![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/3136372e3235302e3231362e302f32322d3232203d3e20323635323234.roa
File: 3136372e3235302e3231362e302f32322d3232203d3e20323635323234.roa (raw, json)
Hash identifier: 57W1v6PEBfY3CJ77eECkQClIvQDbsBzntdG1WoYJmXw=
Subject key identifier: 31:C4:96:8E:5E:92:9B:8D:5A:D3:3C:FA:CE:EE:8B:71:00:49:95:93
Certificate issuer: /CN=25FDEA4FC76B6ED9A0E2C7040120618B55F5410A
Certificate serial: 2D21D2110FF065E220679A6AB499C566A9FEE8E2
Authority key identifier: 25:FD:EA:4F:C7:6B:6E:D9:A0:E2:C7:04:01:20:61:8B:55:F5:41:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25FDEA4FC76B6ED9A0E2C7040120618B55F5410A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/3136372e3235302e3231362e302f32322d3232203d3e20323635323234.roa
Signing time: Fri 28 Oct 2022 12:19:43 +0000
ROA not before: Fri 28 Oct 2022 12:14:43 +0000
ROA not after: Fri 27 Oct 2023 12:19:43 +0000
asID: 265224
IP address blocks: 167.250.216.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:21:d2:11:0f:f0:65:e2:20:67:9a:6a:b4:99:c5:66:a9:fe:e8:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25FDEA4FC76B6ED9A0E2C7040120618B55F5410A
Validity
Not Before: Oct 28 12:14:43 2022 GMT
Not After : Oct 27 12:19:43 2023 GMT
Subject: CN=31C4968E5E929B8D5AD33CFACEEE8B7100499593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:80:0c:9c:75:b0:27:80:45:ba:c4:e9:15:27:
26:01:99:90:7a:6b:51:d5:b7:8d:9d:74:a3:be:3c:
fc:f6:4c:13:5e:fd:cd:d7:a7:95:5f:9d:22:03:ef:
5b:29:d1:fb:f7:6a:2d:55:85:ec:a2:ee:ae:2e:ca:
c3:e4:0b:4b:bc:2c:66:3d:8c:3d:fb:d6:9c:04:da:
8b:a7:11:20:70:b0:f8:bc:d4:9d:12:57:ee:8a:03:
f0:ed:8d:c4:dc:4f:4a:e6:5c:71:38:84:b2:7c:a5:
7c:e4:49:0b:0a:6a:3d:88:93:25:8e:92:cb:01:01:
25:94:cb:ab:5e:c2:7a:57:60:db:18:40:d3:d8:19:
84:40:41:c5:29:ee:15:ae:33:44:27:e4:fe:42:75:
da:14:1a:b7:89:91:fe:8c:b0:8d:72:3f:dc:95:ec:
2f:57:be:b6:6b:c4:51:44:c5:2a:05:eb:57:5a:30:
e3:27:f2:cd:f5:d1:1a:b3:e2:86:73:92:d6:0e:d1:
ab:d0:29:b0:24:be:57:30:95:54:51:39:76:0f:f0:
0c:60:2b:9f:cc:78:03:8f:39:58:c4:9e:6f:1f:e8:
72:a9:c2:ea:b9:34:af:b3:54:af:45:c4:41:f1:85:
cb:1e:28:6c:ae:dd:1a:75:10:83:99:76:1a:ae:bd:
db:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C4:96:8E:5E:92:9B:8D:5A:D3:3C:FA:CE:EE:8B:71:00:49:95:93
X509v3 Authority Key Identifier:
keyid:25:FD:EA:4F:C7:6B:6E:D9:A0:E2:C7:04:01:20:61:8B:55:F5:41:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/25FDEA4FC76B6ED9A0E2C7040120618B55F5410A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25FDEA4FC76B6ED9A0E2C7040120618B55F5410A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/3136372e3235302e3231362e302f32322d3232203d3e20323635323234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.250.216.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:70:06:68:6c:89:8a:13:e0:1e:bd:1e:9d:09:af:e0:fd:00:
8a:77:ea:48:aa:26:c1:08:c2:e4:8b:70:7c:5b:0f:e4:7f:4c:
44:0b:de:68:e0:c7:c3:1c:aa:52:bb:57:2e:59:8c:f6:f0:29:
db:ed:c0:b6:41:28:af:69:6c:d1:80:e9:fe:45:7a:0b:ef:ab:
3e:2e:41:6f:0a:e5:2c:c4:e5:eb:91:57:25:19:a3:a9:84:c6:
7d:d4:3f:b5:37:37:c7:93:86:1e:4f:62:95:f5:41:ce:38:4d:
79:b0:a6:96:66:5d:98:d5:ac:27:d0:e7:aa:a5:81:ec:c4:e1:
11:74:22:99:c4:c1:1b:e4:da:30:03:94:30:d2:2e:d8:4d:72:
97:48:a7:f7:4d:3a:1e:35:fe:6d:d5:0b:9c:3d:e0:ce:4c:c3:
ef:fb:54:8a:0b:13:78:3b:00:cc:71:8d:fc:0e:e6:0a:8d:63:
1c:ab:74:6c:60:0c:c1:f6:d4:db:90:63:72:d3:95:87:5d:4c:
65:1c:d3:d7:bf:6d:65:90:7b:19:30:af:81:18:99:2e:b2:83:
26:5c:88:95:30:9d:c9:7d:14:47:68:97:b1:2d:3b:05:ac:2b:
6a:2c:bd:19:0b:78:12:c7:6a:89:6f:9b:fd:98:5f:be:2a:2d:
7b:a9:ce:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:58:43 2025 by rpki-client