![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/3133382e3230342e3133322e302f32322d3232203d3e20323633383838.roa
File: 3133382e3230342e3133322e302f32322d3232203d3e20323633383838.roa (raw, json)
Hash identifier: z9idyAPjk9iic1cdahXRIT1+fDLNyPntwIWodEsfPOc=
Subject key identifier: 78:8E:C1:67:67:2F:32:D3:11:E5:C0:7D:C0:AF:AC:AE:47:B3:D8:95
Certificate issuer: /CN=D345B6970533DE54D08FAACFB67E42F987FCCE37
Certificate serial: 05AF2835ADBCEA365C17261C01B6790093E2A9BB
Authority key identifier: D3:45:B6:97:05:33:DE:54:D0:8F:AA:CF:B6:7E:42:F9:87:FC:CE:37
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D345B6970533DE54D08FAACFB67E42F987FCCE37.cer
Subject info access: rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/3133382e3230342e3133322e302f32322d3232203d3e20323633383838.roa
Signing time: Tue 06 Sep 2022 15:00:01 +0000
ROA not before: Tue 06 Sep 2022 14:55:01 +0000
ROA not after: Tue 05 Sep 2023 15:00:01 +0000
asID: 263888
IP address blocks: 138.204.132.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:af:28:35:ad:bc:ea:36:5c:17:26:1c:01:b6:79:00:93:e2:a9:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D345B6970533DE54D08FAACFB67E42F987FCCE37
Validity
Not Before: Sep 6 14:55:01 2022 GMT
Not After : Sep 5 15:00:01 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4b:fd:f4:1b:47:e8:3e:ce:be:7f:1c:48:da:
1d:ce:ab:43:1a:b1:5b:0d:c6:50:e9:1c:83:ff:44:
b7:5c:e3:6e:c5:1a:ef:f3:85:80:ad:d0:eb:4a:4c:
da:50:1b:a8:a5:9a:3c:79:54:6b:58:f9:40:98:4d:
5c:b0:8b:8c:3e:1c:f3:aa:4a:16:f1:d7:a2:6e:49:
93:72:99:6d:c8:7b:13:34:a9:8c:ef:89:72:77:aa:
de:06:11:16:c8:7b:1b:89:ef:08:f3:2f:7b:07:02:
c3:26:d8:d0:f1:3e:9e:0e:4e:d8:54:11:27:10:2c:
ea:b6:a4:00:c7:f4:9c:78:97:35:7d:f9:ee:1a:18:
16:dc:b4:00:b6:4a:61:dd:e7:02:a1:79:cd:3c:4c:
3d:bb:fc:5a:58:07:98:d0:9c:1f:ba:9a:bb:38:c6:
f2:8b:72:b5:99:78:39:db:b7:e7:1d:5d:4c:2c:bf:
66:f9:12:4c:97:a2:0c:c5:da:1f:ac:e4:e6:25:4d:
e1:88:29:70:b1:d3:58:2d:a7:ed:25:af:08:77:7a:
d2:dc:cf:56:06:b5:83:98:2b:ba:6f:f0:7c:0b:e0:
65:60:ae:3e:4f:f8:30:19:74:bb:e4:72:1a:e9:db:
a9:8e:08:51:ef:b4:d6:0a:d8:56:05:a4:30:e4:e2:
65:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8E:C1:67:67:2F:32:D3:11:E5:C0:7D:C0:AF:AC:AE:47:B3:D8:95
X509v3 Authority Key Identifier:
keyid:D3:45:B6:97:05:33:DE:54:D0:8F:AA:CF:B6:7E:42:F9:87:FC:CE:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/D345B6970533DE54D08FAACFB67E42F987FCCE37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D345B6970533DE54D08FAACFB67E42F987FCCE37.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/3133382e3230342e3133322e302f32322d3232203d3e20323633383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.132.0/22
Signature Algorithm: sha256WithRSAEncryption
21:fe:d0:13:7b:3c:60:76:4a:68:82:2a:30:3b:68:f1:9c:45:
7c:14:dc:b0:f0:c5:f5:3e:49:47:91:3a:cf:3e:45:8d:8f:21:
e0:4c:1d:d9:51:cf:b1:65:00:f5:e2:3b:7c:a4:ac:9f:55:6e:
76:7d:c8:5b:79:4f:71:ed:a1:f1:8b:17:70:1d:41:e1:3d:72:
9e:2f:91:8d:a0:8b:5d:eb:94:7d:8e:ec:71:93:10:e5:85:d8:
