![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/0/3138362e3139342e36342e302f32302d3234203d3e203238333334.roa
File: 3138362e3139342e36342e302f32302d3234203d3e203238333334.roa (raw, json)
Hash identifier: ihXl8orn4diSohu9JQJH7Vu4DMLXJ0kQ+Kfd+NtG+iI=
Subject key identifier: 53:12:3E:1C:0D:8C:F8:49:27:73:A9:A4:22:72:C8:93:AD:B3:49:9A
Certificate issuer: /CN=C6FD89549D5BEF0C2C05BB4F5E253D1C02EEFDF9
Certificate serial: 604831209F2DFF89E12E31D62068763D443135D8
Authority key identifier: C6:FD:89:54:9D:5B:EF:0C:2C:05:BB:4F:5E:25:3D:1C:02:EE:FD:F9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6FD89549D5BEF0C2C05BB4F5E253D1C02EEFDF9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/0/3138362e3139342e36342e302f32302d3234203d3e203238333334.roa
Signing time: Tue 30 Jan 2024 20:00:00 +0000
ROA not before: Tue 30 Jan 2024 19:55:00 +0000
ROA not after: Tue 28 Jan 2025 20:00:00 +0000
asID: 28334
IP address blocks: 186.194.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:48:31:20:9f:2d:ff:89:e1:2e:31:d6:20:68:76:3d:44:31:35:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C6FD89549D5BEF0C2C05BB4F5E253D1C02EEFDF9
Validity
Not Before: Jan 30 19:55:00 2024 GMT
Not After : Jan 28 20:00:00 2025 GMT
Subject: CN=53123E1C0D8CF8492773A9A42272C893ADB3499A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9d:6f:da:10:62:84:4d:84:b6:f2:01:63:4b:
64:d5:8d:13:6d:83:25:0b:59:fc:15:5e:f4:9d:30:
28:6f:3b:37:3a:e7:ce:c2:f0:b7:a6:b6:d9:72:3a:
91:71:df:d6:d1:2e:0f:28:ff:2d:32:8c:f8:94:6c:
2b:7a:17:37:bb:fb:ea:9d:fb:6e:91:81:a9:57:b6:
33:d6:a8:75:60:71:d3:12:bc:61:f9:50:8f:ea:a7:
73:d3:2a:a4:6e:de:6a:1e:dd:39:1a:fc:d9:8d:53:
ff:2a:52:4e:ae:13:0c:47:8c:97:33:35:90:b6:73:
73:97:4e:f4:74:04:55:35:66:e9:ec:dd:65:e9:b6:
db:f6:d1:b9:45:fd:56:20:be:ae:29:37:08:59:5b:
6d:1d:61:74:66:fd:fa:0f:eb:c8:4c:da:13:2b:92:
f3:1d:40:66:6b:9a:4b:e7:d9:c9:7d:bf:62:df:c3:
e9:51:d3:a6:03:d9:9d:a6:d3:4f:52:39:f6:af:eb:
ad:21:0f:28:af:49:08:9d:9d:72:fe:70:71:02:eb:
83:f8:81:a2:e9:98:37:0b:9f:53:47:a0:05:ab:61:
d6:db:35:90:f9:cb:73:30:8e:07:b9:1a:f6:0c:48:
80:b2:68:c2:62:ad:ec:07:1d:7b:6c:7f:6a:f2:af:
80:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:12:3E:1C:0D:8C:F8:49:27:73:A9:A4:22:72:C8:93:AD:B3:49:9A
X509v3 Authority Key Identifier:
keyid:C6:FD:89:54:9D:5B:EF:0C:2C:05:BB:4F:5E:25:3D:1C:02:EE:FD:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/0/C6FD89549D5BEF0C2C05BB4F5E253D1C02EEFDF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6FD89549D5BEF0C2C05BB4F5E253D1C02EEFDF9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/0/3138362e3139342e36342e302f32302d3234203d3e203238333334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.194.64.0/20
