![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/79N9KPPgS43ARULBCja3ZF6roFAze7ESt5u4kxgtP2mi/0/3136382e3232382e3231362e302f32322d3232203d3e20323634393239.roa
File: 3136382e3232382e3231362e302f32322d3232203d3e20323634393239.roa (raw, json)
Hash identifier: X/FghRxrA3Mqckz/TpOhkkdcXs0kNSr2nX2E5bEqhSM=
Subject key identifier: 96:42:34:1A:3E:13:44:9B:1D:67:5A:0A:F0:C3:80:A7:7A:A0:C9:63
Certificate issuer: /CN=CB3B7616863B2F05AD85E6493F4FEA0906E4A07A
Certificate serial: 61B04BD97C24B327F8E28F1D11D9CDA10195E3C8
Authority key identifier: CB:3B:76:16:86:3B:2F:05:AD:85:E6:49:3F:4F:EA:09:06:E4:A0:7A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB3B7616863B2F05AD85E6493F4FEA0906E4A07A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/79N9KPPgS43ARULBCja3ZF6roFAze7ESt5u4kxgtP2mi/0/3136382e3232382e3231362e302f32322d3232203d3e20323634393239.roa
Signing time: Fri 13 Oct 2023 04:05:14 +0000
ROA not before: Fri 13 Oct 2023 04:00:14 +0000
ROA not after: Fri 11 Oct 2024 04:05:14 +0000
asID: 264929
IP address blocks: 168.228.216.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:b0:4b:d9:7c:24:b3:27:f8:e2:8f:1d:11:d9:cd:a1:01:95:e3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB3B7616863B2F05AD85E6493F4FEA0906E4A07A
Validity
Not Before: Oct 13 04:00:14 2023 GMT
Not After : Oct 11 04:05:14 2024 GMT
Subject: CN=9642341A3E13449B1D675A0AF0C380A77AA0C963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f9:af:31:49:77:4b:d2:71:52:9a:17:34:5d:
21:01:65:0b:2f:a3:5c:dc:74:d1:cf:12:a8:bf:34:
c9:c5:04:a6:21:93:ad:5f:88:3c:80:ad:15:b9:c3:
7f:fb:26:53:31:05:db:b4:75:9e:06:6d:e5:d5:8f:
91:f4:96:4a:94:4f:11:99:c2:c9:37:c7:fa:a9:e6:
8f:51:17:bc:51:44:82:c9:c4:cd:21:09:7e:65:c7:
93:c1:a3:00:5e:b3:01:1e:14:3f:61:59:0a:28:cb:
74:27:66:62:ca:75:3b:b7:63:a6:09:2a:61:45:81:
59:ad:ac:33:34:d1:1b:7c:ff:fd:55:5e:35:d7:79:
b3:64:27:43:d9:84:62:e2:72:b5:f0:87:0e:9a:b2:
1d:a2:d9:ec:08:14:9a:a8:96:94:a3:1a:34:e7:0e:
78:71:02:53:25:a2:56:8a:95:9a:39:a8:60:14:5f:
a3:97:da:59:cc:a7:e6:c4:c7:c4:ae:68:60:33:d1:
69:0c:c7:cb:24:e4:3b:8f:48:b4:23:06:bf:3e:7d:
af:5b:79:52:1c:a1:8a:8f:c2:52:89:1c:a7:ec:63:
ef:57:2b:db:37:ba:6e:43:d3:7d:e6:7a:fb:df:98:
bb:74:3d:cc:ec:7d:9d:2e:de:0d:c4:5a:d1:8b:76:
60:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:42:34:1A:3E:13:44:9B:1D:67:5A:0A:F0:C3:80:A7:7A:A0:C9:63
X509v3 Authority Key Identifier:
keyid:CB:3B:76:16:86:3B:2F:05:AD:85:E6:49:3F:4F:EA:09:06:E4:A0:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/79N9KPPgS43ARULBCja3ZF6roFAze7ESt5u4kxgtP2mi/0/CB3B7616863B2F05AD85E6493F4FEA0906E4A07A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB3B7616863B2F05AD85E6493F4FEA0906E4A07A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/79N9KPPgS43ARULBCja3ZF6roFAze7ESt5u4kxgtP2mi/0/3136382e3232382e3231362e302f32322d3232203d3e20323634393239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.216.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:fb:5c:5b:d7:0d:f9:32:54:e5:c1:b5:4f:47:c6:15:10:cb:
