![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/3230302e3135302e3235332e302f32342d3234203d3e20323731363730.roa
File: 3230302e3135302e3235332e302f32342d3234203d3e20323731363730.roa (raw, json)
Hash identifier: mXUu71ZrssAO37PPpcUAnoDHVFd66eFfRZBqVhDypmo=
Subject key identifier: CB:1B:18:15:86:79:8B:D7:CC:B6:0E:78:41:7D:81:FA:73:7C:2C:96
Certificate issuer: /CN=86F4DAF212D079B19A8A220EB4B28BC4191DAAAC
Certificate serial: 7DF1AC38A457CE3F82E59E4894A224F4C7A58888
Authority key identifier: 86:F4:DA:F2:12:D0:79:B1:9A:8A:22:0E:B4:B2:8B:C4:19:1D:AA:AC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86F4DAF212D079B19A8A220EB4B28BC4191DAAAC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/3230302e3135302e3235332e302f32342d3234203d3e20323731363730.roa
Signing time: Tue 10 Oct 2023 17:56:42 +0000
ROA not before: Tue 10 Oct 2023 17:51:42 +0000
ROA not after: Tue 08 Oct 2024 17:56:42 +0000
asID: 271670
IP address blocks: 200.150.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:f1:ac:38:a4:57:ce:3f:82:e5:9e:48:94:a2:24:f4:c7:a5:88:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86F4DAF212D079B19A8A220EB4B28BC4191DAAAC
Validity
Not Before: Oct 10 17:51:42 2023 GMT
Not After : Oct 8 17:56:42 2024 GMT
Subject: CN=CB1B181586798BD7CCB60E78417D81FA737C2C96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:77:15:be:d9:92:93:f3:69:ba:db:2d:a1:3f:
6f:ce:da:6b:d9:74:95:a8:33:11:ca:ed:53:bd:67:
12:b7:ae:90:f5:2f:7c:7f:72:24:08:50:77:90:5a:
ef:b5:4b:ce:aa:28:51:f1:f7:f6:a3:d8:6b:e4:dc:
9d:b9:e7:24:0a:7b:0d:c1:38:28:69:59:81:e1:70:
ae:7e:6a:98:95:7a:dc:a9:f8:a9:6d:ad:9b:99:f8:
4f:fb:c1:8e:17:98:31:d5:3a:43:a2:63:cf:70:18:
a7:d5:fb:dc:ef:85:dd:ac:16:87:fc:78:0f:7b:ff:
75:b0:ea:1a:05:fb:b7:63:a5:01:4f:8d:ee:4d:c8:
56:cb:56:bc:c8:73:68:bc:54:36:c9:36:4a:57:6e:
4f:14:e5:e6:0f:71:f3:74:0e:ae:c6:c9:7c:b1:54:
a7:a8:41:fb:bd:f2:25:ed:71:ee:f8:7d:4e:2a:67:
bc:0f:36:4e:dc:c4:95:1d:c9:0f:27:75:dd:d3:45:
b4:6d:17:35:06:52:32:c5:79:a9:2c:a3:0c:2e:be:
ab:da:b0:0d:bb:21:97:2f:b0:8e:93:a1:4a:c5:87:
50:63:f3:ff:f2:fc:f3:12:4d:44:c5:ee:a7:36:d4:
bc:02:94:f0:a7:c3:c6:65:d9:16:26:36:70:72:13:
28:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1B:18:15:86:79:8B:D7:CC:B6:0E:78:41:7D:81:FA:73:7C:2C:96
X509v3 Authority Key Identifier:
keyid:86:F4:DA:F2:12:D0:79:B1:9A:8A:22:0E:B4:B2:8B:C4:19:1D:AA:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/86F4DAF212D079B19A8A220EB4B28BC4191DAAAC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86F4DAF212D079B19A8A220EB4B28BC4191DAAAC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/3230302e3135302e3235332e302f32342d3234203d3e20323731363730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.150.253.0/24
