![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/34352e3138372e3134362e302f32332d3233203d3e20323639343935.roa
File: 34352e3138372e3134362e302f32332d3233203d3e20323639343935.roa (raw, json)
Hash identifier: 3ThV90N7/Y1MY8odQzkMGLw495ck+JEtjUOdiFprT9E=
Subject key identifier: 72:63:6E:E7:68:D8:A2:68:D1:34:87:3E:FB:14:9F:0A:38:C8:B9:C7
Certificate issuer: /CN=9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB
Certificate serial: 2B043E4B7A1B619E50F04DC9A6E04EEED1E5408A
Authority key identifier: 9F:E3:B7:F3:F1:B2:F9:BC:01:D0:2D:F1:2E:5D:31:AA:14:E0:60:DB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/34352e3138372e3134362e302f32332d3233203d3e20323639343935.roa
Signing time: Tue 07 Nov 2023 22:09:57 +0000
ROA not before: Tue 07 Nov 2023 22:04:57 +0000
ROA not after: Tue 05 Nov 2024 22:09:57 +0000
asID: 269495
IP address blocks: 45.187.146.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:04:3e:4b:7a:1b:61:9e:50:f0:4d:c9:a6:e0:4e:ee:d1:e5:40:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB
Validity
Not Before: Nov 7 22:04:57 2023 GMT
Not After : Nov 5 22:09:57 2024 GMT
Subject: CN=72636EE768D8A268D134873EFB149F0A38C8B9C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:53:e9:a6:e3:e1:5f:23:dd:ba:7c:18:e9:0c:
cf:78:bb:0c:42:ab:f6:30:b6:8f:18:ea:0c:92:98:
9f:80:05:c1:78:f7:58:b3:10:62:58:f8:1e:14:9b:
5c:12:e9:40:b2:e0:2b:36:7a:b8:d0:56:c4:b7:e9:
d9:87:03:32:4f:93:d5:fe:dc:f0:cf:3d:08:b4:9e:
bf:9d:64:a0:a9:4b:de:56:8e:a2:61:68:a1:8f:75:
3f:3c:c4:4c:46:58:f7:1f:f7:ee:77:08:7d:76:51:
5b:d9:f0:4a:a7:1c:61:09:af:bf:03:40:a0:79:05:
82:0c:f9:85:02:66:1a:a6:b5:a0:58:8a:f4:9d:f6:
7c:1d:6d:d1:5a:d9:08:07:93:bd:57:33:a7:3f:80:
59:53:61:31:5f:e2:97:73:cd:61:ae:9e:ff:a3:59:
6a:63:00:1d:cd:20:60:17:a1:63:e4:3d:f1:c8:71:
a8:30:38:12:d8:96:a6:2c:7d:c5:aa:32:f8:67:f1:
f9:88:64:62:14:ec:81:69:f2:18:cf:11:8b:54:01:
a4:b4:b4:7e:7f:28:a0:7f:38:15:e9:74:ab:60:52:
0e:78:1f:80:8f:bf:0b:b0:bb:92:35:de:b6:1b:d0:
29:45:e9:75:2a:0e:16:fa:b5:f4:19:60:20:a2:33:
4d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:63:6E:E7:68:D8:A2:68:D1:34:87:3E:FB:14:9F:0A:38:C8:B9:C7
X509v3 Authority Key Identifier:
keyid:9F:E3:B7:F3:F1:B2:F9:BC:01:D0:2D:F1:2E:5D:31:AA:14:E0:60:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/34352e3138372e3134362e302f32332d3233203d3e20323639343935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.187.146.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:39:a7:72:36:bc:3c:f1:5f:62:66:00:80:95:f0:69:0c:a3:
96:5d:27:96:64:3b:a1:b5:1f:7f:f3:8d:e2:8c:20:16:e0:92:
8c:4a:c5:74:30:9c:dd:4f:ec:00:cf:5f:86:3c:85:45:02:83:
e1:a9:61:69:01:cd:52:cd:69:ef:87:b9:bc:0d:59:aa:3b:28:
03:5e:f9:5c:69:19:fe:8a:5d:fd:d4:22:ee:08:25:53:e7:e9:
99:dc:1f:6d:66:c4:0e:bf:1d:e8:1b:52:3a:39:c2:b3:51:bd:
e0:9a:31:0a:68:3a:66:4a:67:b0:a9:a1:4b:6d:d2:a5:42:e7:
9f:5b:f7:0d:3f:ec:ca:91:6e:7e:76:ee:1f:42:fe:cc:48:a0:
89:0e:73:7f:72:99:d6:0e:a4:bb:97:d7:2a:b1:9f:21:98:47:
2b:a4:7a:d1:d9:73:57:78:43:71:cb:fe:d5:52:a8:fb:71:27:
69:d8:6c:17:dc:6e:31:54:5c:94:23:ca:c7:62:29:9c:cf:5e:
d5:8b:99:5b:a7:b2:b2:20:47:c2:16:f1:b3:00:5f:85:1b:d4:
94:e5:f6:f5:f5:4c:16:07:a7:31:52:24:ad:e3:d8:3e:30:3a:
b5:49:74:07:b4:b2:26:55:b8:18:69:97:c6:9a:98:64:83:90:
07:ee:cd:2b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKwQ+S3obYZ5Q8E3JpuBO7tHlQIowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUZFM0I3RjNGMUIyRjlCQzAxRDAyREYxMkU1RDMxQUEx
NEUwNjBEQjAeFw0yMzExMDcyMjA0NTdaFw0yNDExMDUyMjA5NTdaMDMxMTAvBgNV
BAMTKDcyNjM2RUU3NjhEOEEyNjhEMTM0ODczRUZCMTQ5RjBBMzhDOEI5QzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnU+mm4+FfI926fBjpDM94uwxC
q/Ywto8Y6gySmJ+ABcF491izEGJY+B4Um1wS6UCy4Cs2erjQVsS36dmHAzJPk9X+
3PDPPQi0nr+dZKCpS95WjqJhaKGPdT88xExGWPcf9+53CH12UVvZ8EqnHGEJr78D
QKB5BYIM+YUCZhqmtaBYivSd9nwdbdFa2QgHk71XM6c/gFlTYTFf4pdzzWGunv+j
WWpjAB3NIGAXoWPkPfHIcagwOBLYlqYsfcWqMvhn8fmIZGIU7IFp8hjPEYtUAaS0
tH5/KKB/OBXpdKtgUg54H4CPvwuwu5I13rYb0ClF6XUqDhb6tfQZYCCiM01VAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUcmNu52jYomjRNIc++xSfCjjIuccwHwYDVR0j
BBgwFoAUn+O38/Gy+bwB0C3xLl0xqhTgYNswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG5KUWtuNUFQdDJnSzJaS1QxRlhWTU4yYXhqdWpxUHJBZzhxWHM1dFJq
aHIvMC85RkUzQjdGM0YxQjJGOUJDMDFEMDJERjEyRTVEMzFBQTE0RTA2MERCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlGRTNCN0YzRjFCMkY5QkMw
MUQwMkRGMTJFNUQzMUFBMTRFMDYwREIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRuSlFrbjVBUHQyZ0syWktUMUZYVk1OMmF4anVqcVByQWc4cVhzNXRSamhyLzAv
MzQzNTJlMzEzODM3MmUzMTM0MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzkzNDM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtu5IwDQYJKoZIhvcNAQELBQADggEBAF05p3I2
vDzxX2JmAICV8GkMo5ZdJ5ZkO6G1H3/zjeKMIBbgkoxKxXQwnN1P7ADPX4Y8hUUC
g+GpYWkBzVLNae+HubwNWao7KANe+VxpGf6KXf3UIu4IJVPn6ZncH21mxA6/Hegb
Ujo5wrNRveCaMQpoOmZKZ7CpoUtt0qVC559b9w0/7MqRbn527h9C/sxIoIkOc39y
mdYOpLuX1yqxnyGYRyuketHZc1d4Q3HL/tVSqPtxJ2nYbBfcbjFUXJQjysdiKZzP
XtWLmVunsrIgR8IW8bMAX4Ub1JTl9vX1TBYHpzFSJK3j2D4wOrVJdAe0siZVuBhp
l8aamGSDkAfuzSs=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:16 2025 by rpki-client