![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/3139312e3234332e3230302e302f32312d3231203d3e20323633353132.roa
File: 3139312e3234332e3230302e302f32312d3231203d3e20323633353132.roa (raw, json)
Hash identifier: j+YTO2SNoJicIJlcTUI3761ywP60WNERNZ8TLJ+vOY4=
Subject key identifier: 14:78:09:E7:B9:A5:8A:33:0A:82:E5:5D:45:E6:FF:A3:75:63:A7:7F
Certificate issuer: /CN=8A5F6680E29DC886B52ADBE393C0313E3C310D32
Certificate serial: 4FFEFB19769B124830AAD8E7BBE261AFD2943472
Authority key identifier: 8A:5F:66:80:E2:9D:C8:86:B5:2A:DB:E3:93:C0:31:3E:3C:31:0D:32
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/3139312e3234332e3230302e302f32312d3231203d3e20323633353132.roa
Signing time: Thu 04 Jan 2024 22:00:00 +0000
ROA not before: Thu 04 Jan 2024 21:55:00 +0000
ROA not after: Thu 02 Jan 2025 22:00:00 +0000
asID: 263512
IP address blocks: 191.243.200.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:fe:fb:19:76:9b:12:48:30:aa:d8:e7:bb:e2:61:af:d2:94:34:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A5F6680E29DC886B52ADBE393C0313E3C310D32
Validity
Not Before: Jan 4 21:55:00 2024 GMT
Not After : Jan 2 22:00:00 2025 GMT
Subject: CN=147809E7B9A58A330A82E55D45E6FFA37563A77F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:82:c1:ae:c4:fa:8c:be:f9:61:b7:84:b7:a9:
a4:d9:ad:a0:8f:43:21:12:0f:24:85:21:20:30:85:
17:46:dd:85:37:c6:f2:1c:14:b2:5c:46:f8:6e:3a:
8d:7f:18:53:dd:1b:56:3f:e6:c8:0e:44:24:96:8f:
20:84:e6:0d:d7:39:1d:43:65:05:4c:c5:e4:31:3d:
1f:34:6e:15:79:f3:f2:4d:dd:fd:3b:b6:77:6e:5f:
16:9f:13:53:d2:07:91:e6:a6:c1:15:48:ee:53:22:
ff:a9:08:d9:7a:48:d5:7f:6b:8e:f3:60:18:0d:d4:
19:2b:e4:07:0b:2d:a9:44:1e:2e:cb:68:b9:99:9c:
18:78:9e:01:2d:cd:4d:97:d1:6d:de:cf:d6:2f:b9:
f8:37:32:56:61:26:68:4f:9c:7b:88:67:2a:b8:8b:
05:4d:66:bd:1e:d6:b0:74:39:ee:55:f5:1d:86:22:
47:12:c8:ed:2a:a0:90:64:fb:f5:d4:aa:d0:be:1c:
4c:58:6b:52:92:2c:86:5f:f4:84:1b:89:d7:29:68:
7d:e4:5b:25:f3:f8:37:41:40:37:eb:ab:ac:be:e1:
bf:a2:cb:23:4a:a8:c6:99:f2:cc:e4:db:db:51:8b:
ce:d3:bb:3a:24:3a:2a:e6:1f:87:2f:8d:57:8e:df:
cd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:78:09:E7:B9:A5:8A:33:0A:82:E5:5D:45:E6:FF:A3:75:63:A7:7F
X509v3 Authority Key Identifier:
keyid:8A:5F:66:80:E2:9D:C8:86:B5:2A:DB:E3:93:C0:31:3E:3C:31:0D:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/3139312e3234332e3230302e302f32312d3231203d3e20323633353132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.243.200.0/21
Signature Algorithm: sha256WithRSAEncryption
58:2b:09:92:6a:04:60:d4:c4:4c:b3:e8:2f:77:33:d4:13:57:
8e:b5:d8:1f:64:19:22:06:c9:2b:fa:ab:3a:37:4b:08:ba:91:
3f:e9:f9:18:49:5e:e1:8b:c7:48:cb:7f:bf:84:21:b8:60:d2:
2a:47:97:40:31:4d:f2:2b:4c:33:38:02:5b:1c:b3:a4:41:dc:
be:31:d8:13:75:f7:50:31:fc:ec:22:00:96:c0:4c:05:44:24:
89:a6:86:9e:d7:a1:e0:71:14:54:81:c8:23:6f:7d:6e:e6:6e:
36:aa:dd:96:f4:d9:cc:22:3d:cf:e7:3a:dc:d0:60:7b:0c:93:
34:44:3b:4b:1a:84:4d:d2:ca:b7:18:b4:91:95:8b:4e:fb:76:
dd:4a:9d:44:26:fe:60:17:1b:bb:f7:f0:c0:4f:10:8f:0d:4f:
ac:69:b1:7c:d3:55:b2:c4:b9:d7:56:b0:e0:1e:c5:b3:76:44:
36:fc:2b:af:50:aa:9a:76:a0:ed:9d:fe:47:94:af:c0:ff:7d:
67:40:48:ab:45:f8:38:3c:fa:bb:5a:8d:0d:1e:b0:5b:39:1c:
11:0e:f3:f8:bd:a7:4e:c6:31:e0:be:ab:eb:05:cc:19:a6:06:
e0:ae:a1:d2:50:5c:46:1f:0e:28:aa:9c:6f:fa:a5:6a:8b:fe:
d0:f0:ce:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:10 2025 by rpki-client