![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3137372e39312e3136302e302f32322d3232203d3e20323633343434.roa
File: 3137372e39312e3136302e302f32322d3232203d3e20323633343434.roa (raw, json)
Hash identifier: OBemFQEMGEBrF3jXe+X8jIlbcbW4mp7ziwjUytsrwog=
Subject key identifier: 1B:DA:35:65:9C:52:45:B7:B8:D1:57:71:D4:B2:EA:8F:6B:EE:1A:44
Certificate issuer: /CN=414013A25F77129C74B069C1772DF23C085FA9FC
Certificate serial: 429950513AA2FB71F86DF32D52BBD8DBFF60FB52
Authority key identifier: 41:40:13:A2:5F:77:12:9C:74:B0:69:C1:77:2D:F2:3C:08:5F:A9:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/414013A25F77129C74B069C1772DF23C085FA9FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3137372e39312e3136302e302f32322d3232203d3e20323633343434.roa
Signing time: Thu 07 Nov 2024 01:23:51 +0000
ROA not before: Thu 07 Nov 2024 01:18:51 +0000
ROA not after: Thu 06 Nov 2025 01:23:51 +0000
asID: 263444
IP address blocks: 177.91.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:99:50:51:3a:a2:fb:71:f8:6d:f3:2d:52:bb:d8:db:ff:60:fb:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=414013A25F77129C74B069C1772DF23C085FA9FC
Validity
Not Before: Nov 7 01:18:51 2024 GMT
Not After : Nov 6 01:23:51 2025 GMT
Subject: CN=1BDA35659C5245B7B8D15771D4B2EA8F6BEE1A44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e4:b0:ea:d3:d4:ed:09:3b:38:39:8a:68:46:
66:33:8a:d0:d0:f7:ab:14:f1:7f:a0:96:c2:15:4b:
25:9d:ec:4c:a9:07:ee:b4:41:8b:b2:2a:b5:1d:f3:
51:c6:dd:a9:76:ca:5e:94:f0:3b:16:df:1b:52:f5:
5d:9c:5f:d4:d8:73:15:e7:99:69:8d:a5:e5:b4:da:
af:f8:34:4b:13:b7:bd:a4:0f:ba:f7:9a:60:9d:fa:
80:3b:8f:c9:41:fd:d8:dd:6e:53:cf:77:00:68:39:
e2:29:13:af:87:56:cb:2d:f5:77:8d:6a:27:18:5e:
33:53:0b:c7:01:7c:92:76:49:11:bb:fb:48:5f:cf:
6e:5e:ab:03:1f:6c:f8:26:02:a1:4e:c3:63:2d:ad:
37:aa:32:5c:4b:75:dd:68:f1:5b:18:fc:56:00:a9:
c1:d6:b2:ed:1f:69:90:05:1b:88:77:89:ee:52:4f:
5f:08:51:4d:43:67:c9:78:7c:6a:93:b5:c7:81:0a:
06:4f:d3:13:55:35:3a:c0:da:fb:a3:08:25:c8:59:
55:da:63:64:2a:83:92:55:3c:35:7d:38:cf:6c:03:
ae:d4:f1:aa:f8:b7:6a:db:69:9d:cc:2e:af:78:11:
1f:7b:46:ef:24:4d:ed:94:22:2e:f8:e7:0d:68:26:
2b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DA:35:65:9C:52:45:B7:B8:D1:57:71:D4:B2:EA:8F:6B:EE:1A:44
X509v3 Authority Key Identifier:
keyid:41:40:13:A2:5F:77:12:9C:74:B0:69:C1:77:2D:F2:3C:08:5F:A9:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/414013A25F77129C74B069C1772DF23C085FA9FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/414013A25F77129C74B069C1772DF23C085FA9FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3137372e39312e3136302e302f32322d3232203d3e20323633343434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.91.160.0/22
