![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/3136382e3233322e3232312e302f32342d3234203d3e20323633363134.roa
File: 3136382e3233322e3232312e302f32342d3234203d3e20323633363134.roa (raw, json)
Hash identifier: /MdGQJaIgv13UpfULLOI/zM+3SYk6mt/bU/H4L9bJ7k=
Subject key identifier: 5D:E7:AD:F0:C9:54:94:FC:F0:6B:6B:49:C3:2E:53:44:84:23:91:BA
Certificate issuer: /CN=0C4C2F81C99B5D1FE7D42B7598E302474D31C83B
Certificate serial: 23EC5DFE87AAB347AD79F368063634AE4C4F235E
Authority key identifier: 0C:4C:2F:81:C9:9B:5D:1F:E7:D4:2B:75:98:E3:02:47:4D:31:C8:3B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C4C2F81C99B5D1FE7D42B7598E302474D31C83B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/3136382e3233322e3232312e302f32342d3234203d3e20323633363134.roa
Signing time: Fri 09 Feb 2024 17:19:01 +0000
ROA not before: Fri 09 Feb 2024 17:14:01 +0000
ROA not after: Fri 07 Feb 2025 17:19:01 +0000
asID: 263614
IP address blocks: 168.232.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:ec:5d:fe:87:aa:b3:47:ad:79:f3:68:06:36:34:ae:4c:4f:23:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C4C2F81C99B5D1FE7D42B7598E302474D31C83B
Validity
Not Before: Feb 9 17:14:01 2024 GMT
Not After : Feb 7 17:19:01 2025 GMT
Subject: CN=5DE7ADF0C95494FCF06B6B49C32E5344842391BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fb:bb:dd:e5:fe:a0:35:70:5c:01:9f:69:99:
f2:bc:f0:84:31:f3:72:c2:c7:51:a2:43:51:19:1e:
44:10:78:82:ad:f6:84:b5:a2:c2:43:54:0d:37:18:
4d:2c:c5:d7:79:f8:b5:a5:4e:c8:99:14:f3:d6:41:
4e:b1:2b:ee:fd:e7:f3:4f:65:31:2e:bb:9f:fc:c9:
eb:e4:81:2b:f4:31:74:ba:7a:33:08:0c:a0:01:1c:
32:fc:b6:3d:f4:32:f8:3f:43:98:ab:bc:2c:10:5f:
2e:57:c5:bb:29:8b:89:e4:d2:52:81:26:fe:a9:b3:
2a:87:68:12:30:90:9b:c9:62:1b:a5:03:ff:49:e5:
12:79:49:30:6f:08:cb:3a:60:09:f9:90:57:8f:ac:
48:a4:bc:e6:2a:f4:11:77:fb:88:22:3e:d0:5f:1d:
44:cc:a1:1e:2d:36:83:8b:e6:46:f2:a0:57:36:b9:
04:42:f7:03:19:e5:6b:0b:30:57:b7:af:84:87:b6:
af:2a:81:12:87:7f:9c:c4:6a:e1:f0:84:66:41:9e:
df:20:23:3f:86:2f:7a:4c:03:59:85:58:ea:0f:5b:
2e:17:8c:66:bd:4c:0c:4b:5c:94:f2:19:73:18:4a:
0b:b7:a5:3f:56:05:90:c0:0e:d2:41:4a:ed:1e:70:
a0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E7:AD:F0:C9:54:94:FC:F0:6B:6B:49:C3:2E:53:44:84:23:91:BA
X509v3 Authority Key Identifier:
keyid:0C:4C:2F:81:C9:9B:5D:1F:E7:D4:2B:75:98:E3:02:47:4D:31:C8:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/0C4C2F81C99B5D1FE7D42B7598E302474D31C83B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C4C2F81C99B5D1FE7D42B7598E302474D31C83B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/3136382e3233322e3232312e302f32342d3234203d3e20323633363134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.232.221.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:ec:c9:6c:9c:fc:7c:be:49:fc:d7:7c:5b:f7:18:e5:47:01:
5f:52:26:70:1d:24:4d:7c:cf:24:e3:df:07:d4:71:b8:c0:8a:
fa:19:8a:41:ab:cf:8d:ac:4f:a4:b4:80:7b:18:8c:7b:d1:fc:
e2:70:bf:7d:fb:e7:82:76:9c:cc:47:b4:84:20:73:1d:0b:e1:
48:9b:4a:92:86:49:08:b3:8f:d8:7e:6f:58:de:8f:92:44:b7:
d8:40:27:cb:81:68:77:96:ca:92:02:73:59:75:e3:2e:8d:6b:
b5:8f:c6:0f:f9:2f:9b:0f:ef:8e:6c:19:ee:4a:0c:b9:7d:54:
b6:8c:e6:58:05:fb:f5:f4:c5:10:de:9a:b7:bf:00:0f:4f:ce:
eb:fb:d0:d5:d9:23:b4:c8:92:87:3a:07:25:86:fc:aa:9a:21:
81:d9:bd:1c:a0:62:71:85:bd:33:59:58:8a:3d:cb:2a:16:10:
b4:41:c6:80:b7:77:7a:d0:82:5c:b6:ae:1f:51:fd:eb:a3:9e:
8a:a8:4a:b8:bc:c3:d4:5a:db:08:85:10:dd:bd:0d:c2:97:2f:
0b:67:71:cd:ea:5d:ce:90:02:4b:62:fc:b3:9e:cc:7a:4e:ba:
c0:08:2f:6a:97:18:38:5f:e9:48:fe:77:ed:66:1b:4b:88:e3:
f6:91:0a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:34:15 2025 by rpki-client