![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1/3133382e3131372e3132342e302f32322d3232203d3e20323731373234.roa
File: 3133382e3131372e3132342e302f32322d3232203d3e20323731373234.roa (raw, json)
Hash identifier: jHOWwUrMu2KOMH/YVT3GuHcp53pI3Q/lKuiMxnnmFQM=
Subject key identifier: 13:04:3C:70:00:6E:3A:D2:48:60:AE:F4:4E:A0:76:21:74:C2:A0:4F
Certificate issuer: /CN=41837C1CF0891C60BB3718E09EE5586C0EBC3597
Certificate serial: 21B4647BE8883A409EC1160439C05AB0733FD645
Authority key identifier: 41:83:7C:1C:F0:89:1C:60:BB:37:18:E0:9E:E5:58:6C:0E:BC:35:97
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41837C1CF0891C60BB3718E09EE5586C0EBC3597.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1/3133382e3131372e3132342e302f32322d3232203d3e20323731373234.roa
Signing time: Mon 23 Jan 2023 21:42:18 +0000
ROA not before: Mon 23 Jan 2023 21:37:18 +0000
ROA not after: Mon 22 Jan 2024 21:42:18 +0000
asID: 271724
IP address blocks: 138.117.124.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:b4:64:7b:e8:88:3a:40:9e:c1:16:04:39:c0:5a:b0:73:3f:d6:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41837C1CF0891C60BB3718E09EE5586C0EBC3597
Validity
Not Before: Jan 23 21:37:18 2023 GMT
Not After : Jan 22 21:42:18 2024 GMT
Subject: CN=13043C70006E3AD24860AEF44EA0762174C2A04F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:19:07:7d:08:e1:49:27:d9:5a:7d:3c:5a:84:
e4:72:d0:67:13:b9:67:35:e4:14:84:4d:37:f6:cf:
08:c8:97:f1:f8:cc:97:da:d0:19:1a:39:30:aa:ef:
6f:e1:48:28:29:81:92:0f:05:8f:8a:0a:82:c3:c8:
be:b4:bf:6e:00:c8:cb:10:31:35:00:a6:c2:78:41:
5f:24:e3:54:fa:95:b3:14:e5:25:c3:f1:cd:ec:a0:
51:d7:13:e2:23:2a:17:ee:dc:4f:a3:2d:0f:2c:56:
33:ae:39:14:b1:87:b5:7e:f6:90:c1:f2:f5:f4:60:
02:5c:ba:83:56:88:ea:b5:4e:2b:4a:77:e2:e6:10:
76:2f:f1:0f:63:86:63:31:aa:e5:29:28:80:3f:d5:
73:4c:52:8a:c4:90:94:b9:d5:57:89:e6:ec:ba:3f:
aa:e9:0a:ac:20:da:df:86:57:4b:26:51:79:70:16:
38:dd:aa:24:cc:c5:18:19:0d:58:b7:2e:63:41:cd:
8f:b7:d6:08:22:7a:58:35:69:1b:ce:a7:93:86:4c:
2f:05:7a:7a:4b:6d:f4:17:ca:bd:bc:c8:3d:d8:9c:
91:f2:66:a0:f2:1e:dd:c2:a5:46:47:04:69:d1:ef:
80:be:a0:42:cc:14:81:54:ce:5c:c5:fd:0a:2b:b1:
d8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:04:3C:70:00:6E:3A:D2:48:60:AE:F4:4E:A0:76:21:74:C2:A0:4F
X509v3 Authority Key Identifier:
keyid:41:83:7C:1C:F0:89:1C:60:BB:37:18:E0:9E:E5:58:6C:0E:BC:35:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1/41837C1CF0891C60BB3718E09EE5586C0EBC3597.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41837C1CF0891C60BB3718E09EE5586C0EBC3597.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1/3133382e3131372e3132342e302f32322d3232203d3e20323731373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.124.0/22