83:ea:73:f0:44:c3:1c:71:f5:62:8b:96:c6:4d:2d:61:f8:38:
8e:7c:72:0e:88:91:09:4e:59:6f:88:aa:77:c7:43:ec:1f:86:
85:d5:10:34:00:d2:28:76:21:13:ea:b2:85:bd:6a:da:32:85:
79:21:86:19:36:fb:41:fb:61:e8:fd:4f:c2:0f:cb:e6:19:21:
3a:e3:55:32:a7:34:55:21:63:11:53:3c:c2:ea:fe:c6:94:f0:
4e:d2:2b:3b:a8:da:c9:c2:39:fe:b7:6f:08:d9:93:14:2d:65:
50:05:31:52:11:0a:78:55:1b:51:53:04:0f:23:ae:a8:aa:d8:
0f:db:f8:92:d0:b2:6e:cd:68:4f:6c:33:30:58:90:cd:e6:93:
5e:ce:77:89:39:d9:c4:18:ad:4b:70:13:ee:f0:91:24:3b:a7:
30:9c:39:86:7f:9c:22:f1:88:b8:46:b5:69:13:9f:f3:c5:eb:
6f:79:64:bd:37:fe:03:93:dc:26:0d:18:f5:c4:79:8b:f5:93:
9d:b1:c8:5f:e9:1e:fc:ba:8c:ac:af:76:26:1a:41:d1:34:8e:
65:5f:9f:1b:f0:7f:92:ec:54:cc:fe:c9:73:85:1b:84:4d:a1:
49:73:a4:f5
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUYbBL2Xwksyf44o8dEdnNoQGV48gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0IzQjc2MTY4NjNCMkYwNUFEODVFNjQ5M0Y0RkVBMDkw
NkU0QTA3QTAeFw0yMzEwMTMwNDAwMTRaFw0yNDEwMTEwNDA1MTRaMDMxMTAvBgNV
BAMTKDk2NDIzNDFBM0UxMzQ0OUIxRDY3NUEwQUYwQzM4MEE3N0FBMEM5NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp+a8xSXdL0nFSmhc0XSEBZQsv
o1zcdNHPEqi/NMnFBKYhk61fiDyArRW5w3/7JlMxBdu0dZ4GbeXVj5H0lkqUTxGZ
wsk3x/qp5o9RF7xRRILJxM0hCX5lx5PBowBeswEeFD9hWQooy3QnZmLKdTu3Y6YJ
KmFFgVmtrDM00Rt8//1VXjXXebNkJ0PZhGLicrXwhw6ash2i2ewIFJqolpSjGjTn
DnhxAlMlolaKlZo5qGAUX6OX2lnMp+bEx8SuaGAz0WkMx8sk5DuPSLQjBr8+fa9b
eVIcoYqPwlKJHKfsY+9XK9s3um5D033mevvfmLt0PczsfZ0u3g3EWtGLdmCjAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUlkI0Gj4TRJsdZ1oK8MOAp3qgyWMwHwYDVR0j
BBgwFoAUyzt2FoY7LwWtheZJP0/qCQbkoHowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzlOOUtQUGdTNDNBUlVMQkNqYTNaRjZyb0ZBemU3RVN0NXU0a3hndFAy
bWkvMC9DQjNCNzYxNjg2M0IyRjA1QUQ4NUU2NDkzRjRGRUEwOTA2RTRBMDdBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NCM0I3NjE2ODYzQjJGMDVB
RDg1RTY0OTNGNEZFQTA5MDZFNEEwN0EuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc5TjlLUFBnUzQzQVJVTEJDamEzWkY2cm9GQXplN0VTdDV1NGt4Z3RQMm1pLzAv
MzEzNjM4MmUzMjMyMzgyZTMyMzEzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNDM5MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjk2DANBgkqhkiG9w0BAQsFAAOCAQEAtvtc
W9cN+TJU5cG1T0fGFRDLg+pz8ETDHHH1YouWxk0tYfg4jnxyDoiRCU5Zb4iqd8dD
7B+GhdUQNADSKHYhE+qyhb1q2jKFeSGGGTb7Qfth6P1Pwg/L5hkhOuNVMqc0VSFj
EVM8wur+xpTwTtIrO6jaycI5/rdvCNmTFC1lUAUxUhEKeFUbUVMEDyOuqKrYD9v4
ktCybs1oT2wzMFiQzeaTXs53iTnZxBitS3AT7vCRJDunMJw5hn+cIvGIuEa1aROf
88Xrb3lkvTf+A5PcJg0Y9cR5i/WTnbHIX+ke/LqMrK92JhpB0TSOZV+fG/B/kuxU
zP7Jc4UbhE2hSXOk9Q==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:39 2025 by rpki-client