![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/3139312e3234322e37362e302f32342d3234203d3e20323633343734.roa
File: 3139312e3234322e37362e302f32342d3234203d3e20323633343734.roa (raw, json)
Hash identifier: 4kHJA0aKWxhJaEGaeClleYTx4jzJ9w/2pYQg59tYtmU=
Subject key identifier: 74:1D:1C:A6:0A:00:07:01:7A:4D:05:C9:ED:EF:06:A9:79:B2:53:8B
Certificate issuer: /CN=C858AC6D85672A66D3D5599F9237160F9B1B9433
Certificate serial: 04763EF702C9D871B676FE40D9479D3267EFFF13
Authority key identifier: C8:58:AC:6D:85:67:2A:66:D3:D5:59:9F:92:37:16:0F:9B:1B:94:33
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C858AC6D85672A66D3D5599F9237160F9B1B9433.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/3139312e3234322e37362e302f32342d3234203d3e20323633343734.roa
Signing time: Mon 30 Oct 2023 11:54:46 +0000
ROA not before: Mon 30 Oct 2023 11:49:46 +0000
ROA not after: Mon 28 Oct 2024 11:54:46 +0000
asID: 263474
IP address blocks: 191.242.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:76:3e:f7:02:c9:d8:71:b6:76:fe:40:d9:47:9d:32:67:ef:ff:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C858AC6D85672A66D3D5599F9237160F9B1B9433
Validity
Not Before: Oct 30 11:49:46 2023 GMT
Not After : Oct 28 11:54:46 2024 GMT
Subject: CN=741D1CA60A0007017A4D05C9EDEF06A979B2538B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a6:9f:ce:af:91:78:e6:31:03:b7:90:e2:cd:
2d:0d:f9:40:f4:6d:ac:3d:d5:3f:19:18:bd:62:48:
0a:2c:1b:94:b4:e1:25:84:e1:98:5f:b8:fa:00:ba:
1b:58:9b:6b:bb:18:c0:08:a3:fc:14:c1:4f:cb:d1:
6f:d1:e5:51:da:03:c2:b5:af:d9:fb:7d:7c:31:fd:
8d:83:2e:0e:02:55:e0:89:bd:a0:73:34:6d:bd:17:
d5:87:a3:03:a6:89:92:4a:c4:5c:6c:51:33:8b:f2:
96:1d:d5:21:00:96:b7:5e:cd:0a:51:60:33:84:b0:
80:4d:0b:2d:f3:92:62:68:d9:24:3d:58:6b:9b:c4:
7c:c5:70:10:31:c0:8a:77:c3:4b:64:d0:a3:7d:93:
9a:85:95:8d:31:9e:88:0e:6f:02:db:a2:ba:b0:d6:
37:f7:20:a3:4b:4b:ac:03:16:e5:5a:3c:15:82:6f:
e6:f0:38:07:74:c8:e2:68:de:b2:31:9d:b4:ac:db:
56:8b:4a:fa:f5:41:64:e3:00:25:7c:7a:69:d0:af:
dc:39:ce:f4:e5:ee:6e:9c:e6:62:82:b0:46:e7:3a:
6c:0f:13:ca:2d:48:ea:b5:0c:ad:f6:07:2a:7a:94:
47:be:27:13:3e:b5:90:e6:c9:bc:fa:00:7e:ae:06:
12:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:1D:1C:A6:0A:00:07:01:7A:4D:05:C9:ED:EF:06:A9:79:B2:53:8B
X509v3 Authority Key Identifier:
keyid:C8:58:AC:6D:85:67:2A:66:D3:D5:59:9F:92:37:16:0F:9B:1B:94:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/C858AC6D85672A66D3D5599F9237160F9B1B9433.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C858AC6D85672A66D3D5599F9237160F9B1B9433.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/3139312e3234322e37362e302f32342d3234203d3e20323633343734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.242.76.0/24
