![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/3133382e3235352e3134302e302f32322d3332203d3e203533313831.roa
File: 3133382e3235352e3134302e302f32322d3332203d3e203533313831.roa (raw, json)
Hash identifier: RT1elFPvQqeRWaijfqEDs8IDYRfcO76EvCSEuzFRGJs=
Subject key identifier: 72:6C:57:8C:19:D7:6C:52:FA:8C:D9:7A:28:DC:28:F6:60:99:3D:21
Certificate issuer: /CN=8DF5F3E70EB9D6971638464E557907A395C47FAD
Certificate serial: 6C77AC7F3A6B56C600B0FD747961CEA7E5C23988
Authority key identifier: 8D:F5:F3:E7:0E:B9:D6:97:16:38:46:4E:55:79:07:A3:95:C4:7F:AD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DF5F3E70EB9D6971638464E557907A395C47FAD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/3133382e3235352e3134302e302f32322d3332203d3e203533313831.roa
Signing time: Sat 11 Mar 2023 00:57:03 +0000
ROA not before: Sat 11 Mar 2023 00:52:03 +0000
ROA not after: Sat 09 Mar 2024 00:57:03 +0000
asID: 53181
IP address blocks: 138.255.140.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:77:ac:7f:3a:6b:56:c6:00:b0:fd:74:79:61:ce:a7:e5:c2:39:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8DF5F3E70EB9D6971638464E557907A395C47FAD
Validity
Not Before: Mar 11 00:52:03 2023 GMT
Not After : Mar 9 00:57:03 2024 GMT
Subject: CN=726C578C19D76C52FA8CD97A28DC28F660993D21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2d:76:17:fe:8a:93:b3:e7:f7:0b:6c:1d:98:
9d:a4:3b:a2:d2:88:8d:3e:84:1d:1b:cf:fd:ad:08:
8e:77:b6:96:d4:e6:bb:df:40:04:24:8e:3e:55:5d:
e4:62:33:ef:14:6f:ed:c1:bf:28:0d:7a:6c:92:d8:
e2:10:72:fa:65:7d:96:2d:d9:dd:06:01:95:08:1f:
74:91:e6:7b:ab:ce:c0:9f:a6:94:40:01:39:36:f0:
81:49:ae:59:0d:8e:98:3d:59:29:d8:b1:29:b0:4a:
d5:83:59:e8:50:bc:cb:f6:2a:38:e4:98:c4:78:60:
bb:5d:fd:07:a3:a4:47:92:17:b1:01:fa:17:5d:38:
55:5a:9c:cd:c2:f9:fa:21:69:7f:c9:6f:d2:ea:59:
c1:90:7f:81:1e:a9:4d:2a:26:ec:a5:89:5f:84:6e:
d5:1f:ab:b4:da:f7:b7:cc:62:20:85:e7:42:a8:29:
fa:ff:0a:95:da:95:6c:4f:37:44:15:9f:d1:1f:0d:
2e:46:dc:6e:a1:6f:de:53:47:6a:22:b8:d8:51:d5:
a9:e3:94:e5:8e:3b:33:2c:2f:8a:0d:45:be:cc:1a:
3e:53:8a:f2:e4:69:d3:89:e2:7b:66:ac:c1:0d:61:
ba:c5:63:f8:c7:0d:ec:82:19:1c:36:5e:dd:bc:9a:
79:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6C:57:8C:19:D7:6C:52:FA:8C:D9:7A:28:DC:28:F6:60:99:3D:21
X509v3 Authority Key Identifier:
keyid:8D:F5:F3:E7:0E:B9:D6:97:16:38:46:4E:55:79:07:A3:95:C4:7F:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/8DF5F3E70EB9D6971638464E557907A395C47FAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DF5F3E70EB9D6971638464E557907A395C47FAD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/3133382e3235352e3134302e302f32322d3332203d3e203533313831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.140.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:5b:49:52:da:76:1a:68:6e:ec:83:51:a8:1f:71:63:41:54:
