![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/0/3136382e3230352e3133302e302f32332d3233203d3e20323635333635.roa
File: 3136382e3230352e3133302e302f32332d3233203d3e20323635333635.roa (raw, json)
Hash identifier: 4Me/CWOeDz+8WuJwnbnoapnW6ivbpDSClwlFz9Lv9Ws=
Subject key identifier: 31:A3:5E:CF:90:95:21:C1:4A:B8:69:49:F0:A5:04:72:4D:F2:9E:1C
Certificate issuer: /CN=4727970500C3714E7E9C8B4C19EAB96E9507EBC9
Certificate serial: 3B76FB0B2FC7DF54090ABFBD33A44905E1A8BD4B
Authority key identifier: 47:27:97:05:00:C3:71:4E:7E:9C:8B:4C:19:EA:B9:6E:95:07:EB:C9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4727970500C3714E7E9C8B4C19EAB96E9507EBC9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/0/3136382e3230352e3133302e302f32332d3233203d3e20323635333635.roa
Signing time: Sun 14 Jan 2024 12:00:00 +0000
ROA not before: Sun 14 Jan 2024 11:55:00 +0000
ROA not after: Sun 12 Jan 2025 12:00:00 +0000
asID: 265365
IP address blocks: 168.205.130.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:76:fb:0b:2f:c7:df:54:09:0a:bf:bd:33:a4:49:05:e1:a8:bd:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4727970500C3714E7E9C8B4C19EAB96E9507EBC9
Validity
Not Before: Jan 14 11:55:00 2024 GMT
Not After : Jan 12 12:00:00 2025 GMT
Subject: CN=31A35ECF909521C14AB86949F0A504724DF29E1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6c:ab:b5:b6:7b:a1:17:ed:d7:d1:d6:29:b4:
32:17:86:e2:f3:b2:49:a4:a0:3c:5e:0c:ba:c1:e1:
95:9e:1e:b4:f4:ce:92:ec:b0:9f:4b:0d:0a:df:e5:
46:52:ef:37:93:19:b3:3c:94:44:33:71:5a:80:b8:
59:36:c1:22:30:d4:fc:b2:f7:4a:77:14:1d:32:45:
bc:dd:93:f9:2f:3c:57:60:24:b7:0a:ac:ac:5a:dc:
3a:7d:b2:ec:37:c1:46:2a:3e:3c:0c:ab:76:63:6b:
93:87:4b:33:ed:59:e6:2e:bc:65:05:eb:c5:a4:b7:
d2:1a:36:76:18:a7:2d:58:cf:37:9c:b4:5d:ce:9a:
62:62:49:12:a0:92:ed:2d:7a:07:d2:50:37:e5:80:
5f:4e:68:dd:43:90:1d:e7:8e:a9:c0:ca:4b:b6:65:
81:12:85:8d:72:f8:29:e8:68:93:e9:da:7b:bc:22:
9e:07:e7:cf:1c:72:ce:2c:bf:68:a9:40:55:28:de:
99:eb:0b:91:94:ec:7a:b1:8d:94:da:cc:08:d7:14:
96:2c:48:f2:9b:bf:04:84:af:91:d8:02:8a:f1:b9:
44:9d:52:dc:d4:bb:d2:e6:37:71:8d:55:c7:3a:39:
b0:a3:d7:eb:4a:b8:a1:ee:16:13:eb:b3:39:a4:9a:
04:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A3:5E:CF:90:95:21:C1:4A:B8:69:49:F0:A5:04:72:4D:F2:9E:1C
X509v3 Authority Key Identifier:
keyid:47:27:97:05:00:C3:71:4E:7E:9C:8B:4C:19:EA:B9:6E:95:07:EB:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/0/4727970500C3714E7E9C8B4C19EAB96E9507EBC9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4727970500C3714E7E9C8B4C19EAB96E9507EBC9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/0/3136382e3230352e3133302e302f32332d3233203d3e20323635333635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.205.130.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:84:4c:0b:99:c9:42:85:b7:9e:1c:e5:a6:a6:ac:8e:92:6b:
