![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7mpbNXcTpQfCjxtxwJ3H29Q4f1wdX9ZnnXmV17h6ZR8h/0/3136382e3232382e3132382e302f32322d3232203d3e203532383539.roa
File: 3136382e3232382e3132382e302f32322d3232203d3e203532383539.roa (raw, json)
Hash identifier: 7rkES2GzkO14eaa+FTB1ub08z0k0sIuxvCPenPTejLw=
Subject key identifier: EA:0F:35:C3:88:5B:66:CD:7F:31:A4:BE:B2:2C:82:28:4A:59:E5:E2
Certificate issuer: /CN=3B44D016A0AB3D32217E993ABE8B95525E3FE432
Certificate serial: 4AE4C0DCA075650A881AFD5423134634D1B57804
Authority key identifier: 3B:44:D0:16:A0:AB:3D:32:21:7E:99:3A:BE:8B:95:52:5E:3F:E4:32
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B44D016A0AB3D32217E993ABE8B95525E3FE432.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7mpbNXcTpQfCjxtxwJ3H29Q4f1wdX9ZnnXmV17h6ZR8h/0/3136382e3232382e3132382e302f32322d3232203d3e203532383539.roa
Signing time: Tue 13 Sep 2022 09:05:26 +0000
ROA not before: Tue 13 Sep 2022 09:00:26 +0000
ROA not after: Tue 12 Sep 2023 09:05:26 +0000
asID: 52859
IP address blocks: 168.228.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:e4:c0:dc:a0:75:65:0a:88:1a:fd:54:23:13:46:34:d1:b5:78:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B44D016A0AB3D32217E993ABE8B95525E3FE432
Validity
Not Before: Sep 13 09:00:26 2022 GMT
Not After : Sep 12 09:05:26 2023 GMT
Subject: CN=EA0F35C3885B66CD7F31A4BEB22C82284A59E5E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6b:e9:cf:f9:8d:e8:a8:f8:59:45:47:59:80:
56:89:f6:77:3d:05:2d:7c:30:9a:e8:00:ee:22:57:
93:17:62:ed:3b:44:eb:b1:29:8e:25:5d:bd:f3:79:
68:68:c9:e8:74:72:8c:20:d0:0b:d4:32:f2:59:9c:
f7:f6:7e:e0:96:d3:b9:81:73:f8:d4:5d:11:96:59:
79:ca:0c:f4:58:da:e5:9c:fa:02:80:a1:dc:9d:78:
f5:47:44:3b:d9:89:a4:a6:36:9c:88:38:5c:fc:8f:
6c:f1:38:94:c2:43:59:d2:b5:7d:81:27:59:17:2f:
23:f9:9d:2a:0c:37:9f:a6:d6:8b:ae:ce:61:51:dc:
38:b0:61:16:76:b9:24:93:ec:2c:a5:a1:57:7d:48:
24:c9:d9:7d:3e:9a:04:ba:73:9f:89:81:28:aa:be:
64:39:f1:7a:12:8c:38:b3:d5:5e:36:3a:91:8c:72:
25:cf:73:fe:cd:b9:a3:0f:90:fe:10:c2:ab:f0:bd:
29:79:2c:99:fd:2e:c6:58:8c:00:87:57:4a:62:8b:
39:b3:5b:10:9f:40:59:1d:ea:52:7f:02:ec:a7:e2:
ad:9c:aa:fb:d8:62:74:2f:8a:4c:9e:73:9b:b7:12:
74:b1:5e:a4:9c:b4:4f:99:08:4b:a9:75:0c:bf:a9:
d8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0F:35:C3:88:5B:66:CD:7F:31:A4:BE:B2:2C:82:28:4A:59:E5:E2
X509v3 Authority Key Identifier:
keyid:3B:44:D0:16:A0:AB:3D:32:21:7E:99:3A:BE:8B:95:52:5E:3F:E4:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7mpbNXcTpQfCjxtxwJ3H29Q4f1wdX9ZnnXmV17h6ZR8h/0/3B44D016A0AB3D32217E993ABE8B95525E3FE432.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B44D016A0AB3D32217E993ABE8B95525E3FE432.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7mpbNXcTpQfCjxtxwJ3H29Q4f1wdX9ZnnXmV17h6ZR8h/0/3136382e3232382e3132382e302f32322d3232203d3e203532383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.128.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:ec:be:2a:1b:47:cc:ab:48:22:51:7e:02:b0:e4:2c:6a:c3:
29:1f:c3:b3:4c:15:f2:3d:75:8b:cc:b0:02:b1:d8:51:f9:0c:
28:44:22:03:50:f9:a1:26:80:3f:ad:51:b9:ce:81:47:3e:92:
17:68:32:74:dc:b0:fc:ca:ed:0d:62:35:b8:e6:13:d2:d8:3b:
20:f3:93:cb:51:f8:ca:59:f9:c6:e5:13:4e:cc:cb:01:25:da:
a4:9a:6e:43:f4:8a:b4:c8:51:ca:d7:a5:87:a8:fe:55:75:e9:
a4:73:b6:59:62:10:a3:d4:ed:25:59:e1:7c:2d:74:98:5d:7c:
54:c0:79:bd:ea:be:a6:83:3f:95:e2:8f:1a:ba:ca:ec:21:28:
2c:f1:f4:da:7f:d0:91:df:3e:7d:aa:18:e6:20:51:4f:d0:f9:
13:14:7c:dc:5b:e6:c0:d6:1b:91:e3:c2:90:08:4f:62:da:00:
e4:04:fd:32:e8:f5:76:c9:27:79:8b:fd:45:3a:03:62:10:47:
dc:f9:3b:65:64:f0:bf:f6:5b:1f:52:1b:40:d4:b8:ac:20:e0:
e5:2e:70:87:c9:bc:1c:f6:3a:ae:ee:9f:05:61:0f:60:ae:53:
50:79:73:04:6a:3e:4f:d3:94:f1:dd:3c:f0:a0:64:8a:fe:49:
cd:06:61:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:15 2025 by rpki-client