![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/3136382e3233322e38342e302f32322d3234203d3e20323634353632.roa
File: 3136382e3233322e38342e302f32322d3234203d3e20323634353632.roa (raw, json)
Hash identifier: DsVL9fC9lsINPMkvA3PPwK3p6bXrAkHwNbKROXUQ+mc=
Subject key identifier: 05:C8:B4:18:A8:2E:2A:5B:6F:18:ED:D2:74:DE:26:C7:D1:94:32:C3
Certificate issuer: /CN=CA948884CA136F59A5F29D9B37F2E11919035585
Certificate serial: 717280AF2F80050FC417EA7925BC6FE3493D5190
Authority key identifier: CA:94:88:84:CA:13:6F:59:A5:F2:9D:9B:37:F2:E1:19:19:03:55:85
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA948884CA136F59A5F29D9B37F2E11919035585.cer
Subject info access: rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/3136382e3233322e38342e302f32322d3234203d3e20323634353632.roa
Signing time: Tue 30 Apr 2024 20:44:00 +0000
ROA not before: Tue 30 Apr 2024 20:39:00 +0000
ROA not after: Tue 29 Apr 2025 20:44:00 +0000
asID: 264562
IP address blocks: 168.232.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:72:80:af:2f:80:05:0f:c4:17:ea:79:25:bc:6f:e3:49:3d:51:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA948884CA136F59A5F29D9B37F2E11919035585
Validity
Not Before: Apr 30 20:39:00 2024 GMT
Not After : Apr 29 20:44:00 2025 GMT
Subject: CN=05C8B418A82E2A5B6F18EDD274DE26C7D19432C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fd:cd:aa:f7:2d:03:ee:4e:ab:52:9a:2e:f0:
15:8b:fc:66:c8:91:59:fc:88:5d:3f:dd:b0:df:35:
17:fd:55:12:3f:2c:ad:85:1a:ba:cb:40:fc:d5:fd:
cf:19:50:1c:77:94:da:e7:70:e5:d4:ba:46:84:7e:
91:28:95:77:36:64:23:1a:44:79:7d:71:20:18:bc:
16:22:fd:34:6a:cb:61:2a:e3:9e:85:c5:2e:42:6a:
d7:13:c6:39:1c:c6:18:c0:a0:89:25:7f:7e:15:d0:
f5:7a:9c:51:7b:a5:56:34:08:b1:d1:26:5e:38:87:
bd:a9:d3:3c:a1:3b:fc:2c:90:32:33:d4:8d:7b:a8:
ab:ac:fe:e7:a2:5d:68:36:83:ab:70:4a:33:ea:c8:
eb:63:a0:65:a5:37:98:58:61:9c:3b:cc:73:25:62:
06:fb:0c:3d:47:01:1c:f9:fd:19:e2:4f:4f:23:f7:
b5:81:21:c8:74:2b:62:b9:e2:93:1f:3a:87:29:11:
e2:8f:04:05:ca:d4:61:d1:77:0a:07:bb:d5:d7:c2:
44:e6:45:74:22:8f:36:ed:c6:9b:fd:3d:e9:51:f1:
8c:9d:5f:df:3c:86:b6:75:24:b7:97:35:e5:9d:64:
12:5c:c7:29:a3:62:d3:ae:c2:67:76:a0:26:8d:50:
ae:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C8:B4:18:A8:2E:2A:5B:6F:18:ED:D2:74:DE:26:C7:D1:94:32:C3
X509v3 Authority Key Identifier:
keyid:CA:94:88:84:CA:13:6F:59:A5:F2:9D:9B:37:F2:E1:19:19:03:55:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/CA948884CA136F59A5F29D9B37F2E11919035585.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA948884CA136F59A5F29D9B37F2E11919035585.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/3136382e3233322e38342e302f32322d3234203d3e20323634353632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.232.84.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:97:2d:e4:49:31:e4:ad:78:55:7c:bc:36:2e:eb:d7:00:58:
4b:be:ab:ea:c9:4f:33:8a:2b:15:8a:19:06:84:31:63:65:cf:
4e:0e:4b:4a:fd:c9:5c:d5:7e:2b:34:dd:88:b8:0f:4f:4b:34:
e1:eb:f5:f0:65:30:3f:0d:00:d5:c9:f0:9c:dc:1c:a4:40:93:
b2:ac:cf:64:d6:c6:d8:a3:43:9b:87:d7:80:ce:5a:ff:5b:80:
3b:db:22:14:c9:95:e3:cd:79:18:3b:ff:6d:73:d9:e1:9e:f9:
0a:6a:15:7f:69:87:54:e1:d8:67:3b:10:b1:e2:84:a6:a9:70:
79:d5:c8:f2:f7:95:50:5e:63:6f:36:ff:4d:de:c0:08:4b:e5:
6f:ab:64:1f:c2:20:1e:97:a4:41:7e:b8:f5:b0:33:e8:f0:c5:
d3:6c:c7:d1:51:f5:13:2e:1d:7f:44:24:91:29:8a:3e:87:6c:
0d:26:69:85:32:b9:68:1f:79:2a:79:a9:b1:27:69:6b:74:11:
a4:3c:31:b3:e8:94:05:fd:8d:ac:4f:f7:ec:80:1e:d0:01:00:
7d:e3:2d:69:60:1d:cf:7e:a8:31:e0:71:fe:38:9c:dc:7c:1a:
03:ff:2b:1e:57:9c:c0:da:6d:30:03:a3:0c:1c:a8:49:3e:33:
ed:9b:9f:7c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcXKAry+ABQ/EF+p5Jbxv40k9UZAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0E5NDg4ODRDQTEzNkY1OUE1RjI5RDlCMzdGMkUxMTkx
OTAzNTU4NTAeFw0yNDA0MzAyMDM5MDBaFw0yNTA0MjkyMDQ0MDBaMDMxMTAvBgNV
BAMTKDA1QzhCNDE4QTgyRTJBNUI2RjE4RUREMjc0REUyNkM3RDE5NDMyQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU/c2q9y0D7k6rUpou8BWL/GbI
kVn8iF0/3bDfNRf9VRI/LK2FGrrLQPzV/c8ZUBx3lNrncOXUukaEfpEolXc2ZCMa
RHl9cSAYvBYi/TRqy2Eq456FxS5CatcTxjkcxhjAoIklf34V0PV6nFF7pVY0CLHR
Jl44h72p0zyhO/wskDIz1I17qKus/ueiXWg2g6twSjPqyOtjoGWlN5hYYZw7zHMl
Ygb7DD1HARz5/RniT08j97WBIch0K2K54pMfOocpEeKPBAXK1GHRdwoHu9XXwkTm
RXQijzbtxpv9PelR8YydX988hrZ1JLeXNeWdZBJcxymjYtOuwmd2oCaNUK65AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUBci0GKguKltvGO3SdN4mx9GUMsMwHwYDVR0j
BBgwFoAUypSIhMoTb1ml8p2bN/LhGRkDVYUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTlqVW50Y1duTjZ1SkxBbmZSaTJwSlM0aW1NdjE3V3pEZVM3SFVrRHY4
ZHkvMC9DQTk0ODg4NENBMTM2RjU5QTVGMjlEOUIzN0YyRTExOTE5MDM1NTg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBOTQ4ODg0Q0ExMzZGNTlB
NUYyOUQ5QjM3RjJFMTE5MTkwMzU1ODUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU5alVudGNXbk42dUpMQW5mUmkycEpTNGltTXYxN1d6RGVTN0hVa0R2OGR5LzAv
MzEzNjM4MmUzMjMzMzIyZTM4MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzQzNTM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKo6FQwDQYJKoZIhvcNAQELBQADggEBAL2XLeRJ
MeSteFV8vDYu69cAWEu+q+rJTzOKKxWKGQaEMWNlz04OS0r9yVzVfis03Yi4D09L
NOHr9fBlMD8NANXJ8JzcHKRAk7Ksz2TWxtijQ5uH14DOWv9bgDvbIhTJlePNeRg7
/21z2eGe+QpqFX9ph1Th2Gc7ELHihKapcHnVyPL3lVBeY282/03ewAhL5W+rZB/C
IB6XpEF+uPWwM+jwxdNsx9FR9RMuHX9EJJEpij6HbA0maYUyuWgfeSp5qbEnaWt0
EaQ8MbPolAX9jaxP9+yAHtABAH3jLWlgHc9+qDHgcf44nNx8GgP/Kx5XnMDabTAD
owwcqEk+M+2bn3w=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:51 2025 by rpki-client