![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/3136382e3232372e3132342e302f32332d3233203d3e20323634383739.roa
File: 3136382e3232372e3132342e302f32332d3233203d3e20323634383739.roa (raw, json)
Hash identifier: BB/NcinXRGlCPbADYT82FGLEeP0ZGGlJsw+CEJWLMhQ=
Subject key identifier: 95:56:8B:AD:D4:50:8C:B0:34:CB:E6:97:90:3C:0F:47:D5:89:3A:93
Certificate issuer: /CN=B5541D2FC4F0FEE033E68EEC7D7FF7D4BD349228
Certificate serial: 09A25E261E776828C0A730A16AD13010C56FBC38
Authority key identifier: B5:54:1D:2F:C4:F0:FE:E0:33:E6:8E:EC:7D:7F:F7:D4:BD:34:92:28
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B5541D2FC4F0FEE033E68EEC7D7FF7D4BD349228.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/3136382e3232372e3132342e302f32332d3233203d3e20323634383739.roa
Signing time: Tue 12 Mar 2024 18:03:02 +0000
ROA not before: Tue 12 Mar 2024 17:58:02 +0000
ROA not after: Tue 11 Mar 2025 18:03:02 +0000
asID: 264879
IP address blocks: 168.227.124.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:a2:5e:26:1e:77:68:28:c0:a7:30:a1:6a:d1:30:10:c5:6f:bc:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5541D2FC4F0FEE033E68EEC7D7FF7D4BD349228
Validity
Not Before: Mar 12 17:58:02 2024 GMT
Not After : Mar 11 18:03:02 2025 GMT
Subject: CN=95568BADD4508CB034CBE697903C0F47D5893A93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9a:81:f4:5d:78:3d:3b:57:f7:62:b3:5f:56:
29:48:ab:83:aa:92:c4:fa:01:2e:8e:44:5b:1c:c7:
f4:06:0f:04:d4:18:7d:74:76:eb:88:9e:f5:08:78:
c0:aa:73:99:3f:1b:4b:ec:9d:34:38:ec:6a:57:ab:
fb:60:ee:48:e6:7c:75:a1:ad:4c:17:60:ee:90:f6:
b9:b1:db:d1:2e:25:6c:0b:5d:c3:57:8f:d3:28:d1:
dc:e9:8c:fe:ce:ad:39:95:68:96:59:98:09:c6:1d:
f2:b1:d6:13:51:40:c9:76:0d:07:1a:8e:2c:fa:cc:
45:cb:8b:86:64:75:23:09:49:0f:d6:7c:e1:8c:39:
66:20:bb:57:61:d0:f4:d0:61:a4:4d:8f:f9:9f:b5:
5b:de:af:a8:54:27:c5:f1:d4:a7:75:a2:7c:33:8a:
54:66:c3:5d:2b:86:34:b1:c1:9b:98:07:f5:85:b1:
51:49:ca:71:48:cb:41:bc:2f:48:c0:bb:dd:08:53:
7e:29:1d:67:2f:30:d3:2c:9b:ea:88:64:fa:07:8c:
e7:06:c3:1c:b2:25:81:5e:af:74:d8:4d:65:72:15:
4f:db:d0:f9:ba:28:bd:4c:95:6b:9c:8b:d9:ff:3d:
48:51:54:20:09:57:fc:6c:5f:3c:36:70:d4:1e:53:
1a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:56:8B:AD:D4:50:8C:B0:34:CB:E6:97:90:3C:0F:47:D5:89:3A:93
X509v3 Authority Key Identifier:
keyid:B5:54:1D:2F:C4:F0:FE:E0:33:E6:8E:EC:7D:7F:F7:D4:BD:34:92:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/B5541D2FC4F0FEE033E68EEC7D7FF7D4BD349228.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B5541D2FC4F0FEE033E68EEC7D7FF7D4BD349228.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/3136382e3232372e3132342e302f32332d3233203d3e20323634383739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.124.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:f5:84:89:df:86:3a:6f:03:2b:b5:b5:56:4d:09:32:c8:9a:
2d:67:5b:dc:5d:65:8f:1d:ce:3c:f1:9d:51:9e:d1:24:7d:9f:
6c:57:6d:2b:02:71:ca:f8:ba:14:d7:ee:36:50:8f:be:d9:76:
6e:45:28:80:09:d8:25:57:f5:eb:03:01:f6:18:41:25:74:9e:
44:39:8e:0a:e7:8e:b7:c1:37:21:ac:4f:3e:e2:67:c6:72:1b:
2d:be:db:94:fe:2c:34:1a:ac:b5:da:5b:9e:6f:3b:e5:80:cd:
cf:b1:4b:45:2e:15:2f:16:f3:cf:5d:f7:4a:5c:18:5a:5a:10:
cf:ca:3c:1b:17:88:9a:79:d1:90:c9:10:b4:cc:3a:70:2e:04:
35:6a:4a:e8:49:e3:3d:51:3c:90:70:38:6a:97:9f:50:d1:a8:
b3:ea:40:b4:29:d3:57:85:68:35:3b:e8:54:18:3d:a2:47:20:
96:aa:b2:9f:f5:1c:2d:58:21:eb:bd:35:4e:1a:77:67:61:f1:
f2:05:45:52:7c:8e:62:fc:80:c8:2e:11:c9:4d:9a:79:8d:96:
fd:a7:86:1e:ad:62:2e:d6:e2:97:54:79:3c:fe:c6:ec:43:35:
b8:18:b8:9a:a6:d2:db:30:fb:dc:78:68:a7:c6:ff:d8:05:c1:
42:38:bf:1f
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUCaJeJh53aCjApzChatEwEMVvvDgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjU1NDFEMkZDNEYwRkVFMDMzRTY4RUVDN0Q3RkY3RDRC
RDM0OTIyODAeFw0yNDAzMTIxNzU4MDJaFw0yNTAzMTExODAzMDJaMDMxMTAvBgNV
BAMTKDk1NTY4QkFERDQ1MDhDQjAzNENCRTY5NzkwM0MwRjQ3RDU4OTNBOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPmoH0XXg9O1f3YrNfVilIq4Oq
ksT6AS6ORFscx/QGDwTUGH10duuInvUIeMCqc5k/G0vsnTQ47GpXq/tg7kjmfHWh
rUwXYO6Q9rmx29EuJWwLXcNXj9Mo0dzpjP7OrTmVaJZZmAnGHfKx1hNRQMl2DQca
jiz6zEXLi4ZkdSMJSQ/WfOGMOWYgu1dh0PTQYaRNj/mftVver6hUJ8Xx1Kd1onwz
ilRmw10rhjSxwZuYB/WFsVFJynFIy0G8L0jAu90IU34pHWcvMNMsm+qIZPoHjOcG
wxyyJYFer3TYTWVyFU/b0Pm6KL1MlWuci9n/PUhRVCAJV/xsXzw2cNQeUxovAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUlVaLrdRQjLA0y+aXkDwPR9WJOpMwHwYDVR0j
BBgwFoAUtVQdL8Tw/uAz5o7sfX/31L00kigwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnRrd0VYbUtQamhzM2UzWjk3WHMyOTRudXk2QzRkUGViNjRRdWlIVllE
MTkvMC9CNTU0MUQyRkM0RjBGRUUwMzNFNjhFRUM3RDdGRjdENEJEMzQ5MjI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I1NTQxRDJGQzRGMEZFRTAz
M0U2OEVFQzdEN0ZGN0Q0QkQzNDkyMjguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ0a3dFWG1LUGpoczNlM1o5N1hzMjk0bnV5NkM0ZFBlYjY0UXVpSFZZRDE5LzAv
MzEzNjM4MmUzMjMyMzcyZTMxMzIzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNDM4MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAajjfDANBgkqhkiG9w0BAQsFAAOCAQEAp/WE
id+GOm8DK7W1Vk0JMsiaLWdb3F1ljx3OPPGdUZ7RJH2fbFdtKwJxyvi6FNfuNlCP
vtl2bkUogAnYJVf16wMB9hhBJXSeRDmOCueOt8E3IaxPPuJnxnIbLb7blP4sNBqs
tdpbnm875YDNz7FLRS4VLxbzz133SlwYWloQz8o8GxeImnnRkMkQtMw6cC4ENWpK
6EnjPVE8kHA4apefUNGos+pAtCnTV4VoNTvoVBg9okcglqqyn/UcLVgh6701Thp3
Z2Hx8gVFUnyOYvyAyC4RyU2aeY2W/aeGHq1iLtbil1R5PP7G7EM1uBi4mqbS2zD7
3Hhop8b/2AXBQji/Hw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:59 2025 by rpki-client