:18:85:ca:b0:
f2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:63:3C:82:1F:D3:A8:D0:E7:DA:9B:8D:53:1C:CF:46:63:ED:5E:6E
X509v3 Authority Key Identifier:
keyid:C6:51:5B:A4:71:C9:73:3A:2E:E4:67:32:3C:9F:6E:E8:8B:E0:98:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/1/C6515BA471C9733A2EE467323C9F6EE88BE098A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6515BA471C9733A2EE467323C9F6EE88BE098A6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/1/3137302e38332e33362e302f32322d3332203d3e2033333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.83.36.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:ca:59:87:9b:7f:0c:d8:5b:03:3f:04:a2:f7:19:db:97:ed:
e2:5f:71:5a:8a:31:7a:1e:88:c9:19:76:cb:ff:39:43:51:7f:
97:ad:fd:f1:ee:b2:c6:85:26:d4:d4:3f:ba:9c:52:76:8a:eb:
49:3a:f9:63:cc:62:23:0f:d5:e4:93:20:f7:ee:57:78:69:a2:
32:27:6c:83:4b:18:57:55:d7:17:e6:b0:36:e1:78:ce:7a:96:
d9:df:f7:4d:65:30:8f:41:2c:b0:f7:8c:7e:48:fd:17:ab:88:
c1:98:50:41:21:c4:76:9c:cb:8f:a2:84:d8:5f:38:ea:5d:1a:
30:55:3e:ac:4f:ab:17:e7:ba:74:d9:57:aa:03:76:28:86:09:
c8:92:a7:40:b1:d4:93:ac:b0:b6:eb:dc:04:74:62:ea:96:c6:
e0:bf:c5:b2:f0:ca:03:a7:76:d5:39:73:47:44:82:02:51:9f:
43:52:cf:fe:61:f2:4c:67:6e:83:9b:25:1c:d5:86:53:f8:57:
e3:73:15:d5:7b:a3:f8:8d:b5:7a:e3:ef:8d:be:ab:4a:28:53:
ec:a0:92:35:a8:53:67:34:7a:97:4b:c7:4d:18:ed:77:b1:73:
a9:88:3e:71:8b:10:7c:2f:94:c6:d5:67:94:45:ce:5d:a3:52:
e4:2f:cf:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:17:25 2025 by rpki-client