Signature Algorithm: sha256WithRSAEncryption
95:5c:92:fa:15:5b:0c:f3:ca:d3:58:1f:0b:e2:f8:2a:e1:ec:
f3:a7:49:e6:6a:16:1a:ad:27:36:6a:6b:ea:2e:9b:17:de:5b:
d8:4d:3d:19:7c:68:2b:50:5d:73:14:df:2f:bd:83:97:d6:33:
20:41:ac:ac:f6:02:bc:a6:c1:3d:86:4f:08:c6:65:4f:28:46:
03:f5:9c:7e:ab:d6:ab:33:f4:fd:83:57:5b:26:b2:23:1b:3f:
6a:1f:69:f3:44:c5:2c:56:bf:72:15:35:04:0f:ac:c4:50:19:
94:49:29:80:4c:6c:67:f6:4f:a4:2a:b5:39:2b:7d:ba:bd:e1:
0b:c0:b6:29:e6:0c:c8:4b:11:6e:9a:ac:9d:b7:74:b4:3e:60:
59:d3:d4:bf:5f:86:93:73:81:03:a3:dc:7a:ca:c6:88:b2:03:
89:de:73:58:72:3e:32:02:b8:8e:b0:04:ab:ca:dd:83:9d:df:
57:90:2e:84:90:ef:a2:3e:37:2d:12:9a:1b:97:62:ba:71:5b:
bf:49:f7:a4:46:90:49:bc:58:84:dd:26:61:51:93:e8:6b:e7:
a3:03:4b:f8:45:2d:00:04:76:bf:f2:10:bc:bf:e0:d5:0b:d6:
d1:89:d6:f4:26:b3:2d:86:3b:25:77:13:e4:28:42:91:2d:0b:
9e:f5:71:28
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBHY+9wLJ2HG2dv5A2UedMmfv/xMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg1OEFDNkQ4NTY3MkE2NkQzRDU1OTlGOTIzNzE2MEY5
QjFCOTQzMzAeFw0yMzEwMzAxMTQ5NDZaFw0yNDEwMjgxMTU0NDZaMDMxMTAvBgNV
BAMTKDc0MUQxQ0E2MEEwMDA3MDE3QTREMDVDOUVERUYwNkE5NzlCMjUzOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBpp/Or5F45jEDt5DizS0N+UD0
baw91T8ZGL1iSAosG5S04SWE4ZhfuPoAuhtYm2u7GMAIo/wUwU/L0W/R5VHaA8K1
r9n7fXwx/Y2DLg4CVeCJvaBzNG29F9WHowOmiZJKxFxsUTOL8pYd1SEAlrdezQpR
YDOEsIBNCy3zkmJo2SQ9WGubxHzFcBAxwIp3w0tk0KN9k5qFlY0xnogObwLborqw
1jf3IKNLS6wDFuVaPBWCb+bwOAd0yOJo3rIxnbSs21aLSvr1QWTjACV8emnQr9w5
zvTl7m6c5mKCsEbnOmwPE8otSOq1DK32Byp6lEe+JxM+tZDmybz6AH6uBhKzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUdB0cpgoABwF6TQXJ7e8GqXmyU4swHwYDVR0j
BBgwFoAUyFisbYVnKmbT1VmfkjcWD5sblDMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0tvdkZaYXg1VWg5VzlqNGE3akZuQWUzNGhHcm9mTjVvWjZDeEFzQWhi
ek4vMC9DODU4QUM2RDg1NjcyQTY2RDNENTU5OUY5MjM3MTYwRjlCMUI5NDMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M4NThBQzZEODU2NzJBNjZE
M0Q1NTk5RjkyMzcxNjBGOUIxQjk0MzMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdLb3ZGWmF4NVVoOVc5ajRhN2pGbkFlMzRoR3JvZk41b1o2Q3hBc0FoYnpOLzAv
MzEzOTMxMmUzMjM0MzIyZTM3MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzNDM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC/8kwwDQYJKoZIhvcNAQELBQADggEBAJVckvoV
WwzzytNYHwvi+Crh7POnSeZqFhqtJzZqa+oumxfeW9hNPRl8aCtQXXMU3y+9g5fW
MyBBrKz2ArymwT2GTwjGZU8oRgP1nH6r1qsz9P2DV1smsiMbP2ofafNExSxWv3IV
NQQPrMRQGZRJKYBMbGf2T6QqtTkrfbq94QvAtinmDMhLEW6arJ23dLQ+YFnT1L9f
hpNzgQOj3HrKxoiyA4nec1hyPjICuI6wBKvK3YOd31eQLoSQ76I+Ny0SmhuXYrpx
W79J96RGkEm8WITdJmFRk+hr56MDS/hFLQAEdr/yELy/4NUL1tGJ1vQmsy2GOyV3
E+QoQpEtC571cSg=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:50:20 2025 by rpki-client