![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3133382e33362e3136342e302f32322d3332203d3e20323633343434.roa
File: 3133382e33362e3136342e302f32322d3332203d3e20323633343434.roa (raw, json)
Hash identifier: J+UqR6/anGz09FZuOryy+hDaiDNQrVs/TxqrT6Qid64=
Subject key identifier: 73:DC:8B:C8:20:56:40:B8:99:DA:09:49:5D:87:3E:29:37:63:E0:B7
Certificate issuer: /CN=2BB0FB0CD2AC37A15BFE7854A2F34D62501A97C2
Certificate serial: 74AA11F0D6EB40FD36A8417A111E0AD81498ADFD
Authority key identifier: 2B:B0:FB:0C:D2:AC:37:A1:5B:FE:78:54:A2:F3:4D:62:50:1A:97:C2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB0FB0CD2AC37A15BFE7854A2F34D62501A97C2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3133382e33362e3136342e302f32322d3332203d3e20323633343434.roa
Signing time: Tue 30 Jul 2024 18:52:49 +0000
ROA not before: Tue 30 Jul 2024 18:47:49 +0000
ROA not after: Tue 29 Jul 2025 18:52:49 +0000
asID: 263444
IP address blocks: 138.36.164.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:aa:11:f0:d6:eb:40:fd:36:a8:41:7a:11:1e:0a:d8:14:98:ad:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BB0FB0CD2AC37A15BFE7854A2F34D62501A97C2
Validity
Not Before: Jul 30 18:47:49 2024 GMT
Not After : Jul 29 18:52:49 2025 GMT
Subject: CN=73DC8BC8205640B899DA09495D873E293763E0B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5c:32:e1:01:89:30:66:8d:36:63:dd:51:c8:
b3:1c:d1:da:3e:4a:5e:7c:18:93:21:51:92:b5:03:
a8:2e:ab:71:e6:a3:0e:05:02:65:d6:87:37:e6:b7:
98:1b:3f:b3:32:46:42:a2:43:a1:b5:8b:f9:1b:4e:
ec:9a:d3:55:5e:1b:16:eb:26:d8:d2:49:a6:13:f6:
23:3c:6f:25:ea:3d:92:21:73:cc:be:eb:43:11:0e:
65:fb:12:c3:bb:aa:0e:d3:9e:a2:79:23:b9:e3:6b:
47:35:5b:fb:8f:6e:62:8d:fc:1f:78:c1:35:29:61:
bd:14:c5:1e:61:77:a3:3a:4f:9a:45:f1:e6:ba:cb:
25:46:b0:bc:6d:42:d3:da:e8:16:26:d0:d5:70:96:
e7:2b:64:74:aa:2f:12:a1:db:8f:0c:4b:0c:db:46:
9c:8c:c0:09:71:b0:6f:19:56:63:f6:6a:79:a3:b9:
b2:08:9d:a6:d4:83:e9:b5:e3:c8:29:04:4a:a5:5a:
89:0a:c5:81:e8:9f:28:b3:9a:8c:78:bb:7c:db:a6:
53:9d:76:df:61:9b:ae:bc:0d:8f:65:d8:d5:a4:9d:
3d:68:b7:0d:e4:27:1c:7c:7d:52:ed:90:d9:8c:a3:
02:f3:b4:33:c7:ac:54:21:00:29:e6:7b:e5:af:19:
79:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DC:8B:C8:20:56:40:B8:99:DA:09:49:5D:87:3E:29:37:63:E0:B7
X509v3 Authority Key Identifier:
keyid:2B:B0:FB:0C:D2:AC:37:A1:5B:FE:78:54:A2:F3:4D:62:50:1A:97:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/2BB0FB0CD2AC37A15BFE7854A2F34D62501A97C2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB0FB0CD2AC37A15BFE7854A2F34D62501A97C2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3133382e33362e3136342e302f32322d3332203d3e20323633343434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.164.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:09:c6:ff:84:71:cf:e1:f3:bd:15:c0:5f:b9:2e:33:78:29:
41:1d:d3:cc:f5:7a:e4:f8:5a:6d:1b:ef:8d:80:0f:fa:d9:02:
e8:56:30:99:b5:55:69:e6:81:2d:fc:52:eb:83:be:98:24:ef:
90:c5:d3:59:13:cd:4d:f6:21:66:fd:8a:95:ab:6f:f1:df:98:
e3:f6:ab:f9:77:e1:26:a9:6c:27:0d:36:bf:08:63:36:3b:5b:
26:3e:4d:16:d6:f0:47:be:d3:ac:c4:75:65:4d:c8:e3:b8:71:
81:8f:ec:2d:ad:31:4f:11:16:72:03:b9:ed:07:e9:cc:2a:ae:
0a:30:e6:09:9b:2b:02:2f:1f:cc:24:76:2b:32:ac:2c:9d:94:
18:5e:c1:23:9f:3d:e6:a2:c1:de:c1:48:0e:b2:d3:2f:5b:e6:
db:29:34:da:03:b7:d2:3d:a1:30:4d:66:a6:a8:22:00:e3:a8:
5c:2d:d8:51:ca:13:77:8c:ac:a5:32:92:d9:1b:9a:bb:4d:96:
e5:56:41:d0:be:15:1d:ef:ff:ad:1e:9d:b8:ae:8f:fe:30:27:
97:21:9d:eb:8a:6f:ff:d6:25:c9:cf:49:ea:65:d4:7d:5a:35:
52:7d:bc:19:00:bf:9a:5f:b3:e7:a7:27:c6:f8:f1:07:5c:b8:
9f:f1:cb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:01 2025 by rpki-client