![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/34352e3136362e3136342e302f32322d3234203d3e20323634303735.roa
File: 34352e3136362e3136342e302f32322d3234203d3e20323634303735.roa (raw, json)
Hash identifier: UKn/vmpu3TQL7QmiM6iPiO0DfnT4aZi973jPPsOAOWw=
Subject key identifier: 1D:EC:FC:C4:62:5E:73:14:38:41:3E:A7:2D:CB:3A:8C:8C:E5:DD:B9
Certificate issuer: /CN=8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228
Certificate serial: 32DBCC027C3796086DB087360221D9A3BBEF29E0
Authority key identifier: 8A:63:C0:EE:68:D7:14:FD:6E:B5:F1:73:9C:7F:D0:04:5C:4C:12:28
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/34352e3136362e3136342e302f32322d3234203d3e20323634303735.roa
Signing time: Tue 16 Jan 2024 17:37:57 +0000
ROA not before: Tue 16 Jan 2024 17:32:57 +0000
ROA not after: Tue 14 Jan 2025 17:37:57 +0000
asID: 264075
IP address blocks: 45.166.164.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:db:cc:02:7c:37:96:08:6d:b0:87:36:02:21:d9:a3:bb:ef:29:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228
Validity
Not Before: Jan 16 17:32:57 2024 GMT
Not After : Jan 14 17:37:57 2025 GMT
Subject: CN=1DECFCC4625E731438413EA72DCB3A8C8CE5DDB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2d:c2:de:b5:c7:93:af:4a:5a:3c:ee:da:b1:
d7:67:3e:98:3b:94:ed:2c:e1:69:a5:d4:27:fa:bd:
69:d3:31:90:02:4f:62:7b:96:c3:ab:f7:21:70:3f:
e1:dc:e2:4d:cc:ab:ea:ab:8a:e2:d5:6e:da:e6:5a:
42:2b:fc:d2:e5:76:44:8b:13:79:8e:70:07:ce:67:
74:ba:27:56:45:6e:12:22:83:e7:ef:d7:c3:83:2f:
ca:83:07:55:65:4f:02:95:81:c1:bf:ab:3d:80:9d:
8c:a0:70:6a:e1:34:f5:5f:6f:60:eb:5d:b4:08:b8:
c2:db:c1:ad:7e:dc:cc:30:69:0e:0f:7a:f9:ca:80:
4c:ca:3c:4f:31:bd:5e:1c:d8:a0:95:44:3d:99:e7:
eb:cb:6b:5f:d2:ae:82:09:ee:cd:af:44:5c:95:6a:
17:3f:dd:13:f8:cf:ed:67:0e:f6:34:e3:39:70:b7:
9d:15:a1:7f:10:83:48:33:f0:40:92:2a:c2:e7:7d:
c5:4e:17:8a:11:b5:e7:60:04:b0:75:7c:91:f9:e6:
1a:b0:b8:7f:7d:db:b6:19:fa:ca:57:e3:d3:83:3b:
e4:62:2b:10:75:d4:03:8f:3d:53:1f:05:29:18:a2:
91:4a:7d:66:59:69:94:d6:f1:0e:4a:93:58:96:e6:
91:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EC:FC:C4:62:5E:73:14:38:41:3E:A7:2D:CB:3A:8C:8C:E5:DD:B9
X509v3 Authority Key Identifier:
keyid:8A:63:C0:EE:68:D7:14:FD:6E:B5:F1:73:9C:7F:D0:04:5C:4C:12:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/34352e3136362e3136342e302f32322d3234203d3e20323634303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.166.164.0/22
Signature Algorithm: sha256WithRSAEncryption
00:8f:b3:86:9e:b0:9c:37:69:e3:0f:57:cf:8e:d5:3c:02:9a:
f9:8f:1d:4d:6a:90:d3:7b:06:02:01:37:69:a3:5d:ff:d9:cd:
0f:c9:b0:c9:71:4e:5e:c9:43:f7:c4:48:40:b9:00:ea:a5:4e:
f8:5d:c2:dc:df:49:58:a5:41:5a:b5:ae:26:ae:aa:a6:cf:1c:
fc:09:c5:10:a7:f8:fa:91:c6:b5:8b:83:d1:a5:92:45:72:9b:
47:02:f2:7e:0c:e0:a6:c4:6c:cf:2f:36:1c:1c:99:d5:34:cc:
e7:9c:6d:c9:a4:bb:f3:3c:c4:74:35:3d:bc:3b:cd:64:d0:7a:
83:70:b8:2b:45:81:ac:b7:88:49:32:9f:be:f6:e5:6d:a5:a4:
09:9b:a4:83:d2:73:27:80:ad:f0:f7:80:01:1f:6c:a1:0e:75:
50:a0:e9:b3:83:a2:3c:71:5f:64:82:66:36:33:64:d1:47:d2:
22:a1:8e:28:e8:f9:ac:f8:91:2b:99:e3:c2:b8:c4:78:bb:a0:
98:29:a8:7b:80:9d:94:99:12:36:07:5e:f0:33:54:73:71:70:
f2:8f:5f:63:cd:a4:e2:87:de:32:3e:9f:87:3a:79:b5:8f:eb:
e2:a1:ab:b4:c1:4c:9a:c1:be:77:05:4e:dd:ea:5f:af:7b:d7:
26:50:61:51
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMtvMAnw3lghtsIc2AiHZo7vvKeAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEE2M0MwRUU2OEQ3MTRGRDZFQjVGMTczOUM3RkQwMDQ1
QzRDMTIyODAeFw0yNDAxMTYxNzMyNTdaFw0yNTAxMTQxNzM3NTdaMDMxMTAvBgNV
BAMTKDFERUNGQ0M0NjI1RTczMTQzODQxM0VBNzJEQ0IzQThDOENFNUREQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5LcLetceTr0paPO7asddnPpg7
lO0s4Wml1Cf6vWnTMZACT2J7lsOr9yFwP+Hc4k3Mq+qriuLVbtrmWkIr/NLldkSL
E3mOcAfOZ3S6J1ZFbhIig+fv18ODL8qDB1VlTwKVgcG/qz2AnYygcGrhNPVfb2Dr
XbQIuMLbwa1+3MwwaQ4PevnKgEzKPE8xvV4c2KCVRD2Z5+vLa1/SroIJ7s2vRFyV
ahc/3RP4z+1nDvY04zlwt50VoX8Qg0gz8ECSKsLnfcVOF4oRtedgBLB1fJH55hqw
uH9927YZ+spX49ODO+RiKxB11AOPPVMfBSkYopFKfWZZaZTW8Q5Kk1iW5pEfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUHez8xGJecxQ4QT6nLcs6jIzl3bkwHwYDVR0j
BBgwFoAUimPA7mjXFP1utfFznH/QBFxMEigwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNm42ZzFrUHVENThCZVNWa1g3R3U0U0tpNVFXWHkxOW9UcHZwdmkzYzNr
anQvMC84QTYzQzBFRTY4RDcxNEZENkVCNUYxNzM5QzdGRDAwNDVDNEMxMjI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhBNjNDMEVFNjhENzE0RkQ2
RUI1RjE3MzlDN0ZEMDA0NUM0QzEyMjguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZuNmcxa1B1RDU4QmVTVmtYN0d1NFNLaTVRV1h5MTlvVHB2cHZpM2Mza2p0LzAv
MzQzNTJlMzEzNjM2MmUzMTM2MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzQzMDM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItpqQwDQYJKoZIhvcNAQELBQADggEBAACPs4ae
sJw3aeMPV8+O1TwCmvmPHU1qkNN7BgIBN2mjXf/ZzQ/JsMlxTl7JQ/fESEC5AOql
TvhdwtzfSVilQVq1riauqqbPHPwJxRCn+PqRxrWLg9GlkkVym0cC8n4M4KbEbM8v
NhwcmdU0zOecbcmku/M8xHQ1Pbw7zWTQeoNwuCtFgay3iEkyn7725W2lpAmbpIPS
cyeArfD3gAEfbKEOdVCg6bODojxxX2SCZjYzZNFH0iKhjijo+az4kSuZ48K4xHi7
oJgpqHuAnZSZEjYHXvAzVHNxcPKPX2PNpOKH3jI+n4c6ebWP6+Khq7TBTJrBvncF
Tt3qX6971yZQYVE=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:15 2025 by rpki-client