![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/3230302e33362e3139362e302f32322d3234203d3e20323731343233.roa
File: 3230302e33362e3139362e302f32322d3234203d3e20323731343233.roa (raw, json)
Hash identifier: b3G63lqqqS7BkOOQlxop3t+3pehmp/9GbGXXbuZnWVo=
Subject key identifier: C1:60:A2:7B:27:D0:CC:14:1C:EA:BD:24:6A:05:8C:8D:F1:B6:8E:8F
Certificate issuer: /CN=D0EF0DE2C9A8B347D2F91A1A82A7B553AF6B0A74
Certificate serial: 1C97D380553E2B3AB167F9202ED12A04309E398C
Authority key identifier: D0:EF:0D:E2:C9:A8:B3:47:D2:F9:1A:1A:82:A7:B5:53:AF:6B:0A:74
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0EF0DE2C9A8B347D2F91A1A82A7B553AF6B0A74.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/3230302e33362e3139362e302f32322d3234203d3e20323731343233.roa
Signing time: Wed 10 Jan 2024 13:58:11 +0000
ROA not before: Wed 10 Jan 2024 13:53:11 +0000
ROA not after: Wed 08 Jan 2025 13:58:11 +0000
asID: 271423
IP address blocks: 200.36.196.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:97:d3:80:55:3e:2b:3a:b1:67:f9:20:2e:d1:2a:04:30:9e:39:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0EF0DE2C9A8B347D2F91A1A82A7B553AF6B0A74
Validity
Not Before: Jan 10 13:53:11 2024 GMT
Not After : Jan 8 13:58:11 2025 GMT
Subject: CN=C160A27B27D0CC141CEABD246A058C8DF1B68E8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:db:61:19:a6:2d:ec:44:f7:3b:83:f8:5c:09:
40:78:40:ce:af:6b:40:1c:07:39:ff:3f:f0:85:fe:
ea:24:7d:b0:74:e3:43:8d:6a:cf:b1:48:62:c7:d2:
7a:36:0d:40:82:4a:4c:c5:0a:32:eb:a6:14:c3:ea:
f4:f4:09:0d:7b:49:6f:54:79:41:9b:ad:03:7d:a4:
13:e9:c2:d0:c4:86:3c:d9:20:e1:7f:6e:bb:88:05:
e7:ca:ab:1d:d6:33:d9:fb:dc:e6:5c:15:62:c9:38:
19:9a:8d:d6:ca:e7:68:d2:42:86:52:ab:a2:a9:10:
c1:9d:2e:6a:3c:58:09:c9:8d:e8:41:fa:c5:ad:a6:
02:39:5a:1d:6a:34:60:9a:77:cc:4d:1d:ab:57:34:
05:52:00:28:2f:9a:42:7d:3b:3e:41:49:3c:1a:1d:
69:9a:3a:d7:73:6b:e3:92:84:f2:55:3a:d6:fc:67:
02:21:52:13:fb:d2:4f:8f:b2:f0:28:11:4d:10:5f:
e0:35:41:66:b0:9c:d7:2a:02:76:3b:8e:71:d8:57:
b9:ac:a0:86:15:44:d8:90:7e:3d:a5:5c:de:75:37:
61:cf:ab:6d:5f:f5:b8:98:c9:78:2a:95:a4:dc:51:
2e:70:87:d1:95:a8:e3:37:b7:cf:98:c0:23:18:75:
5b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:60:A2:7B:27:D0:CC:14:1C:EA:BD:24:6A:05:8C:8D:F1:B6:8E:8F
X509v3 Authority Key Identifier:
keyid:D0:EF:0D:E2:C9:A8:B3:47:D2:F9:1A:1A:82:A7:B5:53:AF:6B:0A:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/D0EF0DE2C9A8B347D2F91A1A82A7B553AF6B0A74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0EF0DE2C9A8B347D2F91A1A82A7B553AF6B0A74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/3230302e33362e3139362e302f32322d3234203d3e20323731343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.36.196.0/22
Signature Algorithm: sha256WithRSAEncryption
d2:b7:65:95:94:fd:89:4f:12:4d:01:24:ea:56:70:3e:b4:5a:
ca:7c:14:77:27:9c:0c:aa:69:d0:5d:a0:66:d4:fa:69:4d:64:
b8:b1:37:a1:0c:44:66:dd:d5:c1:87:47:67:2b:0e:71:53:db:
9f:2f:d8:d3:e3:b8:da:63:62:c5:74:21:9e:51:f1:eb:c8:6a:
29:d8:bd:44:7f:63:d1:47:0d:2d:88:5a:bc:90:53:d5:a4:b7:
7a:71:7a:b3:73:69:d7:da:7e:a1:69:3d:7e:09:31:60:bd:56:
0d:ff:a4:04:7f:b6:b8:4a:b3:06:55:16:82:4b:71:1f:b5:54:
30:1b:78:f1:34:10:f2:cf:74:c6:29:14:26:60:4e:34:8c:46:
30:51:1c:c5:ee:62:35:36:07:98:4e:63:01:d6:19:38:7d:5e:
7c:3a:e0:5a:23:c7:19:1d:ef:33:9e:2e:8f:79:57:e8:b5:92:
75:ff:f5:7f:d6:2f:16:71:aa:df:1f:6c:7e:28:92:ce:53:ef:
4b:2e:10:0a:4b:ba:84:5e:61:1c:d7:30:0d:93:17:06:9c:8e:
a7:f5:29:b6:5a:6d:a7:35:57:67:47:4d:66:20:29:e2:4f:48:
59:a3:c6:64:de:0b:97:da:d0:d4:fc:b3:07:e9:0b:45:55:8a:
a9:4d:e4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:16 2025 by rpki-client