f9:eb:a7:fd:d7:ce:1e:e3:24:8a:fb:9e:07:50:07:ba:d9:f9:
a5:4d:5e:bd:3e:38:47:38:bb:1e:90:c7:40:1b:1e:fa:62:e1:
ae:75:63:7c:99:bf:56:ac:19:3a:de:57:35:ba:dc:3e:a6:56:
85:b3:21:3d:6b:be:40:05:42:ad:88:f0:35:c9:30:ff:fd:08:
ae:d6:dd:b2:a2:3d:11:81:2d:5e:05:f6:e8:aa:83:46:09:f4:
62:ab:37:ef:01:0e:ad:fa:95:ff:5a:08:12:3b:ee:2f:e7:a1:
15:18:90:9e:a8:73:8d:3d:60:93:7c:47:f4:f8:6a:23:98:30:
67:b9:4f:c8:33:ff:90:1b:e9:d3:da:fe:86:47:84:95:50:c1:
9a:e0:ae:f4:e9:28:25:3d:e1:67:f2:cf:25:52:35:58:e5:1d:
a8:67:28:9d:42:7c:d1:e9:1c:23:01:8f:ff:1c:a7:73:d3:49:
0c:04:35:78:91:8e:7d:30:f6:ff:d5:4e:2c:d9:39:15:54:d9:
de:9f:1a:4c:16:f2:3f:fe:21:12:53:b2:17:96:b6:17:44:06:
c6:38:46:e8:73:c3:e1:bd:fc:83:fe:b3:f7:b7:ca:ec:c8:93:
4b:48:1f:59
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbHesfzprVsYAsP10eWHOp+XCOYgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOERGNUYzRTcwRUI5RDY5NzE2Mzg0NjRFNTU3OTA3QTM5
NUM0N0ZBRDAeFw0yMzAzMTEwMDUyMDNaFw0yNDAzMDkwMDU3MDNaMDMxMTAvBgNV
BAMTKDcyNkM1NzhDMTlENzZDNTJGQThDRDk3QTI4REMyOEY2NjA5OTNEMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVLXYX/oqTs+f3C2wdmJ2kO6LS
iI0+hB0bz/2tCI53tpbU5rvfQAQkjj5VXeRiM+8Ub+3BvygNemyS2OIQcvplfZYt
2d0GAZUIH3SR5nurzsCfppRAATk28IFJrlkNjpg9WSnYsSmwStWDWehQvMv2Kjjk
mMR4YLtd/QejpEeSF7EB+hddOFVanM3C+fohaX/Jb9LqWcGQf4EeqU0qJuyliV+E
btUfq7Ta97fMYiCF50KoKfr/CpXalWxPN0QVn9EfDS5G3G6hb95TR2oiuNhR1anj
lOWOOzMsL4oNRb7MGj5TivLkadOJ4ntmrMENYbrFY/jHDeyCGRw2Xt28mnlJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUcmxXjBnXbFL6jNl6KNwo9mCZPSEwHwYDVR0j
BBgwFoAUjfXz5w651pcWOEZOVXkHo5XEf60wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1JzVWNCWGpmTUtxRnlzM05IalZVWWhFOG92UHkxVlZyNHJoU3VUcEtx
VzQvMC84REY1RjNFNzBFQjlENjk3MTYzODQ2NEU1NTc5MDdBMzk1QzQ3RkFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhERjVGM0U3MEVCOUQ2OTcx
NjM4NDY0RTU1NzkwN0EzOTVDNDdGQUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNSc1VjQlhqZk1LcUZ5czNOSGpWVVloRThvdlB5MVZWcjRyaFN1VHBLcVc0LzAv
MzEzMzM4MmUzMjM1MzUyZTMxMzQzMDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDM1
MzMzMTM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKK/4wwDQYJKoZIhvcNAQELBQADggEBACpbSVLa
dhpobuyDUagfcWNBVPnrp/3Xzh7jJIr7ngdQB7rZ+aVNXr0+OEc4ux6Qx0AbHvpi
4a51Y3yZv1asGTreVzW63D6mVoWzIT1rvkAFQq2I8DXJMP/9CK7W3bKiPRGBLV4F
9uiqg0YJ9GKrN+8BDq36lf9aCBI77i/noRUYkJ6oc409YJN8R/T4aiOYMGe5T8gz
/5Ab6dPa/oZHhJVQwZrgrvTpKCU94WfyzyVSNVjlHahnKJ1CfNHpHCMBj/8cp3PT
SQwENXiRjn0w9v/VTizZORVU2d6fGkwW8j/+IRJTsheWthdEBsY4Ruhzw+G9/IP+
s/e3yuzIk0tIH1k=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:06 2025 by rpki-client