![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/0/3133382e3235352e3130342e302f32322d3232203d3e20323633393631.roa
File: 3133382e3235352e3130342e302f32322d3232203d3e20323633393631.roa (raw, json)
Hash identifier: eTRho2hmFuFNao+tLa1loWu7VBGlUEQAodjJ0CxIsVo=
Subject key identifier: 6A:F0:01:64:6C:E1:3D:3F:E1:1A:E8:48:22:E5:9A:CF:B6:D5:8E:5F
Certificate issuer: /CN=C284698E221F7E650755BAB8E4E865D670C7383F
Certificate serial: 51734929B45B55415ED29A329759C25649382332
Authority key identifier: C2:84:69:8E:22:1F:7E:65:07:55:BA:B8:E4:E8:65:D6:70:C7:38:3F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C284698E221F7E650755BAB8E4E865D670C7383F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/0/3133382e3235352e3130342e302f32322d3232203d3e20323633393631.roa
Signing time: Fri 29 Mar 2024 21:59:26 +0000
ROA not before: Fri 29 Mar 2024 21:54:26 +0000
ROA not after: Fri 28 Mar 2025 21:59:26 +0000
asID: 263961
IP address blocks: 138.255.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:73:49:29:b4:5b:55:41:5e:d2:9a:32:97:59:c2:56:49:38:23:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C284698E221F7E650755BAB8E4E865D670C7383F
Validity
Not Before: Mar 29 21:54:26 2024 GMT
Not After : Mar 28 21:59:26 2025 GMT
Subject: CN=6AF001646CE13D3FE11AE84822E59ACFB6D58E5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ff:64:30:a8:80:21:3e:4f:ab:a8:b7:33:a4:
52:38:ec:22:bd:e8:9d:b4:23:7e:84:cf:da:36:d9:
2c:d1:73:ef:79:82:65:d9:63:10:8d:1b:82:44:f1:
f7:5f:e8:f3:f4:e6:4d:0f:fe:ac:2d:a5:5b:7c:d7:
1b:fd:2d:4d:89:4b:9a:b3:b3:61:7f:18:db:35:60:
65:71:af:ae:28:04:d5:36:9e:bd:6a:aa:c0:2b:f8:
cc:a5:7a:21:4a:8e:12:44:80:b4:d2:f4:21:d6:17:
8f:69:36:f9:66:ef:6d:0f:cd:82:80:05:3c:ea:63:
6e:e4:77:4e:c6:bd:20:34:8b:b1:3b:7b:38:36:e0:
fa:a1:66:e0:82:e2:b7:91:b9:62:ec:10:d7:85:24:
e2:c5:f2:4b:fc:44:34:23:fe:19:98:1f:04:bb:a9:
90:ea:e2:59:80:ea:4d:1f:e2:5d:ed:ae:9c:d3:a6:
c9:88:80:31:a7:ff:bd:9a:fe:af:44:4e:59:06:e6:
c8:67:f2:9e:85:ea:69:b0:ad:e7:9d:f5:73:c5:ab:
29:3d:4a:ec:25:31:43:06:4a:ec:b7:7a:f1:a8:21:
0c:ea:41:87:a3:46:7a:25:47:9b:09:b5:10:d0:19:
61:cc:dd:0a:1d:d7:cf:b2:66:bb:6f:5a:93:3a:26:
34:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F0:01:64:6C:E1:3D:3F:E1:1A:E8:48:22:E5:9A:CF:B6:D5:8E:5F
X509v3 Authority Key Identifier:
keyid:C2:84:69:8E:22:1F:7E:65:07:55:BA:B8:E4:E8:65:D6:70:C7:38:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/0/C284698E221F7E650755BAB8E4E865D670C7383F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C284698E221F7E650755BAB8E4E865D670C7383F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/0/3133382e3235352e3130342e302f32322d3232203d3e20323633393631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.104.0/22
