![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/3136382e3139362e3131302e302f32332d3233203d3e20323632383139.roa
File: 3136382e3139362e3131302e302f32332d3233203d3e20323632383139.roa (raw, json)
Hash identifier: Myt66wa649bH4N4qOkbFNusKvc+FrmA8HxA29SgRGn0=
Subject key identifier: EC:D0:0C:9C:CA:FB:A8:BB:22:D5:F4:FE:C3:66:D4:A5:F6:91:85:49
Certificate issuer: /CN=CF608992965DC7DE08820B93FC270DCED15124BC
Certificate serial: 3350E2F59014F4D76CB7AA4946BB44E77C3DC619
Authority key identifier: CF:60:89:92:96:5D:C7:DE:08:82:0B:93:FC:27:0D:CE:D1:51:24:BC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF608992965DC7DE08820B93FC270DCED15124BC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/3136382e3139362e3131302e302f32332d3233203d3e20323632383139.roa
Signing time: Wed 09 Nov 2022 20:11:01 +0000
ROA not before: Wed 09 Nov 2022 20:06:01 +0000
ROA not after: Wed 08 Nov 2023 20:11:01 +0000
asID: 262819
IP address blocks: 168.196.110.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:50:e2:f5:90:14:f4:d7:6c:b7:aa:49:46:bb:44:e7:7c:3d:c6:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF608992965DC7DE08820B93FC270DCED15124BC
Validity
Not Before: Nov 9 20:06:01 2022 GMT
Not After : Nov 8 20:11:01 2023 GMT
Subject: CN=ECD00C9CCAFBA8BB22D5F4FEC366D4A5F6918549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:44:b7:de:d5:cb:92:99:0f:30:26:5a:c0:0f:
4d:b1:4b:55:4f:f0:d8:dd:7d:ab:ca:34:84:d7:ba:
6c:92:66:bd:eb:ca:32:44:3f:e3:97:87:52:57:5b:
df:72:f9:e1:d6:2a:de:30:b9:cf:a4:f1:df:a5:73:
59:12:be:49:e7:a1:00:dd:3d:f4:08:cc:66:5d:fe:
48:14:37:d9:8d:bf:8b:16:69:94:40:1d:31:fc:e1:
ab:2c:8c:20:b3:97:b8:f3:9c:a9:df:de:2d:90:19:
e9:53:fe:8a:90:16:fb:53:fd:de:7a:35:5d:59:92:
59:d6:23:0c:1f:20:44:d1:24:20:06:7a:de:83:21:
35:aa:8d:e9:a8:59:45:86:cb:b1:92:b3:f0:bc:0d:
ea:36:1f:b5:b8:97:10:31:31:25:5b:b6:a3:57:80:
62:51:e9:d8:06:a2:ad:0b:2a:fc:16:e0:d2:5a:5e:
ae:33:79:3a:45:64:f4:03:33:c5:00:df:b7:86:3d:
03:0b:e7:d4:29:5c:49:8a:6f:89:5f:78:a9:23:f9:
a7:c9:a8:e5:6e:50:e1:62:02:55:e1:b5:1a:ee:ef:
7b:bf:b6:75:49:e9:79:1c:7a:b3:f0:9f:f8:35:6d:
fa:08:55:7d:c0:79:fe:fc:73:cf:78:eb:23:51:41:
5b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D0:0C:9C:CA:FB:A8:BB:22:D5:F4:FE:C3:66:D4:A5:F6:91:85:49
X509v3 Authority Key Identifier:
keyid:CF:60:89:92:96:5D:C7:DE:08:82:0B:93:FC:27:0D:CE:D1:51:24:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/CF608992965DC7DE08820B93FC270DCED15124BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF608992965DC7DE08820B93FC270DCED15124BC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/3136382e3139362e3131302e302f32332d3233203d3e20323632383139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.196.110.0/23