Signature Algorithm: sha256WithRSAEncryption
73:a7:0f:07:1b:f8:e6:01:81:d2:2a:6c:62:c6:77:e6:5b:cd:
57:4c:4a:2f:65:d9:c0:29:6a:1b:2c:eb:db:db:bd:e2:71:d5:
a6:e3:1f:78:fa:ba:68:33:b9:53:f8:fa:f1:c0:35:74:c0:f7:
a0:b9:52:8b:16:33:07:6a:3c:e3:01:01:92:b1:4e:81:50:a2:
5d:7d:02:97:a3:5c:c6:c0:c4:7d:4b:60:7a:07:7c:74:29:78:
e3:cd:d8:a9:41:84:12:66:e2:b9:0b:b7:70:27:6f:e0:5b:e5:
dc:c4:e8:1a:15:c1:99:0d:ad:3b:86:31:cc:7a:7f:fa:b8:49:
26:57:28:79:aa:3f:bc:5f:ba:98:9b:1a:b4:cd:4a:dd:1d:8a:
14:fe:0e:af:92:7e:28:81:ab:26:62:e2:c1:2a:66:30:a2:7a:
94:10:d1:94:c8:df:48:7e:b1:c8:9a:5a:d3:aa:e7:d6:1e:dc:
f9:6f:fa:f8:f5:92:d1:a2:c3:21:7b:e1:d7:05:35:52:8d:91:
23:3a:1b:01:71:0d:06:40:10:5e:aa:03:72:10:f7:55:25:23:
8a:49:6b:c0:f7:58:0c:f1:00:f6:3f:89:51:3d:08:66:04:fc:
bd:21:89:f3:76:21:b4:ff:f9:94:b7:c4:28:fc:e6:03:21:96:
02:f7:5e:65
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUffGsOKRXzj+C5Z5IlKIk9MeliIgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODZGNERBRjIxMkQwNzlCMTlBOEEyMjBFQjRCMjhCQzQx
OTFEQUFBQzAeFw0yMzEwMTAxNzUxNDJaFw0yNDEwMDgxNzU2NDJaMDMxMTAvBgNV
BAMTKENCMUIxODE1ODY3OThCRDdDQ0I2MEU3ODQxN0Q4MUZBNzM3QzJDOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEdxW+2ZKT82m62y2hP2/O2mvZ
dJWoMxHK7VO9ZxK3rpD1L3x/ciQIUHeQWu+1S86qKFHx9/aj2Gvk3J255yQKew3B
OChpWYHhcK5+apiVetyp+KltrZuZ+E/7wY4XmDHVOkOiY89wGKfV+9zvhd2sFof8
eA97/3Ww6hoF+7djpQFPje5NyFbLVrzIc2i8VDbJNkpXbk8U5eYPcfN0Dq7GyXyx
VKeoQfu98iXtce74fU4qZ7wPNk7cxJUdyQ8ndd3TRbRtFzUGUjLFeaksowwuvqva
sA27IZcvsI6ToUrFh1Bj8//y/PMSTUTF7qc21LwClPCnw8Zl2RYmNnByEyjTAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUyxsYFYZ5i9fMtg54QX2B+nN8LJYwHwYDVR0j
BBgwFoAUhvTa8hLQebGaiiIOtLKLxBkdqqwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1dOYVVxdGJKU3Y4NnVlSmNydkc1SjlMeHp4ZHMzd2paOHhFRzhDRU5y
emgvMC84NkY0REFGMjEyRDA3OUIxOUE4QTIyMEVCNEIyOEJDNDE5MURBQUFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg2RjREQUYyMTJEMDc5QjE5
QThBMjIwRUI0QjI4QkM0MTkxREFBQUMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNXTmFVcXRiSlN2ODZ1ZUpjcnZHNUo5THh6eGRzM3dqWjh4RUc4Q0VOcnpoLzAv
MzIzMDMwMmUzMTM1MzAyZTMyMzUzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMTM2MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMiW/TANBgkqhkiG9w0BAQsFAAOCAQEAc6cP
Bxv45gGB0ipsYsZ35lvNV0xKL2XZwClqGyzr29u94nHVpuMfePq6aDO5U/j68cA1
dMD3oLlSixYzB2o84wEBkrFOgVCiXX0Cl6NcxsDEfUtgegd8dCl4483YqUGEEmbi
uQu3cCdv4Fvl3MToGhXBmQ2tO4YxzHp/+rhJJlcoeao/vF+6mJsatM1K3R2KFP4O
r5J+KIGrJmLiwSpmMKJ6lBDRlMjfSH6xyJpa06rn1h7c+W/6+PWS0aLDIXvh1wU1
Uo2RIzobAXENBkAQXqoDchD3VSUjiklrwPdYDPEA9j+JUT0IZgT8vSGJ83YhtP/5
lLfEKPzmAyGWAvdeZQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:18 2025 by rpki-client