![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3136382e3139372e342e302f32332d3233203d3e20323632353530.roa
File: 3136382e3139372e342e302f32332d3233203d3e20323632353530.roa (raw, json)
Hash identifier: f7uH8ox70af+pM0tZ6ZzgNIfBRrVCkVZyPU3jCdKBdA=
Subject key identifier: 5A:1C:CB:B7:8C:63:41:20:B0:A0:26:5B:FE:FD:D4:6C:F4:5B:F4:FA
Certificate issuer: /CN=59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1
Certificate serial: 6AD2B6C90A9E5AA2E21ABC67E104A46199130017
Authority key identifier: 59:E5:42:AC:3F:5F:9A:BF:7D:B8:F1:AF:7F:24:0E:42:D8:26:54:D1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3136382e3139372e342e302f32332d3233203d3e20323632353530.roa
Signing time: Tue 14 Mar 2023 19:00:01 +0000
ROA not before: Tue 14 Mar 2023 18:55:01 +0000
ROA not after: Tue 12 Mar 2024 19:00:01 +0000
asID: 262550
IP address blocks: 168.197.4.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:d2:b6:c9:0a:9e:5a:a2:e2:1a:bc:67:e1:04:a4:61:99:13:00:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1
Validity
Not Before: Mar 14 18:55:01 2023 GMT
Not After : Mar 12 19:00:01 2024 GMT
Subject: CN=5A1CCBB78C634120B0A0265BFEFDD46CF45BF4FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bd:72:d5:1e:9f:f1:93:b2:97:4a:7e:cd:5f:
09:e8:0b:96:d4:00:5d:80:3d:3e:5f:76:e8:e0:f1:
db:fb:5a:9f:d5:70:89:91:ce:d6:b0:1e:91:97:c1:
81:0a:fd:c9:3b:57:a6:d5:83:94:7d:c4:cc:9a:cc:
7e:ae:92:41:3c:fa:ee:68:a7:58:11:39:d9:ff:1f:
72:f3:1b:ab:a9:a9:41:48:d0:c9:9c:ad:ff:8f:43:
08:d6:32:ef:25:16:aa:df:a5:28:bf:92:74:d4:3a:
55:c8:67:aa:c0:e2:20:be:b9:a7:8e:51:86:b4:44:
f9:74:c2:07:93:d1:0d:65:20:f4:22:ba:ec:bf:a4:
01:39:41:05:db:97:4b:bb:cf:40:49:da:c8:b0:ad:
ee:1c:ce:81:1f:3e:09:68:a1:7b:68:75:91:fe:c8:
ab:30:b6:fb:eb:0b:b3:27:bc:96:48:5a:6e:8f:46:
82:48:ee:b1:9a:7e:9f:49:0a:97:fd:5d:79:ab:4a:
bb:30:5b:7b:f2:ad:4b:c9:1d:1b:42:9e:6f:89:42:
7f:c2:13:71:9b:f3:d2:1f:72:da:67:b5:54:37:86:
4d:93:98:64:b7:18:4f:97:51:3a:02:76:b8:8e:dc:
bb:a4:a7:ae:76:48:ed:40:40:f5:b1:d5:a4:86:0d:
69:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1C:CB:B7:8C:63:41:20:B0:A0:26:5B:FE:FD:D4:6C:F4:5B:F4:FA
X509v3 Authority Key Identifier:
keyid:59:E5:42:AC:3F:5F:9A:BF:7D:B8:F1:AF:7F:24:0E:42:D8:26:54:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3136382e3139372e342e302f32332d3233203d3e20323632353530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.4.0/23
Signature Algorithm: sha256WithRSAEncryption
02:05:10:45:8e:64:75:ca:6b:93:0a:c6:90:1c:b6:c7:9b:6b:
51:58:e2:83:27:df:16:46:e3:fa:64:20:02:c5:66:d8:b3:86:
f9:35:e3:c7:4b:28:a2:b5:ac:b3:5e:14:50:24:42:54:09:4c:
78:66:14:20:72:c9:18:eb:7b:6e:81:30:3a:95:a1:bd:c9:d3:
e8:eb:f1:77:11:a7:7a:26:bb:7c:39:fb:1d:c8:ed:30:ae:da:
26:22:df:35:ab:a6:16:98:3c:6d:0a:6d:84:e6:31:71:a4:e6:
b8:2b:a6:4a:0e:7f:c3:8a:7a:13:20:f7:49:ac:a5:ce:17:fa:
cf:41:35:ab:78:37:1c:6e:b0:e4:88:c2:5b:d3:a4:67:cd:07:
bd:10:1a:58:a9:e2:95:23:06:d9:0e:91:23:bb:46:fd:37:d4:
87:51:8e:87:b1:19:8b:71:27:99:e8:a8:80:3b:27:39:ff:6a:
49:3f:18:57:73:5c:42:37:5a:9d:f7:48:75:33:2e:56:f2:98:
69:a3:92:ff:37:f9:23:90:b3:64:f8:72:3e:db:bb:bc:7c:95:
86:f3:1f:89:78:bb:02:62:fa:cb:ab:0f:99:e9:7c:c1:14:f1:
1e:e4:27:af:fc:c3:8a:8c:30:7b:35:73:e4:89:fb:67:f2:7d:
7b:fb:ea:e2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUatK2yQqeWqLiGrxn4QSkYZkTABcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlFNTQyQUMzRjVGOUFCRjdEQjhGMUFGN0YyNDBFNDJE
ODI2NTREMTAeFw0yMzAzMTQxODU1MDFaFw0yNDAzMTIxOTAwMDFaMDMxMTAvBgNV
BAMTKDVBMUNDQkI3OEM2MzQxMjBCMEEwMjY1QkZFRkRENDZDRjQ1QkY0RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBvXLVHp/xk7KXSn7NXwnoC5bU
AF2APT5fdujg8dv7Wp/VcImRztawHpGXwYEK/ck7V6bVg5R9xMyazH6ukkE8+u5o
p1gROdn/H3LzG6upqUFI0Mmcrf+PQwjWMu8lFqrfpSi/knTUOlXIZ6rA4iC+uaeO
UYa0RPl0wgeT0Q1lIPQiuuy/pAE5QQXbl0u7z0BJ2siwre4czoEfPglooXtodZH+
yKswtvvrC7MnvJZIWm6PRoJI7rGafp9JCpf9XXmrSrswW3vyrUvJHRtCnm+JQn/C
E3Gb89IfctpntVQ3hk2TmGS3GE+XUToCdriO3Lukp652SO1AQPWx1aSGDWnxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUWhzLt4xjQSCwoCZb/v3UbPRb9PowHwYDVR0j
BBgwFoAUWeVCrD9fmr99uPGvfyQOQtgmVNEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUVTcGZqUUZvbUpROGVGaFJRbXJBaFUxQ1M3UGVKc1hNV2tIUlRic1Vv
emQvMC81OUU1NDJBQzNGNUY5QUJGN0RCOEYxQUY3RjI0MEU0MkQ4MjY1NEQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU5RTU0MkFDM0Y1RjlBQkY3
REI4RjFBRjdGMjQwRTQyRDgyNjU0RDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVFU3BmalFGb21KUThlRmhSUW1yQWhVMUNTN1BlSnNYTVdrSFJUYnNVb3pkLzAv
MzEzNjM4MmUzMTM5MzcyZTM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMy
MzUzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBqMUEMA0GCSqGSIb3DQEBCwUAA4IBAQACBRBFjmR1
ymuTCsaQHLbHm2tRWOKDJ98WRuP6ZCACxWbYs4b5NePHSyiitayzXhRQJEJUCUx4
ZhQgcskY63tugTA6laG9ydPo6/F3Ead6Jrt8OfsdyO0wrtomIt81q6YWmDxtCm2E
5jFxpOa4K6ZKDn/DinoTIPdJrKXOF/rPQTWreDccbrDkiMJb06RnzQe9EBpYqeKV
IwbZDpEju0b9N9SHUY6HsRmLcSeZ6KiAOyc5/2pJPxhXc1xCN1qd90h1My5W8php
o5L/N/kjkLNk+HI+27u8fJWG8x+JeLsCYvrLqw+Z6XzBFPEe5Cev/MOKjDB7NXPk
iftn8n17++ri
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:56 2025 by rpki-client