Signature Algorithm: sha256WithRSAEncryption
63:73:90:82:90:5d:b0:9a:fa:15:d7:5a:34:08:a8:e6:46:b2:
97:aa:d5:30:24:b1:e6:e6:4d:64:49:74:a0:f2:02:ac:2e:02:
3f:ca:e7:3c:f4:9b:ae:99:60:85:97:3d:23:ac:da:7a:93:20:
0d:00:81:e2:a5:12:86:fb:f9:da:b6:68:d2:3f:4c:bd:ef:6b:
34:9d:fb:58:75:53:62:e9:00:c2:05:3c:4d:95:e3:a5:d3:7d:
1a:5f:2a:09:a7:8a:e2:88:73:8d:cc:2a:b1:a2:3f:2c:45:c0:
26:62:e5:7f:4f:db:03:c4:ba:96:1b:8e:f8:16:2e:f8:a1:6d:
79:06:f3:11:fe:89:74:5e:aa:21:02:f8:e6:c6:47:9e:fa:b5:
ca:7e:98:da:14:b0:a1:99:77:b4:c5:5b:cf:ef:2f:33:67:3e:
13:f7:9b:4b:b0:09:eb:78:cd:b0:d3:b5:af:5f:c5:cb:00:79:
33:4e:cb:9e:94:4a:5e:ab:09:cf:ce:70:f5:8a:b6:dc:67:b9:
85:bb:b4:15:ff:a3:04:ca:e3:f0:cb:d8:46:22:ce:2b:43:5d:
bc:70:34:74:b3:0f:36:46:19:0c:44:11:82:8f:73:96:02:62:
a1:28:92:3f:c4:1b:d7:28:f5:6c:b3:08:23:4a:08:e4:59:46:
a1:1f:70:ab
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUIbRke+iIOkCewRYEOcBasHM/1kUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE4MzdDMUNGMDg5MUM2MEJCMzcxOEUwOUVFNTU4NkMw
RUJDMzU5NzAeFw0yMzAxMjMyMTM3MThaFw0yNDAxMjIyMTQyMThaMDMxMTAvBgNV
BAMTKDEzMDQzQzcwMDA2RTNBRDI0ODYwQUVGNDRFQTA3NjIxNzRDMkEwNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVGQd9COFJJ9lafTxahORy0GcT
uWc15BSETTf2zwjIl/H4zJfa0BkaOTCq72/hSCgpgZIPBY+KCoLDyL60v24AyMsQ
MTUApsJ4QV8k41T6lbMU5SXD8c3soFHXE+IjKhfu3E+jLQ8sVjOuORSxh7V+9pDB
8vX0YAJcuoNWiOq1TitKd+LmEHYv8Q9jhmMxquUpKIA/1XNMUorEkJS51VeJ5uy6
P6rpCqwg2t+GV0smUXlwFjjdqiTMxRgZDVi3LmNBzY+31ggielg1aRvOp5OGTC8F
enpLbfQXyr28yD3YnJHyZqDyHt3CpUZHBGnR74C+oELMFIFUzlzF/QorsdgTAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUEwQ8cABuOtJIYK70TqB2IXTCoE8wHwYDVR0j
BBgwFoAUQYN8HPCJHGC7NxjgnuVYbA68NZcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtVbUs3SlQ2b1RkRW5aRmhISzE4THBucEtZdUhNOHExR2hiVHJNSmI4
cGQvMS80MTgzN0MxQ0YwODkxQzYwQkIzNzE4RTA5RUU1NTg2QzBFQkMzNTk3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQxODM3QzFDRjA4OTFDNjBC
QjM3MThFMDlFRTU1ODZDMEVCQzM1OTcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrVW1LN0pUNm9UZEVuWkZoSEsxOExwbnBLWXVITThxMUdoYlRyTUpiOHBkLzEv
MzEzMzM4MmUzMTMxMzcyZTMxMzIzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzczMTM3MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAop1fDANBgkqhkiG9w0BAQsFAAOCAQEAY3OQ
gpBdsJr6FddaNAio5kayl6rVMCSx5uZNZEl0oPICrC4CP8rnPPSbrplghZc9I6za
epMgDQCB4qUShvv52rZo0j9Mve9rNJ37WHVTYukAwgU8TZXjpdN9Gl8qCaeK4ohz
jcwqsaI/LEXAJmLlf0/bA8S6lhuO+BYu+KFteQbzEf6JdF6qIQL45sZHnvq1yn6Y
2hSwoZl3tMVbz+8vM2c+E/ebS7AJ63jNsNO1r1/FywB5M07LnpRKXqsJz85w9Yq2
3Ge5hbu0Ff+jBMrj8MvYRiLOK0NdvHA0dLMPNkYZDEQRgo9zlgJioSiSP8Qb1yj1
bLMII0oI5FlGoR9wqw==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:41:08 2025 by rpki-client