Signature Algorithm: sha256WithRSAEncryption
59:6f:e7:9b:7b:26:68:7f:33:12:9c:aa:5f:0a:42:1a:79:15:
9e:ed:26:a4:56:ea:f6:fa:78:8c:7b:2f:de:bb:29:a0:15:c3:
a4:86:d8:ab:92:c0:01:65:f7:d1:88:a4:dd:09:9a:8b:9c:98:
e1:42:01:7a:8c:11:1c:b8:39:08:1c:87:57:1a:e9:28:ac:cf:
3c:ab:64:b4:f6:ef:73:80:be:3c:96:ae:78:0d:5a:cb:b6:b2:
f7:7c:db:75:59:e5:f9:0b:a5:81:81:3a:d0:03:75:1f:9b:4b:
d9:db:a0:1b:17:58:d3:09:07:1e:77:b4:f0:97:ca:78:3b:6e:
15:9e:63:c3:48:45:62:79:3d:63:5c:f8:13:6e:b7:09:9f:97:
5e:58:6a:e2:e5:7a:79:a6:34:93:e7:fd:4a:67:72:06:26:73:
80:67:5f:8e:68:34:7c:7d:b1:96:8b:a8:bc:c1:8b:6a:21:f7:
13:77:21:ba:fe:6d:c1:69:63:22:6c:4e:d2:f0:8b:ed:e2:61:
2f:b3:ba:44:e6:f7:49:6d:83:13:1c:a9:01:95:a0:b5:d4:96:
63:22:21:06:3a:07:c8:bb:7b:cf:85:85:ff:50:b7:a6:bc:88:
2c:8e:09:64:42:30:cf:b2:42:de:25:58:36:2d:f5:0e:e8:39:
58:63:9c:a4
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUM1Di9ZAU9Ndst6pJRrtE53w9xhkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Y2MDg5OTI5NjVEQzdERTA4ODIwQjkzRkMyNzBEQ0VE
MTUxMjRCQzAeFw0yMjExMDkyMDA2MDFaFw0yMzExMDgyMDExMDFaMDMxMTAvBgNV
BAMTKEVDRDAwQzlDQ0FGQkE4QkIyMkQ1RjRGRUMzNjZENEE1RjY5MTg1NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeRLfe1cuSmQ8wJlrAD02xS1VP
8NjdfavKNITXumySZr3ryjJEP+OXh1JXW99y+eHWKt4wuc+k8d+lc1kSvknnoQDd
PfQIzGZd/kgUN9mNv4sWaZRAHTH84assjCCzl7jznKnf3i2QGelT/oqQFvtT/d56
NV1ZklnWIwwfIETRJCAGet6DITWqjemoWUWGy7GSs/C8Deo2H7W4lxAxMSVbtqNX
gGJR6dgGoq0LKvwW4NJaXq4zeTpFZPQDM8UA37eGPQML59QpXEmKb4lfeKkj+afJ
qOVuUOFiAlXhtRru73u/tnVJ6XkcerPwn/g1bfoIVX3Aef78c8946yNRQVtlAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU7NAMnMr7qLsi1fT+w2bUpfaRhUkwHwYDVR0j
BBgwFoAUz2CJkpZdx94IgguT/CcNztFRJLwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWlNS0E1a3JpQzU2eVpia29OWmRuZlVxcW1rTnZrUzlNbVp0Sm53NEYy
V3kvMC9DRjYwODk5Mjk2NURDN0RFMDg4MjBCOTNGQzI3MERDRUQxNTEyNEJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NGNjA4OTkyOTY1REM3REUw
ODgyMEI5M0ZDMjcwRENFRDE1MTI0QkMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlpTUtBNWtyaUM1NnlaYmtvTlpkbmZVcXFta052a1M5TW1adEpudzRGMld5LzAv
MzEzNjM4MmUzMTM5MzYyZTMxMzEzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM4MzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAajEbjANBgkqhkiG9w0BAQsFAAOCAQEAWW/n
m3smaH8zEpyqXwpCGnkVnu0mpFbq9vp4jHsv3rspoBXDpIbYq5LAAWX30Yik3Qma
i5yY4UIBeowRHLg5CByHVxrpKKzPPKtktPbvc4C+PJaueA1ay7ay93zbdVnl+Qul
gYE60AN1H5tL2dugGxdY0wkHHne08JfKeDtuFZ5jw0hFYnk9Y1z4E263CZ+XXlhq
4uV6eaY0k+f9SmdyBiZzgGdfjmg0fH2xlouovMGLaiH3E3chuv5twWljImxO0vCL
7eJhL7O6ROb3SW2DExypAZWgtdSWYyIhBjoHyLt7z4WF/1C3pryILI4JZEIwz7JC
3iVYNi31Dug5WGOcpA==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:23:24 2025 by rpki-client