![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/3230302e3131352e3130372e302f32342d3234203d3e20323730323636.roa
File: 3230302e3131352e3130372e302f32342d3234203d3e20323730323636.roa (raw, json)
Hash identifier: KGr0XvJeXG6PAnaI32kArnad8hPhCx6Nm97XmcdnVJI=
Subject key identifier: 47:08:98:E4:58:42:C7:CE:E4:FF:C1:80:6E:54:7D:AE:FE:39:4C:BE
Certificate issuer: /CN=B8470C10AC644BEF4DF266924C4E0832C8FBA8A2
Certificate serial: 3CAE45348E3921C1304DCC42EE159A0027BA24E5
Authority key identifier: B8:47:0C:10:AC:64:4B:EF:4D:F2:66:92:4C:4E:08:32:C8:FB:A8:A2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/3230302e3131352e3130372e302f32342d3234203d3e20323730323636.roa
Signing time: Wed 03 Apr 2024 13:53:24 +0000
ROA not before: Wed 03 Apr 2024 13:48:24 +0000
ROA not after: Wed 02 Apr 2025 13:53:24 +0000
asID: 270266
IP address blocks: 200.115.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:ae:45:34:8e:39:21:c1:30:4d:cc:42:ee:15:9a:00:27:ba:24:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8470C10AC644BEF4DF266924C4E0832C8FBA8A2
Validity
Not Before: Apr 3 13:48:24 2024 GMT
Not After : Apr 2 13:53:24 2025 GMT
Subject: CN=470898E45842C7CEE4FFC1806E547DAEFE394CBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2d:17:22:12:e1:cc:e6:78:49:bb:9a:31:8d:
3d:6d:45:02:ff:46:01:38:46:41:8b:18:9e:a6:e0:
b3:e5:20:be:7b:ce:ab:94:b3:32:b0:5b:1c:85:e1:
21:2a:de:f5:c9:e1:e3:d1:cd:9a:ee:83:ff:48:5d:
20:ed:7b:c8:92:8a:0a:d0:a8:5f:e1:b3:4d:26:42:
ad:be:86:85:ce:d2:a0:98:d7:9b:ee:99:96:c4:68:
ee:4b:55:7d:85:21:be:d0:a6:c0:8c:c4:39:d2:d7:
65:99:13:bd:93:81:93:d5:fb:0c:c5:05:6d:2b:c6:
83:05:1d:f9:9b:e0:50:fb:b7:69:50:1b:02:a9:87:
b4:0e:3e:67:4a:3b:61:24:bb:a7:c7:52:5d:94:79:
85:6c:5f:8e:ed:05:21:ca:57:9d:7c:7e:06:f3:e9:
12:70:b6:cc:b8:60:61:24:68:98:3e:d0:dd:5e:d9:
5f:a6:74:5b:1b:1d:9b:7b:25:d2:fe:16:9f:38:79:
d6:0b:70:95:c0:a5:b8:12:4c:0f:17:f2:89:dc:d2:
63:44:df:d7:46:ac:bb:13:d3:20:64:a3:8e:72:53:
f1:73:70:14:0c:db:1d:ea:2f:f7:d7:f5:3b:be:c3:
f2:b1:59:46:b7:ee:ac:4e:3c:c7:cd:70:03:c3:cd:
80:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:08:98:E4:58:42:C7:CE:E4:FF:C1:80:6E:54:7D:AE:FE:39:4C:BE
X509v3 Authority Key Identifier:
keyid:B8:47:0C:10:AC:64:4B:EF:4D:F2:66:92:4C:4E:08:32:C8:FB:A8:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/3230302e3131352e3130372e302f32342d3234203d3e20323730323636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.115.107.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:a9:57:c9:60:ef:e6:b3:ef:06:59:dd:f1:e1:61:74:7f:d7:
9e:95:75:1a:21:e9:af:2f:e5:35:1a:77:fb:2b:47:21:75:31:
9c:8e:a2:76:0e:43:77:2c:fd:b4:20:0f:86:52:73:35:12:24:
71:7e:49:40:5e:2a:f4:de:c8:4e:47:83:95:eb:b3:e6:8f:ba:
f0:f1:c4:94:2e:7c:a3:dc:31:1f:42:a4:15:3a:91:1c:eb:05:
63:79:35:de:fb:dd:98:63:cf:ad:ca:31:9e:30:93:01:75:c4:
fc:41:3a:dd:19:88:fb:b5:9f:66:c2:77:f3:9c:df:8f:2d:e3:
fb:d2:7c:44:a5:51:24:bb:14:4a:ed:15:58:30:b3:8b:93:20:
7d:23:ef:3c:01:b7:33:ec:02:c8:eb:a7:08:6e:6f:c3:2b:b1:
a8:62:14:bd:a8:a0:24:c8:47:53:07:f4:27:be:57:23:51:47:
44:c1:f3:a0:59:2d:05:5a:dc:30:f5:11:f0:bc:2a:41:17:1b:
b8:87:03:0d:58:82:2e:c2:61:22:c0:9e:b3:ee:bb:7a:8a:d4:
c2:ff:63:9d:f3:fb:d0:27:08:af:4d:9d:00:2c:4f:5b:1e:ef:
05:58:57:51:45:c6:35:5f:21:09:3e:d1:11:74:8a:f7:c4:a3:
e3:8c:9d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org