![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/3133312e3130302e3133322e302f32322d3232203d3e203631363337.roa
File: 3133312e3130302e3133322e302f32322d3232203d3e203631363337.roa (raw, json)
Hash identifier: fWJ+Tkv0LRxtqF+PxU5Ub3MDzZj57O6LCG8EmbECaoE=
Subject key identifier: 22:AC:87:CB:EB:5C:3A:60:81:00:79:0E:3D:2B:2C:C1:B9:93:37:32
Certificate issuer: /CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
Certificate serial: 12F4F490FF9CA806A2B4E33C551AD52145EFD086
Authority key identifier: 59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/3133312e3130302e3133322e302f32322d3232203d3e203631363337.roa
Signing time: Thu 01 Feb 2024 19:55:31 +0000
ROA not before: Thu 01 Feb 2024 19:50:31 +0000
ROA not after: Thu 30 Jan 2025 19:55:31 +0000
asID: 61637
IP address blocks: 131.100.132.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:f4:f4:90:ff:9c:a8:06:a2:b4:e3:3c:55:1a:d5:21:45:ef:d0:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
Validity
Not Before: Feb 1 19:50:31 2024 GMT
Not After : Jan 30 19:55:31 2025 GMT
Subject: CN=22AC87CBEB5C3A608100790E3D2B2CC1B9933732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b3:9f:af:38:13:b4:95:56:fe:a5:05:03:60:
65:44:06:cd:f0:d7:f6:cf:51:b8:73:a1:32:7c:45:
c9:98:f3:dd:05:d3:b6:50:ee:7f:dc:ff:37:48:71:
be:70:0b:d0:e7:2a:54:fb:da:12:59:34:2b:2a:eb:
0a:d5:33:43:ff:ea:6e:9a:ef:e0:e4:1b:61:e9:a2:
95:21:3c:92:7b:da:2a:41:0f:41:e9:e0:41:0a:d1:
fa:0a:10:da:30:ed:60:ea:c8:43:8d:2f:fd:58:fa:
5b:36:66:64:37:6b:3f:bb:c3:fc:10:25:25:83:eb:
b4:d2:68:fe:4d:67:84:e6:d9:7c:d2:ca:a4:68:2d:
63:27:2e:50:2d:ed:c8:9e:b5:34:47:bb:bc:ea:2e:
f6:80:e3:bb:fd:5f:80:41:e4:d2:60:60:50:d2:1a:
8d:32:35:2b:a0:52:ff:27:16:3f:cd:fb:b4:cd:ef:
5c:6d:7d:bf:ec:97:3a:ef:6d:21:03:cd:16:68:36:
e4:04:4d:de:bf:e8:f0:3e:6a:e2:15:95:47:7e:b9:
77:6c:aa:46:f5:83:40:bb:72:e2:e3:8b:e8:1f:32:
94:a5:2b:e3:45:c3:70:bf:75:ef:cf:76:89:2a:73:
89:46:a1:cd:a6:b9:a6:5f:84:f7:37:98:b4:82:75:
20:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AC:87:CB:EB:5C:3A:60:81:00:79:0E:3D:2B:2C:C1:B9:93:37:32
X509v3 Authority Key Identifier:
keyid:59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/3133312e3130302e3133322e302f32322d3232203d3e203631363337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.100.132.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:e0:d5:9c:af:60:a1:21:ed:e0:f0:a2:32:00:e0:c2:7e:61:
e6:24:c7:68:62:1f:36:bc:39:30:98:a4:a3:66:3e:e1:83:c2:
de:04:51:e7:d0:11:71:72:86:cd:f1:01:8f:a0:e1:62:4a:f7:
dd:01:87:50:ef:17:2c:ba:03:97:88:d2:3e:e4:d6:18:5f:15:
12:26:11:ac:3c:97:9f:c8:14:e3:5c:71:77:f0:b0:ae:ba:b0:
8a:28:13:f0:11:a7:93:8a:3c:3d:a4:34:ce:57:7f:d7:37:bd:
6e:6b:23:8f:49:c0:ae:73:7d:61:ed:1f:bb:0a:5b:90:8b:fd:
20:4f:05:c8:ed:f2:fd:49:16:96:d8:a0:8c:33:0a:81:35:5f:
fd:ff:b5:2d:12:b3:86:9e:3c:9f:b2:44:00:f9:04:4a:21:3c:
17:2d:39:56:43:dc:85:8f:05:ec:7e:cd:ea:73:0f:60:df:0f:
ad:92:20:14:d5:14:d7:b4:29:40:9c:c0:9a:6b:cc:0c:35:b3:
2f:87:99:92:a1:12:f6:24:4e:36:22:0a:34:3c:3f:5b:3b:42:
c9:5f:2b:9f:0c:a3:6a:b9:15:ff:e3:04:db:25:b6:ee:87:57:
a7:4f:c6:3e:3f:9f:ed:41:a8:36:21:a0:c2:85:65:71:20:e8:
2f:02:62:cb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEvT0kP+cqAaitOM8VRrVIUXv0IYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTk1NzBBNEQ0RTI1MjYyODZFMkE3QkQ3NERCMDVBOUM4
OTJFNjk5NDAeFw0yNDAyMDExOTUwMzFaFw0yNTAxMzAxOTU1MzFaMDMxMTAvBgNV
BAMTKDIyQUM4N0NCRUI1QzNBNjA4MTAwNzkwRTNEMkIyQ0MxQjk5MzM3MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRs5+vOBO0lVb+pQUDYGVEBs3w
1/bPUbhzoTJ8RcmY890F07ZQ7n/c/zdIcb5wC9DnKlT72hJZNCsq6wrVM0P/6m6a
7+DkG2HpopUhPJJ72ipBD0Hp4EEK0foKENow7WDqyEONL/1Y+ls2ZmQ3az+7w/wQ
JSWD67TSaP5NZ4Tm2XzSyqRoLWMnLlAt7cietTRHu7zqLvaA47v9X4BB5NJgYFDS
Go0yNSugUv8nFj/N+7TN71xtfb/slzrvbSEDzRZoNuQETd6/6PA+auIVlUd+uXds
qkb1g0C7cuLji+gfMpSlK+NFw3C/de/Pdokqc4lGoc2muaZfhPc3mLSCdSChAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUIqyHy+tcOmCBAHkOPSsswbmTNzIwHwYDVR0j
BBgwFoAUWVcKTU4lJihuKnvXTbBanIkuaZQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXNTcmY3cGZYTVA3c0Z6M3FSYzY2Y2FkUFp0SFVWd014RGlQazR2eGFk
ckYvMC81OTU3MEE0RDRFMjUyNjI4NkUyQTdCRDc0REIwNUE5Qzg5MkU2OTk0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU5NTcwQTRENEUyNTI2Mjg2
RTJBN0JENzREQjA1QTlDODkyRTY5OTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlzU3JmN3BmWE1QN3NGejNxUmM2NmNhZFBadEhVVndNeERpUGs0dnhhZHJGLzAv
MzEzMzMxMmUzMTMwMzAyZTMxMzMzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM2
MzEzNjMzMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKDZIQwDQYJKoZIhvcNAQELBQADggEBACrg1Zyv
YKEh7eDwojIA4MJ+YeYkx2hiHza8OTCYpKNmPuGDwt4EUefQEXFyhs3xAY+g4WJK
990Bh1DvFyy6A5eI0j7k1hhfFRImEaw8l5/IFONccXfwsK66sIooE/ARp5OKPD2k
NM5Xf9c3vW5rI49JwK5zfWHtH7sKW5CL/SBPBcjt8v1JFpbYoIwzCoE1X/3/tS0S
s4aePJ+yRAD5BEohPBctOVZD3IWPBex+zepzD2DfD62SIBTVFNe0KUCcwJprzAw1
sy+HmZKhEvYkTjYiCjQ8P1s7QslfK58Mo2q5Ff/jBNsltu6HV6dPxj4/n+1BqDYh
oMKFZXEg6C8CYss=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:02:27 2025 by rpki-client