![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/0/32342e3135322e36382e302f32322d3234203d3e20323730343835.roa
File: 32342e3135322e36382e302f32322d3234203d3e20323730343835.roa (raw, json)
Hash identifier: LpoB01UwtzC66Uj/px9l3WxGLqyAk3/BNxgRBk6T5MY=
Subject key identifier: C9:82:1B:DB:36:9E:73:8D:5F:23:47:3A:23:C4:30:41:61:58:FD:08
Certificate issuer: /CN=CA696FB59BAE4926964E7F1FABB3F5C6A93F443B
Certificate serial: 66A0F63D468B1D73188E137C157052F31421EA0B
Authority key identifier: CA:69:6F:B5:9B:AE:49:26:96:4E:7F:1F:AB:B3:F5:C6:A9:3F:44:3B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA696FB59BAE4926964E7F1FABB3F5C6A93F443B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/0/32342e3135322e36382e302f32322d3234203d3e20323730343835.roa
Signing time: Thu 04 Apr 2024 19:00:00 +0000
ROA not before: Thu 04 Apr 2024 18:55:00 +0000
ROA not after: Thu 03 Apr 2025 19:00:00 +0000
asID: 270485
IP address blocks: 24.152.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:a0:f6:3d:46:8b:1d:73:18:8e:13:7c:15:70:52:f3:14:21:ea:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA696FB59BAE4926964E7F1FABB3F5C6A93F443B
Validity
Not Before: Apr 4 18:55:00 2024 GMT
Not After : Apr 3 19:00:00 2025 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cb:7f:cf:10:a8:42:45:a4:b0:5f:87:34:b9:
c0:16:f6:9c:c4:bd:e2:40:74:e6:da:54:91:84:74:
51:03:42:f8:fc:26:a3:71:af:9c:c6:fe:d3:e7:fb:
12:e7:4b:0b:eb:f0:e4:42:f4:d3:83:01:94:c5:83:
c2:a9:9d:cb:9a:f4:aa:42:2f:db:5b:ba:dd:a5:c9:
c7:f6:0d:6d:25:a0:e7:d8:2c:3d:e2:38:be:93:e0:
18:54:09:89:f6:bf:e1:66:e0:70:b6:fc:5d:ac:b0:
05:eb:b6:47:29:4a:43:d6:4d:b0:33:9b:b8:c0:05:
d8:0f:13:8e:f5:36:fd:18:32:9c:b1:0e:65:12:d5:
0a:74:c5:33:e4:7b:4b:ac:87:9d:f0:f4:7b:b5:1e:
c0:05:f8:bb:c8:11:5f:f4:1d:50:29:4c:c8:0d:76:
61:53:0c:84:cd:6a:a7:e9:fc:d4:2f:40:69:02:07:
7d:af:44:81:13:90:b8:7d:4d:57:86:88:31:d1:99:
4f:30:04:dd:37:75:d2:05:75:76:ca:ff:e7:b3:2e:
cc:09:8a:e4:b3:76:58:c8:a8:1f:73:44:14:d4:9a:
9a:86:e0:e4:f7:fb:c9:2c:4b:d5:ad:65:28:00:92:
7c:41:fd:0b:14:e2:06:4c:e0:f3:da:9d:ad:ad:a0:
0a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:82:1B:DB:36:9E:73:8D:5F:23:47:3A:23:C4:30:41:61:58:FD:08
X509v3 Authority Key Identifier:
keyid:CA:69:6F:B5:9B:AE:49:26:96:4E:7F:1F:AB:B3:F5:C6:A9:3F:44:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/0/CA696FB59BAE4926964E7F1FABB3F5C6A93F443B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA696FB59BAE4926964E7F1FABB3F5C6A93F443B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/0/32342e3135322e36382e302f32322d3234203d3e20323730343835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.152.68.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:f8:a8:8c:b4:8e:e1:ac:f8:65:5a:09:de:82:c0:5c:62:1f:
6b:b8:78:14:ed:e4:c6:8c:c5:36:f4:2b:08:e6:22:bd:83:f9:
3f:ad:40:a2:e4:19:f8:a6:33:84:91:70:de:2d:3f:a3:4e:44:
48:61:b8:8e:91:d0:87:00:43:e1:08:19:44:60:18:31:ac:39:
1e:dc:f6:eb:bd:f8:a8:22:8d:f3:39:80:9a:16:03:a3:93:fb:
60:a8:f5:d2:8c:2c:a5:40:ea:eb:33:3c:9e:12:3e:e8:49:0b:
0b:8a:c4:71:16:73:a4:f6:1c:1a:c4:fd:20:3f:ea:9b:e0:31:
c5:a0:0b:04:cb:dd:47:c1:25:1d:c6:99:27:3b:45:4a:dc:a7:
c8:88:7d:76:1e:86:c4:ad:bc:a5:bd:0f:95:04:47:9e:dd:df:
ab:90:87:6d:5a:a1:da:52:f6:7c:95:e4:c1:7d:2a:1b:41:5e:
6e:45:dc:b9:36:56:09:57:12:8c:5a:26:e9:3a:55:08:89:23:
b0:92:2b:26:ab:61:0e:99:9e:8b:0a:f3:92:d3:0e:fd:71:c3:
79:ca:1c:7a:59:fe:33:04:29:d7:50:bd:da:e2:be:4b:ec:35:
71:7f:fe:53:57:75:95:b2:82:b2:c4:8b:c5:c3:57:d6:83:cc:
b6:04:7e:97
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUZqD2PUaLHXMYjhN8FXBS8xQh6gswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0E2OTZGQjU5QkFFNDkyNjk2NEU3RjFGQUJCM0Y1QzZB
OTNGNDQzQjAeFw0yNDA0MDQxODU1MDBaFw0yNTA0MDMxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDVDQjdGQ0YxMEE4NDI0NUE0
QjA1Rjg3MzRCOUMwMTZGNjlDQzRCREUyNDA3NEU2REE1NDkxODQ3NDUxMDM0MkY4
RkMyNkEzNzFBRjlDQzZGRUQzRTdGQjEyRTc0QjBCRUJGMEU0NDJGNEQzODMwMTk0
QzU4M0MyQTk5RENCOUFGNEFBNDIyRkRCNUJCQUREQTVDOUM3RjYwRDZEMjVBMEU3
RDgyQzNERTIzOEJFOTNFMDE4NTQwOTg5RjZCRkUxNjZFMDcwQjZGQzVEQUNCMDA1
RUJCNjQ3Mjk0QTQzRDY0REIwMzM5QkI4QzAwNUQ4MEYxMzhFRjUzNkZEMTgzMjlD
QjEwRTY1MTJENTBBNzRDNTMzRTQ3QjRCQUM4NzlERjBGNDdCQjUxRUMwMDVGOEJC
QzgxMTVGRjQxRDUwMjk0Q0M4MEQ3NjYxNTMwQzg0Q0Q2QUE3RTlGQ0Q0MkY0MDY5
MDIwNzdEQUY0NDgxMTM5MEI4N0Q0RDU3ODY4ODMxRDE5OTRGMzAwNEREMzc3NUQy
MDU3NTc2Q0FGRkU3QjMyRUNDMDk4QUU0QjM3NjU4QzhBODFGNzM0NDE0RDQ5QTlB
ODZFMEU0RjdGQkM5MkM0QkQ1QUQ2NTI4MDA5MjdDNDFGRDBCMTRFMjA2NENFMEYz
REE5REFEQURBMDBBM0IwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1ct/zxCoQkWksF+HNLnAFvacxL3iQHTm2lSRhHRRA0L4/Cajca+c
xv7T5/sS50sL6/DkQvTTgwGUxYPCqZ3LmvSqQi/bW7rdpcnH9g1tJaDn2Cw94ji+
k+AYVAmJ9r/hZuBwtvxdrLAF67ZHKUpD1k2wM5u4wAXYDxOO9Tb9GDKcsQ5lEtUK
dMUz5HtLrIed8PR7tR7ABfi7yBFf9B1QKUzIDXZhUwyEzWqn6fzUL0BpAgd9r0SB
E5C4fU1Xhogx0ZlPMATdN3XSBXV2yv/nsy7MCYrks3ZYyKgfc0QU1JqahuDk9/vJ
LEvVrWUoAJJ8Qf0LFOIGTODz2p2traAKOwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FMmCG9s2nnONXyNHOiPEMEFhWP0IMB8GA1UdIwQYMBaAFMppb7Wbrkkmlk5/H6uz
9capP0Q7MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNSNmtvNDVIR1MzWGNr
dDdaYWdSNGhaekVtZURBa0RKc25LMmVaRUJyS2RTLzAvQ0E2OTZGQjU5QkFFNDky
Njk2NEU3RjFGQUJCM0Y1QzZBOTNGNDQzQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9DQTY5NkZCNTlCQUU0OTI2OTY0RTdGMUZBQkIzRjVDNkE5M0Y0
NDNCLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zUjZrbzQ1SEdTM1hja3Q3WmFn
UjRoWnpFbWVEQWtESnNuSzJlWkVCcktkUy8wLzMyMzQyZTMxMzUzMjJlMzYzODJl
MzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzczMDM0MzgzNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAhiY
RDANBgkqhkiG9w0BAQsFAAOCAQEAbviojLSO4az4ZVoJ3oLAXGIfa7h4FO3kxozF
NvQrCOYivYP5P61AouQZ+KYzhJFw3i0/o05ESGG4jpHQhwBD4QgZRGAYMaw5Htz2
6734qCKN8zmAmhYDo5P7YKj10owspUDq6zM8nhI+6EkLC4rEcRZzpPYcGsT9ID/q
m+AxxaALBMvdR8ElHcaZJztFStynyIh9dh6GxK28pb0PlQRHnt3fq5CHbVqh2lL2
fJXkwX0qG0FebkXcuTZWCVcSjFom6TpVCIkjsJIrJqthDpmeiwrzktMO/XHDecoc
eln+MwQp11C92uK+S+w1cX/+U1d1lbKCssSLxcNX1oPMtgR+lw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:14 2025 by rpki-client