10:c0:f7:eb:60:d9:04:b3:f2:c1:4c:00:56:43:f0:61:12:c7:
82:83:64:b1:be:32:89:7a:fe:92:67:5a:9f:24:b6:d8:f0:70:
d0:84:39:45:3b:30:3a:bf:05:49:3c:2f:28:13:31:b6:9d:be:
48:60:ad:48:65:f2:5f:bc:19:bc:9d:50:f5:e5:3a:72:54:88:
c0:41:f1:7a:e4:de:fb:6e:69:fc:c0:02:b6:b7:94:11:ec:2e:
8f:4a:b2:fc:46:43:cd:46:c2:fc:56:6e:4f:d1:9b:e1:dd:9b:
b3:c8:8a:b4:d3:f5:c7:4e:55:31:60:1f:4e:28:07:5e:4f:16:
3f:fa:b4:aa:45:09:1e:f2:47:7e:b7:89:65:3c:22:21:55:70:
a8:3b:88:0e:2e:8e:3c:3f:d8:29:fd:d0:22:5b:8c:78:e2:5e:
9e:05:eb:ef:73:66:6c:6e:ad:56:9c:37:34:0f:ff:e3:b3:6f:
b6:dc:65:9b:55:8e:fa:08:8f:14:25:dc:a9:b4:34:de:6c:a9:
04:45:be:0a:b7:ac:db:b4:73:bc:eb:6f:a1:61:c7:22:a9:6e:
71:0d:e5:ef:cd:ea:e0:37:04:93:da:1d:4e:5e:e5:a5:cb:20:
67:61:d5:e8
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUO3b7Cy/H31QJCr+9M6RJBeGovUswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDcyNzk3MDUwMEMzNzE0RTdFOUM4QjRDMTlFQUI5NkU5
NTA3RUJDOTAeFw0yNDAxMTQxMTU1MDBaFw0yNTAxMTIxMjAwMDBaMDMxMTAvBgNV
BAMTKDMxQTM1RUNGOTA5NTIxQzE0QUI4Njk0OUYwQTUwNDcyNERGMjlFMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzbKu1tnuhF+3X0dYptDIXhuLz
skmkoDxeDLrB4ZWeHrT0zpLssJ9LDQrf5UZS7zeTGbM8lEQzcVqAuFk2wSIw1Pyy
90p3FB0yRbzdk/kvPFdgJLcKrKxa3Dp9suw3wUYqPjwMq3Zja5OHSzPtWeYuvGUF
68Wkt9IaNnYYpy1YzzectF3OmmJiSRKgku0tegfSUDflgF9OaN1DkB3njqnAyku2
ZYEShY1y+CnoaJPp2nu8Ip4H588ccs4sv2ipQFUo3pnrC5GU7HqxjZTazAjXFJYs
SPKbvwSEr5HYAorxuUSdUtzUu9LmN3GNVcc6ObCj1+tKuKHuFhPrszmkmgRBAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUMaNez5CVIcFKuGlJ8KUEck3ynhwwHwYDVR0j
BBgwFoAURyeXBQDDcU5+nItMGeq5bpUH68kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWR0Tk5nNmJvVkw1cGtYR2gzTXM5S285TERQUDZzQUxDUUZWYWlhem42
a2IvMC80NzI3OTcwNTAwQzM3MTRFN0U5QzhCNEMxOUVBQjk2RTk1MDdFQkM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ3Mjc5NzA1MDBDMzcxNEU3
RTlDOEI0QzE5RUFCOTZFOTUwN0VCQzkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlkdE5OZzZib1ZMNXBrWEdoM01zOUtvOUxEUFA2c0FMQ1FGVmFpYXpuNmtiLzAv
MzEzNjM4MmUzMjMwMzUyZTMxMzMzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNTMzMzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAajNgjANBgkqhkiG9w0BAQsFAAOCAQEAX4RM
C5nJQoW3nhzlpqasjpJrEMD362DZBLPywUwAVkPwYRLHgoNksb4yiXr+kmdanyS2
2PBw0IQ5RTswOr8FSTwvKBMxtp2+SGCtSGXyX7wZvJ1Q9eU6clSIwEHxeuTe+25p
/MACtreUEewuj0qy/EZDzUbC/FZuT9Gb4d2bs8iKtNP1x05VMWAfTigHXk8WP/q0
qkUJHvJHfreJZTwiIVVwqDuIDi6OPD/YKf3QIluMeOJengXr73NmbG6tVpw3NA//
47Nvttxlm1WO+giPFCXcqbQ03mypBEW+Cres27RzvOtvoWHHIqlucQ3l783q4DcE
k9odTl7lpcsgZ2HV6A==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:23 2025 by rpki-client