![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137302e3233332e3231322e302f32342d3234203d3e203532373036.roa
File: 3137302e3233332e3231322e302f32342d3234203d3e203532373036.roa (raw, json)
Hash identifier: kI+f9DbZH8WZjuI9baa85Ybsp2LgD+tjSWFLRTD504k=
Subject key identifier: 87:D8:D8:DE:34:0E:DE:3C:34:45:F0:02:79:67:CE:76:07:C0:AA:6C
Certificate issuer: /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial: 5AA076A66690A582BFD0BEB2A41F85C1ACBB507B
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137302e3233332e3231322e302f32342d3234203d3e203532373036.roa
Signing time: Thu 20 Jul 2023 14:08:18 +0000
ROA not before: Thu 20 Jul 2023 14:03:18 +0000
ROA not after: Thu 18 Jul 2024 14:08:18 +0000
asID: 52706
IP address blocks: 170.233.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:a0:76:a6:66:90:a5:82:bf:d0:be:b2:a4:1f:85:c1:ac:bb:50:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
Validity
Not Before: Jul 20 14:03:18 2023 GMT
Not After : Jul 18 14:08:18 2024 GMT
Subject: CN=87D8D8DE340EDE3C3445F0027967CE7607C0AA6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ca:f9:e5:f5:f6:cb:f4:41:b1:79:d6:20:c5:
a8:a7:c3:89:75:e3:a7:97:d4:a6:8b:17:25:ee:a3:
8e:94:2c:0b:36:f1:d8:51:6a:c6:6d:bf:7f:81:41:
49:58:ac:78:12:f9:6b:da:8b:1a:fe:d2:42:96:fa:
62:13:3f:46:88:8c:ad:df:f3:1d:7b:ba:31:b2:23:
11:ef:e2:96:0e:56:db:8d:db:af:1a:98:ff:3a:6c:
d1:12:4f:fe:36:12:9f:18:08:1e:cf:da:11:06:ac:
bc:a3:c2:37:aa:c3:2c:b3:96:dd:4e:62:8c:86:76:
7b:cc:31:ec:8e:bf:fd:35:f9:26:b8:86:6d:33:fd:
ca:98:32:d4:d9:3e:f0:79:fa:ff:d5:19:6f:9f:37:
6d:72:c8:71:c6:73:d4:34:d4:90:b1:d4:ea:a9:60:
52:db:34:6b:03:4f:f8:98:9e:de:18:1b:45:b2:a7:
ee:f7:36:45:e0:a5:95:5a:51:9e:4e:3f:82:95:ee:
e4:76:01:1b:f1:7c:87:35:58:19:48:8f:dd:0e:46:
cf:c4:89:c4:ae:5e:69:12:13:ec:0b:c0:a7:fb:59:
ba:82:1b:ba:95:5c:74:d0:3d:a6:22:22:b3:4a:9a:
d2:09:1a:c4:54:4e:23:07:f7:b7:ee:b6:cd:2a:e9:
6f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D8:D8:DE:34:0E:DE:3C:34:45:F0:02:79:67:CE:76:07:C0:AA:6C
X509v3 Authority Key Identifier:
keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137302e3233332e3231322e302f32342d3234203d3e203532373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.212.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:21:40:a5:4b:96:9f:06:75:d8:e2:53:2d:22:12:7c:fa:d1:
76:0b:10:1f:a7:57:ec:b3:ef:d8:83:fc:3e:b0:f0:02:fe:8e:
f9:fc:88:fe:2c:e6:3c:02:d3:fd:cb:08:7e:27:46:4d:8a:0d:
17:83:36:af:96:bb:de:88:dd:81:76:10:a4:a0:ab:e1:52:4d:
8a:e9:88:07:29:77:ff:11:15:2f:73:08:f7:1a:87:11:98:82:
79:9f:28:a0:22:b3:2a:63:8f:5a:ef:dd:9a:f5:ce:7c:e4:92:
94:99:68:77:08:90:38:10:82:25:00:c0:c8:75:b1:46:15:23:
8a:f0:db:db:87:17:92:30:34:a5:90:57:06:45:93:18:68:57:
75:38:87:3a:1c:f7:f2:87:14:66:eb:2d:7a:93:f4:01:6d:9a:
26:cf:87:0a:d6:1d:81:66:60:c6:49:f0:c8:f6:71:a0:76:7f:
b7:e4:db:b7:33:1a:d3:35:b0:1c:06:4c:46:6b:55:4f:2a:91:
ce:ef:0a:74:2a:cf:d1:c3:84:d0:ce:a7:5f:c0:90:9a:27:d5:
6a:69:19:07:76:c8:90:77:6c:bb:5a:63:ff:80:5b:ec:51:b4:
34:92:e1:fe:94:8a:84:ac:ee:0c:40:0c:30:2f:b9:c1:f8:29:
6e:6c:d9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:00:03 2025 by rpki-client