Signature Algorithm: sha256WithRSAEncryption
03:09:b7:81:7e:3a:77:64:9d:02:96:02:a9:c6:5a:92:a8:62:
e4:e6:24:65:1f:44:20:60:37:72:4c:46:0e:af:bd:79:1c:f2:
44:97:fc:44:94:c1:b2:ad:b8:e0:4a:33:a4:e2:92:38:21:8e:
ae:96:dd:fd:d5:e9:4d:13:78:c2:eb:c8:f2:66:de:6a:f5:42:
c7:94:04:69:c3:36:f0:c6:49:f7:4b:08:81:08:06:80:41:16:
31:3d:9d:29:82:83:c8:66:78:40:6a:15:0d:52:47:d6:da:d5:
ff:90:09:42:9f:2b:ef:ba:d8:49:0e:42:e6:0a:1d:e0:3d:fd:
63:53:3d:91:ae:a1:fc:e4:fe:0a:c5:78:9c:0b:f3:38:69:ec:
80:21:fe:b5:5d:dd:7f:dc:fd:a6:f0:2f:94:2c:71:7f:77:b4:
3f:3c:7a:61:b8:23:3e:45:d7:ec:35:d6:01:88:32:5d:e0:dc:
f8:12:fe:da:ba:c9:4c:41:2a:c5:a3:e0:b9:24:f2:65:5f:da:
71:80:68:40:dc:36:c7:05:69:47:fb:10:9d:96:62:8b:a7:6d:
a8:c7:15:1b:71:d2:50:3d:35:df:a6:77:60:49:d8:71:91:db:
a7:fa:c8:f8:2c:d6:4a:1a:fc:56:62:8d:60:a6:77:e4:bb:f1:
91:d3:6d:e4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUYEgxIJ8t/4nhLjHWIGh2PUQxNdgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzZGRDg5NTQ5RDVCRUYwQzJDMDVCQjRGNUUyNTNEMUMw
MkVFRkRGOTAeFw0yNDAxMzAxOTU1MDBaFw0yNTAxMjgyMDAwMDBaMDMxMTAvBgNV
BAMTKDUzMTIzRTFDMEQ4Q0Y4NDkyNzczQTlBNDIyNzJDODkzQURCMzQ5OUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7nW/aEGKETYS28gFjS2TVjRNt
gyULWfwVXvSdMChvOzc6587C8LemttlyOpFx39bRLg8o/y0yjPiUbCt6Fze7++qd
+26RgalXtjPWqHVgcdMSvGH5UI/qp3PTKqRu3moe3Tka/NmNU/8qUk6uEwxHjJcz
NZC2c3OXTvR0BFU1Zuns3WXpttv20blF/VYgvq4pNwhZW20dYXRm/foP68hM2hMr
kvMdQGZrmkvn2cl9v2Lfw+lR06YD2Z2m009SOfav660hDyivSQidnXL+cHEC64P4
gaLpmDcLn1NHoAWrYdbbNZD5y3Mwjge5GvYMSICyaMJirewHHXtsf2ryr4CFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUUxI+HA2M+Eknc6mkInLIk62zSZowHwYDVR0j
BBgwFoAUxv2JVJ1b7wwsBbtPXiU9HALu/fkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUtvYjNaWG9tMlVWMlFDVEpGQ1VhdkxQTkdKcUhuaEJlb0VvQTk1ajVo
UjUvMC9DNkZEODk1NDlENUJFRjBDMkMwNUJCNEY1RTI1M0QxQzAyRUVGREY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M2RkQ4OTU0OUQ1QkVGMEMy
QzA1QkI0RjVFMjUzRDFDMDJFRUZERjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FLb2IzWlhvbTJVVjJRQ1RKRkNVYXZMUE5HSnFIbmhCZW9Fb0E5NWo1aFI1LzAv
MzEzODM2MmUzMTM5MzQyZTM2MzQyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4
MzMzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEusJAMA0GCSqGSIb3DQEBCwUAA4IBAQADCbeBfjp3
ZJ0ClgKpxlqSqGLk5iRlH0QgYDdyTEYOr715HPJEl/xElMGyrbjgSjOk4pI4IY6u
lt391elNE3jC68jyZt5q9ULHlARpwzbwxkn3SwiBCAaAQRYxPZ0pgoPIZnhAahUN
UkfW2tX/kAlCnyvvuthJDkLmCh3gPf1jUz2RrqH85P4KxXicC/M4aeyAIf61Xd1/
3P2m8C+ULHF/d7Q/PHphuCM+RdfsNdYBiDJd4Nz4Ev7auslMQSrFo+C5JPJlX9px
gGhA3DbHBWlH+xCdlmKLp22oxxUbcdJQPTXfpndgSdhxkdun+sj4LNZKGvxWYo1g
pnfku/GR023k
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:55 2025 by rpki-client