Signature Algorithm: sha256WithRSAEncryption
42:40:12:52:c6:03:4d:fe:ad:67:4a:2a:ce:8f:14:91:dd:e0:
a8:c7:a6:57:38:f9:85:8b:97:f8:f8:4c:ef:ae:cc:4d:12:56:
d1:12:12:85:16:58:3c:1d:22:a5:b5:89:7a:ff:06:68:2d:19:
fe:6a:2e:19:72:a3:0a:82:0e:98:a1:37:3e:49:11:3f:68:0d:
5e:d2:09:18:07:07:8c:2b:19:cd:b3:c7:62:6a:48:99:81:4c:
be:06:bb:0a:f0:b0:60:2b:41:bb:c8:29:ff:ab:04:78:23:56:
fd:cc:8b:dc:cd:24:82:3e:26:c0:0a:a5:08:22:ce:1a:c8:8d:
e6:a3:9f:30:43:49:a0:e3:45:e0:9d:d6:7b:c1:2f:72:3e:a5:
3e:fa:16:74:38:c5:4f:9d:74:03:dc:d2:0e:a9:13:36:5f:36:
1a:4e:24:a1:82:4b:40:88:40:75:54:73:0c:4f:3b:01:01:95:
3d:f7:f1:fd:c9:36:4a:9d:6a:bc:91:f0:88:fd:a9:04:e7:43:
e8:76:28:90:8a:b4:5f:3c:e8:b4:ef:25:5d:f7:28:2a:dd:7f:
09:d8:c4:51:dd:7c:a9:2b:96:c3:b9:2d:d7:2c:e7:40:97:6f:
c8:b1:ff:de:b8:4f:82:64:b0:3a:c6:78:dd:a8:53:72:3a:10:
2e:fd:1f:5b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQplQUTqi+3H4bfMtUrvY2/9g+1IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE0MDEzQTI1Rjc3MTI5Qzc0QjA2OUMxNzcyREYyM0Mw
ODVGQTlGQzAeFw0yNDExMDcwMTE4NTFaFw0yNTExMDYwMTIzNTFaMDMxMTAvBgNV
BAMTKDFCREEzNTY1OUM1MjQ1QjdCOEQxNTc3MUQ0QjJFQThGNkJFRTFBNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo5LDq09TtCTs4OYpoRmYzitDQ
96sU8X+glsIVSyWd7EypB+60QYuyKrUd81HG3al2yl6U8DsW3xtS9V2cX9TYcxXn
mWmNpeW02q/4NEsTt72kD7r3mmCd+oA7j8lB/djdblPPdwBoOeIpE6+HVsst9XeN
aicYXjNTC8cBfJJ2SRG7+0hfz25eqwMfbPgmAqFOw2MtrTeqMlxLdd1o8VsY/FYA
qcHWsu0faZAFG4h3ie5ST18IUU1DZ8l4fGqTtceBCgZP0xNVNTrA2vujCCXIWVXa
Y2Qqg5JVPDV9OM9sA67U8ar4t2rbaZ3MLq94ER97Ru8kTe2UIi745w1oJiujAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUG9o1ZZxSRbe40Vdx1LLqj2vuGkQwHwYDVR0j
BBgwFoAUQUATol93Epx0sGnBdy3yPAhfqfwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXpNOXJ6aG9MaWRZdHdVc1RHd3dYTHkyRjNhRlFlWUZzREg0OVlMcGtO
dUMvMC80MTQwMTNBMjVGNzcxMjlDNzRCMDY5QzE3NzJERjIzQzA4NUZBOUZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxNDAxM0EyNUY3NzEyOUM3
NEIwNjlDMTc3MkRGMjNDMDg1RkE5RkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl6TTlyemhvTGlkWXR3VXNUR3d3WEx5MkYzYUZRZVlGc0RINDlZTHBrTnVDLzAv
MzEzNzM3MmUzOTMxMmUzMTM2MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzMzNDM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxW6AwDQYJKoZIhvcNAQELBQADggEBAEJAElLG
A03+rWdKKs6PFJHd4KjHplc4+YWLl/j4TO+uzE0SVtESEoUWWDwdIqW1iXr/Bmgt
Gf5qLhlyowqCDpihNz5JET9oDV7SCRgHB4wrGc2zx2JqSJmBTL4GuwrwsGArQbvI
Kf+rBHgjVv3Mi9zNJII+JsAKpQgizhrIjeajnzBDSaDjReCd1nvBL3I+pT76FnQ4
xU+ddAPc0g6pEzZfNhpOJKGCS0CIQHVUcwxPOwEBlT338f3JNkqdaryR8Ij9qQTn
Q+h2KJCKtF886LTvJV33KCrdfwnYxFHdfKkrlsO5Ldcs50CXb8ix/964T4JksDrG
eN2oU3I6EC79H1s=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:47 2025 by rpki-client