![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fnADvJuByrnFb3VdGiV4aJG5DmvV5M3RpLeLiQTWkuo/0/34352e3136332e3136382e302f32332d3233203d3e20323638353633.roa
File: 34352e3136332e3136382e302f32332d3233203d3e20323638353633.roa (raw, json)
Hash identifier: bmLgxWj2PvoOskBPlYkOF6XNtoP4b7JezcAc5/SAVjM=
Subject key identifier: A4:C0:D9:C5:B2:C9:02:4B:E7:26:0E:BA:C0:AF:AB:3A:FD:CF:27:BE
Certificate issuer: /CN=347666AA407C3FDDD24E9F81A8D0AD40D4EB540C
Certificate serial: 2056821C662A054B57019080AC8160CC3D3FF597
Authority key identifier: 34:76:66:AA:40:7C:3F:DD:D2:4E:9F:81:A8:D0:AD:40:D4:EB:54:0C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/347666AA407C3FDDD24E9F81A8D0AD40D4EB540C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fnADvJuByrnFb3VdGiV4aJG5DmvV5M3RpLeLiQTWkuo/0/34352e3136332e3136382e302f32332d3233203d3e20323638353633.roa
Signing time: Thu 11 Jul 2024 13:15:56 +0000
ROA not before: Thu 11 Jul 2024 13:10:56 +0000
ROA not after: Thu 10 Jul 2025 13:15:56 +0000
asID: 268563
IP address blocks: 45.163.168.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:56:82:1c:66:2a:05:4b:57:01:90:80:ac:81:60:cc:3d:3f:f5:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347666AA407C3FDDD24E9F81A8D0AD40D4EB540C
Validity
Not Before: Jul 11 13:10:56 2024 GMT
Not After : Jul 10 13:15:56 2025 GMT
Subject: CN=A4C0D9C5B2C9024BE7260EBAC0AFAB3AFDCF27BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1f:59:2d:03:28:fc:d6:97:a0:36:b0:ee:e6:
bf:ca:70:07:31:7c:54:a2:40:d7:b2:8f:42:d8:41:
c0:a9:b9:ef:f9:7f:5e:2b:4e:09:ed:c6:96:7b:64:
0e:ee:45:fd:62:c4:bf:c2:c8:ce:64:2e:55:40:ab:
6b:3f:7e:7a:97:f9:7c:9d:ea:18:75:08:f8:1f:7d:
a9:62:69:3b:6b:d6:b1:be:ff:44:66:25:8d:06:0a:
ef:56:0d:4c:b9:43:e3:79:85:8c:f6:ed:3f:65:96:
24:d1:9c:5e:77:a9:04:c9:30:80:67:e9:f5:e9:83:
75:5f:bc:bc:f8:3e:62:9b:7f:d8:a3:e2:3c:ce:bd:
01:c5:30:bc:1e:d7:00:a0:2a:9f:99:a2:ae:95:b8:
7b:ac:9d:59:05:5f:2e:0a:b7:dd:3c:d7:22:ca:a7:
af:65:d1:9c:cf:33:77:ad:85:e3:27:67:b7:cb:19:
4b:52:13:fe:e5:76:02:c7:47:b1:9f:8e:92:22:df:
aa:71:2b:85:0c:4e:92:66:b1:35:5c:5c:05:00:26:
25:e4:23:c5:7e:ad:2c:5f:da:89:74:10:07:a1:47:
eb:aa:5f:5d:94:3f:ed:60:d1:8f:57:ea:d5:b0:f4:
95:41:3c:a4:ae:7d:6b:6d:40:09:da:eb:a9:0d:a6:
18:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C0:D9:C5:B2:C9:02:4B:E7:26:0E:BA:C0:AF:AB:3A:FD:CF:27:BE
X509v3 Authority Key Identifier:
keyid:34:76:66:AA:40:7C:3F:DD:D2:4E:9F:81:A8:D0:AD:40:D4:EB:54:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fnADvJuByrnFb3VdGiV4aJG5DmvV5M3RpLeLiQTWkuo/0/347666AA407C3FDDD24E9F81A8D0AD40D4EB540C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/347666AA407C3FDDD24E9F81A8D0AD40D4EB540C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fnADvJuByrnFb3VdGiV4aJG5DmvV5M3RpLeLiQTWkuo/0/34352e3136332e3136382e302f32332d3233203d3e20323638353633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.163.168.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:77:ef:cc:67:e8:dd:57:8b:1d:50:fc:05:83:49:7b:a6:bd:
89:5c:25:09:71:e7:82:c2:a9:f4:c6:a5:5a:46:4d:eb:0b:38:
33:61:59:75:99:43:17:e0:8d:d2:67:00:9c:37:50:6d:82:b3:
0a:1d:d9:c9:8c:dd:6a:7f:a9:0f:c2:30:3b:62:4e:72:2d:5b:
dd:35:fc:bc:cc:5e:b4:65:19:ef:0b:66:53:42:81:3f:2a:0f:
69:61:9d:ae:25:65:ff:08:4d:01:0b:62:80:97:d3:81:26:11:
fc:18:47:f8:0d:41:df:f6:fd:b8:e2:92:61:bf:91:92:ad:27:
f2:fd:94:8a:bd:71:3b:f7:6b:ca:6a:f2:93:06:74:86:4d:ce:
6a:36:af:bb:af:6e:fd:14:22:9f:96:6b:72:e0:83:24:4e:6a:
d5:1c:22:28:e1:ac:35:f2:10:4e:c2:ba:86:73:80:fc:0a:3b:
85:de:50:3d:f8:46:89:a2:fe:0f:1f:80:31:3e:aa:4b:0f:c7:
75:29:17:63:ec:e7:5a:5e:97:62:b3:36:d3:f9:94:32:0e:0c:
95:a7:22:2d:65:0a:1e:2c:13:42:53:3c:a0:bc:93:20:70:22:
60:1c:bb:50:d5:07:1b:ad:15:cf:a9:db:b7:40:da:be:cf:d4:
e2:08:a8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:21:53 2025 by rpki-client