![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3136372e3234392e3137362e302f32322d3234203d3e203238323837.roa
File: 3136372e3234392e3137362e302f32322d3234203d3e203238323837.roa (raw, json)
Hash identifier: oC6zLXk1a5br06e6KPClMlQgp5HjO7sSayMQVfVT1cU=
Subject key identifier: FF:79:E4:87:CD:39:92:E4:66:C3:C6:50:81:16:5C:D7:1E:76:DB:86
Certificate issuer: /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial: 7F09667F2516991EA90037AB72545CA5F1B8ECA2
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3136372e3234392e3137362e302f32322d3234203d3e203238323837.roa
Signing time: Thu 31 Oct 2024 17:24:32 +0000
ROA not before: Thu 31 Oct 2024 17:19:32 +0000
ROA not after: Thu 30 Oct 2025 17:24:32 +0000
asID: 28287
IP address blocks: 167.249.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:09:66:7f:25:16:99:1e:a9:00:37:ab:72:54:5c:a5:f1:b8:ec:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
Validity
Not Before: Oct 31 17:19:32 2024 GMT
Not After : Oct 30 17:24:32 2025 GMT
Subject: CN=FF79E487CD3992E466C3C65081165CD71E76DB86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d8:c9:9b:e3:7f:49:f0:48:1f:12:da:5b:1e:
75:4d:3d:f5:62:45:35:2f:c5:d6:ad:d9:2e:de:56:
91:91:6d:3a:5d:9b:ca:6b:19:ff:fa:46:fc:5a:9e:
f6:57:b1:45:cd:09:1a:df:fc:75:7b:2e:81:ef:09:
98:8c:33:53:39:22:6e:e6:65:fd:b0:8e:25:29:c2:
aa:4e:05:f2:3f:a3:53:23:42:b9:9d:50:85:43:17:
c5:1b:21:cf:94:1c:ea:38:42:99:db:c1:e3:66:13:
24:65:35:3a:be:f0:2a:6d:fe:70:06:10:3b:56:45:
72:5d:8d:23:37:6f:91:dc:3d:d9:8f:84:80:43:78:
b0:3a:95:8a:0f:cf:4d:ae:2a:7f:e7:ef:4f:75:a4:
cf:64:80:c5:e0:d8:22:c7:04:a6:cf:cd:18:2d:5c:
2d:7c:44:ef:e0:5f:be:b7:35:3d:6e:fb:10:d5:37:
fc:eb:6e:e7:83:fb:0b:44:a9:82:07:78:29:13:28:
11:18:b1:d6:67:cc:3e:3b:0d:43:0a:0f:f5:b6:56:
26:32:12:13:78:f0:54:2a:c3:66:bd:37:4e:51:0b:
85:6a:21:c2:3c:d9:4c:44:6e:d6:bd:c3:a8:f0:23:
9f:89:d8:15:44:18:1d:84:89:a1:51:1d:dd:c8:fb:
0d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:79:E4:87:CD:39:92:E4:66:C3:C6:50:81:16:5C:D7:1E:76:DB:86
X509v3 Authority Key Identifier:
keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3136372e3234392e3137362e302f32322d3234203d3e203238323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.249.176.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:19:e9:b7:a7:60:ba:d4:85:0d:39:18:b4:80:21:b7:99:c4:
00:33:0c:cc:78:0b:33:fd:42:82:54:1b:53:e8:72:ce:30:7e:
69:bf:3f:9e:fc:42:15:f8:0e:f5:e4:31:94:62:bf:9c:73:58:
5d:58:1a:19:1c:e2:2c:a4:7b:f6:bc:7e:56:65:2a:df:72:73:
53:7b:b5:0c:44:4b:18:e5:01:09:42:eb:de:d5:e2:81:aa:92:
58:f7:09:90:d5:d1:9a:79:95:fc:fc:f7:0f:e2:40:1a:5b:8a:
f3:76:49:d9:ae:a0:84:c0:59:12:77:18:d8:17:3a:48:01:ef:
fc:87:2e:06:29:5d:a6:37:df:2a:aa:11:2e:85:8c:e4:1a:78:
d5:18:a4:3f:cd:aa:1a:05:0b:ad:24:b7:28:af:59:ae:78:61:
8d:6e:9c:55:95:b7:1e:54:e4:63:6e:b6:f6:6e:e5:6f:d6:f8:
32:ed:6a:58:17:ba:45:d9:19:c6:33:f1:46:45:87:87:41:ba:
c4:a4:b9:46:17:29:d2:47:ac:15:db:a0:8e:a4:b4:63:35:52:
75:5f:4c:cf:e8:30:f6:45:8f:bd:a7:08:d0:0d:87:22:4b:b8:
22:7e:51:4e:85:e5:51:d6:1b:6f:81:8c:3e:84:f4:20:f8:67:
9b:11:8d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:13 2025 by rpki-client