Signature Algorithm: sha256WithRSAEncryption
23:5b:e2:14:6f:96:de:ca:dd:f4:15:4c:b5:ee:f5:1b:62:6e:
83:7b:c8:45:4e:8e:1a:1b:aa:33:3f:b1:b8:7a:fc:35:8a:ea:
3a:e4:6a:55:1e:d3:90:89:2e:d4:29:9a:ff:99:de:13:d7:82:
ec:5a:52:65:7f:4f:ee:9e:ee:dc:d7:2c:11:1f:d7:15:5f:8b:
40:f8:67:b4:9b:fb:e3:e6:a2:89:59:5f:38:a8:64:2a:9f:82:
90:df:cf:67:4f:ab:9f:13:ed:b2:ec:8a:39:aa:e2:d2:47:ce:
cf:72:c8:a1:16:2d:41:d3:49:0a:ea:80:a8:90:79:2a:ba:77:
9b:66:f2:fa:01:ac:e0:35:92:c4:3a:04:9b:71:7d:5d:db:09:
ac:05:cb:83:19:c5:d2:51:d5:7e:e7:b4:25:d9:af:cb:99:d8:
67:a5:de:56:e8:9f:b7:11:fa:19:85:01:0a:3c:d7:ef:96:8c:
4b:c1:5a:2e:7b:ed:d9:de:2b:20:cf:f2:90:34:8a:f5:82:e5:
4a:17:69:3e:56:1f:54:3a:5a:0a:e4:90:34:e9:00:1c:b5:f3:
b4:b5:99:3f:c6:4d:9f:1b:81:d7:8e:bb:8f:43:38:7b:05:9e:
d0:49:33:ae:4c:1a:c0:2e:fb:d8:92:53:9f:56:91:11:0f:66:
27:c0:b5:13
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUUXNJKbRbVUFe0poyl1nCVkk4IzIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzI4NDY5OEUyMjFGN0U2NTA3NTVCQUI4RTRFODY1RDY3
MEM3MzgzRjAeFw0yNDAzMjkyMTU0MjZaFw0yNTAzMjgyMTU5MjZaMDMxMTAvBgNV
BAMTKDZBRjAwMTY0NkNFMTNEM0ZFMTFBRTg0ODIyRTU5QUNGQjZENThFNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5/2QwqIAhPk+rqLczpFI47CK9
6J20I36Ez9o22SzRc+95gmXZYxCNG4JE8fdf6PP05k0P/qwtpVt81xv9LU2JS5qz
s2F/GNs1YGVxr64oBNU2nr1qqsAr+MyleiFKjhJEgLTS9CHWF49pNvlm720PzYKA
BTzqY27kd07GvSA0i7E7ezg24PqhZuCC4reRuWLsENeFJOLF8kv8RDQj/hmYHwS7
qZDq4lmA6k0f4l3trpzTpsmIgDGn/72a/q9ETlkG5shn8p6F6mmwreed9XPFqyk9
SuwlMUMGSuy3evGoIQzqQYejRnolR5sJtRDQGWHM3Qod18+yZrtvWpM6JjSZAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUavABZGzhPT/hGuhIIuWaz7bVjl8wHwYDVR0j
BBgwFoAUwoRpjiIffmUHVbq45Ohl1nDHOD8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTZKTG44N0x2ckt1a2RwaE55Z2ZocEFxVTg2Q2V4NU1UQjZEZFJqOWZS
cjcvMC9DMjg0Njk4RTIyMUY3RTY1MDc1NUJBQjhFNEU4NjVENjcwQzczODNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MyODQ2OThFMjIxRjdFNjUw
NzU1QkFCOEU0RTg2NUQ2NzBDNzM4M0YuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU2SkxuODdMdnJLdWtkcGhOeWdmaHBBcVU4NkNleDVNVEI2RGRSajlmUnI3LzAv
MzEzMzM4MmUzMjM1MzUyZTMxMzAzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMzM5MzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAor/aDANBgkqhkiG9w0BAQsFAAOCAQEAI1vi
FG+W3srd9BVMte71G2Jug3vIRU6OGhuqMz+xuHr8NYrqOuRqVR7TkIku1Cma/5ne
E9eC7FpSZX9P7p7u3NcsER/XFV+LQPhntJv74+aiiVlfOKhkKp+CkN/PZ0+rnxPt
suyKOari0kfOz3LIoRYtQdNJCuqAqJB5Krp3m2by+gGs4DWSxDoEm3F9XdsJrAXL
gxnF0lHVfue0Jdmvy5nYZ6XeVuiftxH6GYUBCjzX75aMS8FaLnvt2d4rIM/ykDSK
9YLlShdpPlYfVDpaCuSQNOkAHLXztLWZP8ZNnxuB1467j0M4ewWe0EkzrkwawC77
2JJTn1aREQ9mJ8C1Ew==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:29 2025 by rpki-client