7c:73:86:1f:9a:6b:34:88:46:44:2d:33:1a:3c:a1:58:24:1b:
d8:7e:78:8f:48:14:6f:37:1b:12:ff:ba:0b:49:f9:73:6c:4a:
45:fe:bf:c7:9d:11:97:a8:28:aa:7a:fa:13:34:c5:fe:2d:f9:
b2:74:3d:65:c4:b8:b6:b1:ae:a0:af:6f:3a:15:23:73:04:eb:
7c:53:5d:29:4b:e3:08:47:ea:b5:d9:4e:fc:cd:9f:25:55:51:
cd:f5:94:55:f3:1a:ba:5f:1b:b7:33:61:4c:eb:6c:cc:7d:4f:
4d:9b:ba:ef:6c:a5:08:8f:e1:34:ef:94:95:5b:69:24:52:7a:
42:e1:2c:6c:03:b3:94:07:b9:96:26:d1:c6:e5:a4:f0:46:37:
69:51:a3:92:b0:1f:0a:7d:41:d3:6c:56:92:a0:c6:67:0e:4f:
cf:9b:d9:6c
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUBa8oNa286jZcFyYcAbZ5AJPiqbswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NUI2OTcwNTMzREU1NEQwOEZBQUNGQjY3RTQyRjk4
N0ZDQ0UzNzAeFw0yMjA5MDYxNDU1MDFaFw0yMzA5MDUxNTAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTQ0QkZERjQxQjQ3RTgzRUNF
QkU3RjFDNDhEQTFEQ0VBQjQzMUFCMTVCMERDNjUwRTkxQzgzRkY0NEI3NUNFMzZF
QzUxQUVGRjM4NTgwQUREMEVCNEE0Q0RBNTAxQkE4QTU5QTNDNzk1NDZCNThGOTQw
OTg0RDVDQjA4QjhDM0UxQ0YzQUE0QTE2RjFEN0EyNkU0OTkzNzI5OTZEQzg3QjEz
MzRBOThDRUY4OTcyNzdBQURFMDYxMTE2Qzg3QjFCODlFRjA4RjMyRjdCMDcwMkMz
MjZEOEQwRjEzRTlFMEU0RUQ4NTQxMTI3MTAyQ0VBQjZBNDAwQzdGNDlDNzg5NzM1
N0RGOUVFMUExODE2RENCNDAwQjY0QTYxRERFNzAyQTE3OUNEM0M0QzNEQkJGQzVB
NTgwNzk4RDA5QzFGQkE5QUJCMzhDNkYyOEI3MkI1OTk3ODM5REJCN0U3MUQ1RDRD
MkNCRjY2RjkxMjRDOTdBMjBDQzVEQTFGQUNFNEU2MjU0REUxODgyOTcwQjFEMzU4
MkRBN0VEMjVBRjA4Nzc3QUQyRENDRjU2MDZCNTgzOTgyQkJBNkZGMDdDMEJFMDY1
NjBBRTNFNEZGODMwMTk3NEJCRTQ3MjFBRTlEQkE5OEUwODUxRUZCNEQ2MEFEODU2
MDVBNDMwRTRFMjY1REQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEApEv99BtH6D7Ovn8cSNodzqtDGrFbDcZQ6RyD/0S3XONuxRrv84WA
rdDrSkzaUBuopZo8eVRrWPlAmE1csIuMPhzzqkoW8deibkmTcpltyHsTNKmM74ly
d6reBhEWyHsbie8I8y97BwLDJtjQ8T6eDk7YVBEnECzqtqQAx/SceJc1ffnuGhgW
3LQAtkph3ecCoXnNPEw9u/xaWAeY0Jwfupq7OMbyi3K1mXg527fnHV1MLL9m+RJM
l6IMxdofrOTmJU3hiClwsdNYLaftJa8Id3rS3M9WBrWDmCu6b/B8C+BlYK4+T/gw
GXS75HIa6dupjghR77TWCthWBaQw5OJl3QIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FHiOwWdnLzLTEeXAfcCvrK5Hs9iVMB8GA1UdIwQYMBaAFNNFtpcFM95U0I+qz7Z+
QvmH/M43MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzgxaVZxWjluOVJTSlNZ
YXp3M3JxeXljVWJ4SjFWd0dyZmFic2Uya3dWMmdULzAvRDM0NUI2OTcwNTMzREU1
NEQwOEZBQUNGQjY3RTQyRjk4N0ZDQ0UzNy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9EMzQ1QjY5NzA1MzNERTU0RDA4RkFBQ0ZCNjdFNDJGOTg3RkND
RTM3LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84MWlWcVo5bjlSU0pTWWF6dzNy
cXl5Y1VieEoxVndHcmZhYnNlMmt3VjJnVC8wLzMxMzMzODJlMzIzMDM0MmUzMTMz
MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzMzODM4Mzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAKKzIQwDQYJKoZIhvcNAQELBQADggEBACH+0BN7PGB2SmiCKjA7aPGcRXwU3LDw
xfU+SUeROs8+RY2PIeBMHdlRz7FlAPXiO3ykrJ9VbnZ9yFt5T3HtofGLF3AdQeE9
cp4vkY2gi13rlH2O7HGTEOWF2Hxzhh+aazSIRkQtMxo8oVgkG9h+eI9IFG83GxL/
ugtJ+XNsSkX+v8edEZeoKKp6+hM0xf4t+bJ0PWXEuLaxrqCvbzoVI3ME63xTXSlL
4whH6rXZTvzNnyVVUc31lFXzGrpfG7czYUzrbMx9T02buu9spQiP4TTvlJVbaSRS
ekLhLGwDs5QHuZYm0cblpPBGN2lRo5KwHwp9QdNsVpKgxmcOT8+b2Ww=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:34:44 2025 by rpki-client