![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/3133382e3230342e32312e302f32342d3234203d3e20323633383738.roa
File: 3133382e3230342e32312e302f32342d3234203d3e20323633383738.roa (raw, json)
Hash identifier: hwD3gQZcOlz7XlTRUhmWN4v2J4L+PEqLgDuEXbikYbw=
Subject key identifier: 73:27:3D:F7:9C:7D:A7:59:40:E6:87:2C:5F:7E:B1:03:64:54:9E:C7
Certificate issuer: /CN=3479A07990261201A4636EAD12C16D32507ECB61
Certificate serial: 344FCF448783EC33E8492A8B0121DEDE84027073
Authority key identifier: 34:79:A0:79:90:26:12:01:A4:63:6E:AD:12:C1:6D:32:50:7E:CB:61
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3479A07990261201A4636EAD12C16D32507ECB61.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/3133382e3230342e32312e302f32342d3234203d3e20323633383738.roa
Signing time: Tue 16 Jan 2024 13:32:18 +0000
ROA not before: Tue 16 Jan 2024 13:27:18 +0000
ROA not after: Tue 14 Jan 2025 13:32:18 +0000
asID: 263878
IP address blocks: 138.204.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:4f:cf:44:87:83:ec:33:e8:49:2a:8b:01:21:de:de:84:02:70:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3479A07990261201A4636EAD12C16D32507ECB61
Validity
Not Before: Jan 16 13:27:18 2024 GMT
Not After : Jan 14 13:32:18 2025 GMT
Subject: CN=73273DF79C7DA75940E6872C5F7EB10364549EC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ec:99:e2:6d:6a:01:4b:40:8e:16:ca:e2:fa:
ed:2f:4b:e6:81:91:61:8f:55:fa:fb:4b:27:21:1d:
0c:18:4a:e0:bd:51:2e:de:35:75:da:e3:2b:e7:5b:
74:85:0b:3a:2d:bc:af:c0:4a:75:c2:99:2b:dc:d8:
af:53:de:d1:06:e0:ec:3a:93:75:26:e0:81:35:1a:
dc:63:6d:80:04:34:98:54:cf:4e:0f:64:35:8d:d0:
97:e1:2d:7e:70:07:91:3a:26:eb:8b:26:b1:aa:00:
26:49:e8:f1:56:01:cc:ea:c2:21:d0:bd:68:25:9d:
ad:79:5a:ad:eb:88:6d:10:5c:5e:e9:f2:4f:0f:56:
2e:83:d6:34:60:5a:30:cf:56:df:8b:c9:8b:fe:1d:
a5:9d:30:7b:9c:48:c1:ce:5e:8c:7c:69:1d:7d:bb:
87:e7:32:04:17:b1:99:bf:f6:a5:b6:ee:fa:70:91:
38:06:44:a6:2e:6d:26:12:2c:9a:03:23:e2:f1:35:
45:b2:7b:43:4f:05:6a:f1:cc:bc:c9:88:6a:2b:7b:
e6:87:42:04:e8:bd:54:96:ee:0e:1c:11:20:35:ed:
9c:66:2c:f8:94:3d:6f:5b:92:fb:d3:4f:f3:eb:ec:
29:c8:03:73:fc:0e:2b:51:41:fb:15:46:9a:f2:b6:
63:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:27:3D:F7:9C:7D:A7:59:40:E6:87:2C:5F:7E:B1:03:64:54:9E:C7
X509v3 Authority Key Identifier:
keyid:34:79:A0:79:90:26:12:01:A4:63:6E:AD:12:C1:6D:32:50:7E:CB:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/3479A07990261201A4636EAD12C16D32507ECB61.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3479A07990261201A4636EAD12C16D32507ECB61.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/3133382e3230342e32312e302f32342d3234203d3e20323633383738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.21.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:0f:a0:fd:5c:91:ff:5a:07:a7:ae:39:c3:ed:9a:0e:ed:60:
f6:eb:03:04:d7:ce:bc:d5:33:88:f1:51:3a:33:d9:86:da:9b:
cd:1a:29:40:60:d3:1c:24:1b:82:55:4e:cf:ce:09:17:b3:77:
27:d0:c5:91:08:f9:1f:c4:18:a0:b7:2c:c1:80:dc:9b:f3:ef:
16:8d:59:19:16:1d:8c:84:81:39:21:da:49:ad:c4:bd:40:9d:
66:9e:7f:ff:ab:b3:77:43:6c:5a:31:a2:56:1f:39:29:0f:24:
97:03:23:4c:08:21:20:44:98:44:53:f5:dd:04:72:c0:c1:e1:
4b:14:c7:cf:a3:a9:d1:f6:30:e2:41:77:09:1e:22:a9:d9:d6:
1d:6c:3a:8a:bb:5e:67:f9:4a:bd:28:82:ad:96:5a:8c:20:0f:
d2:03:a7:f6:e4:74:dd:7c:50:da:57:16:db:e6:a2:ea:ce:e7:
2f:ea:02:17:a5:f9:9c:75:f4:55:b0:ee:65:98:a3:bc:7b:86:
07:60:06:a4:3a:f0:07:46:3c:5e:7a:fc:db:1a:37:fa:bd:2b:
2a:2d:be:95:f1:e1:c4:40:b5:6b:37:cd:b3:2a:a4:b4:b5:8e:
8f:c5:fa:c7:f0:3f:7f:32:a2:5d:f8:c0:3f:2b:d8:4c:10:da:
19:02:67:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:21:44 2025 by rpki-client