![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3137302e3234342e31322e302f32332d3233203d3e20323634323831.roa
File: 3137302e3234342e31322e302f32332d3233203d3e20323634323831.roa (raw, json)
Hash identifier: 2jny+u2K/7WvNrKX+9XHK0u/oesZhUFF557fL9UUwe8=
Subject key identifier: 1D:CF:47:6E:A5:5A:95:6F:AF:B9:C6:63:48:F3:EE:C1:90:DF:3C:0D
Certificate issuer: /CN=4C284B298BD83B2CD795241085A51344CAAA6914
Certificate serial: 49A93F5EEE1B48532CABECD6379C2539DC592C17
Authority key identifier: 4C:28:4B:29:8B:D8:3B:2C:D7:95:24:10:85:A5:13:44:CA:AA:69:14
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C284B298BD83B2CD795241085A51344CAAA6914.cer
Subject info access: rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3137302e3234342e31322e302f32332d3233203d3e20323634323831.roa
Signing time: Sat 08 Apr 2023 14:07:53 +0000
ROA not before: Sat 08 Apr 2023 14:02:53 +0000
ROA not after: Sat 06 Apr 2024 14:07:53 +0000
asID: 264281
IP address blocks: 170.244.12.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:a9:3f:5e:ee:1b:48:53:2c:ab:ec:d6:37:9c:25:39:dc:59:2c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C284B298BD83B2CD795241085A51344CAAA6914
Validity
Not Before: Apr 8 14:02:53 2023 GMT
Not After : Apr 6 14:07:53 2024 GMT
Subject: CN=1DCF476EA55A956FAFB9C66348F3EEC190DF3C0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:df:45:ae:db:ce:59:fe:1c:33:c9:be:9e:17:
fe:57:be:72:06:10:7b:6d:c4:20:9c:ed:da:22:76:
73:ea:76:c6:98:45:8e:f3:65:60:94:66:58:bb:4d:
51:25:0d:82:83:6c:a7:5d:96:7b:e1:1b:99:1f:ff:
97:3e:bd:eb:d2:d2:19:f1:0c:0b:0e:99:47:85:67:
60:76:4b:f0:f6:ec:7d:61:ff:ac:ba:a5:ed:da:35:
c3:bc:77:7f:61:dd:67:a2:17:85:4c:67:e2:eb:10:
86:06:1b:c8:2b:a3:67:21:af:c6:02:a5:8c:01:c0:
6d:9d:79:0f:80:4d:81:b9:ce:5e:9f:5b:ae:4f:f3:
7e:69:d1:db:10:be:a7:51:6c:c4:28:a6:dc:5e:b4:
dd:d9:0e:9f:f6:a6:36:e9:92:11:cb:de:16:c0:7e:
79:2e:44:21:18:6f:27:7b:e5:27:59:d0:11:dd:05:
75:2e:54:52:bf:3b:ad:f7:6a:79:6b:b3:a9:1f:ad:
24:61:f0:88:e0:41:97:db:5c:5a:d7:34:63:dc:8b:
69:31:ab:ff:7b:2a:59:7c:a1:1c:2f:2f:fd:c8:0c:
33:d5:44:63:60:7a:e9:64:a3:57:6a:f5:fe:34:86:
76:b8:3e:d3:bd:7c:b0:5b:73:dd:fa:b7:63:cb:5b:
a7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CF:47:6E:A5:5A:95:6F:AF:B9:C6:63:48:F3:EE:C1:90:DF:3C:0D
X509v3 Authority Key Identifier:
keyid:4C:28:4B:29:8B:D8:3B:2C:D7:95:24:10:85:A5:13:44:CA:AA:69:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/4C284B298BD83B2CD795241085A51344CAAA6914.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C284B298BD83B2CD795241085A51344CAAA6914.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3137302e3234342e31322e302f32332d3233203d3e20323634323831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.244.12.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:60:77:95:90:03:2b:4e:f5:b7:a2:8d:10:c3:43:85:8b:2f:
56:d0:b4:bc:c6:93:f9:68:40:88:cc:35:78:4e:e1:8b:f5:d4:
e0:32:23:8c:a6:b1:e4:c3:40:28:13:17:ed:2c:fa:6a:f6:0a:
c9:25:0b:38:7e:60:4f:56:ae:77:2c:2a:26:93:13:b7:70:e0:
e6:50:fa:98:ca:d0:92:00:d0:47:5f:f7:4f:ae:dd:11:ff:13:
1d:74:c6:10:33:51:dd:f0:69:12:37:43:20:ba:77:13:e6:f9:
c2:c9:c9:54:60:12:c7:d4:73:a0:72:f8:08:16:5f:57:58:d5:
8e:29:dd:c8:fc:f4:78:a4:88:82:4c:5a:a6:b1:29:86:aa:02:
1d:ab:29:dd:d6:6b:2c:b4:50:fe:2a:57:d0:b5:17:5d:97:6c:
47:30:c8:c3:04:c3:b1:0a:4c:7d:d5:21:44:cd:db:b8:12:7e:
74:eb:8d:f9:7c:22:e2:ec:f6:21:6f:72:59:ae:e5:57:ed:23:
75:68:e6:71:f9:f3:6c:9f:08:8b:37:95:36:5f:4d:de:53:6a:
24:6c:84:03:fa:4f:30:12:22:44:33:e1:81:5c:bb:c4:7a:04:
bb:18:dd:05:82:a6:87:79:87:7c:b6:10:f3:2e:ba:64:a4:1e:
33:b7:84:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:02:35 2025 by rpki-client