![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/3137302e3234352e3230302e302f32322d3234203d3e20323633393938.roa
File: 3137302e3234352e3230302e302f32322d3234203d3e20323633393938.roa (raw, json)
Hash identifier: 0gVZZLL9VoCMZ8BRRftwv5hJX8az9hCHmYni/YqEX/g=
Subject key identifier: 9D:A1:EC:EC:29:94:D6:B7:F1:3A:A1:41:06:7C:CA:B9:F3:A5:5D:F4
Certificate issuer: /CN=984A4E66BC65EB5C94C289F8249033C67BBB81E7
Certificate serial: 394718105CC2BF5630FAA7B1C1A6E0FE9828FAC4
Authority key identifier: 98:4A:4E:66:BC:65:EB:5C:94:C2:89:F8:24:90:33:C6:7B:BB:81:E7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/984A4E66BC65EB5C94C289F8249033C67BBB81E7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/3137302e3234352e3230302e302f32322d3234203d3e20323633393938.roa
Signing time: Tue 08 Aug 2023 18:19:44 +0000
ROA not before: Tue 08 Aug 2023 18:14:44 +0000
ROA not after: Tue 06 Aug 2024 18:19:44 +0000
asID: 263998
IP address blocks: 170.245.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:47:18:10:5c:c2:bf:56:30:fa:a7:b1:c1:a6:e0:fe:98:28:fa:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984A4E66BC65EB5C94C289F8249033C67BBB81E7
Validity
Not Before: Aug 8 18:14:44 2023 GMT
Not After : Aug 6 18:19:44 2024 GMT
Subject: CN=9DA1ECEC2994D6B7F13AA141067CCAB9F3A55DF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:af:d0:1b:e6:f1:c5:04:27:07:14:1e:fc:d5:
07:ab:f3:d9:46:3f:72:ae:14:24:f9:3a:c1:74:30:
f5:03:14:f8:a6:f7:ac:05:ef:49:2a:a0:0a:e7:b1:
99:70:67:dc:e5:a9:03:48:61:ca:45:d3:04:ee:2c:
4d:ed:97:a3:b9:f5:91:30:a6:fd:42:d8:82:74:19:
0c:cf:ca:96:77:7e:b2:65:29:1e:a5:84:42:2b:8c:
ef:83:60:c4:a9:2b:44:9a:57:c3:63:b4:ca:17:32:
7d:3a:98:61:ef:19:6a:90:09:81:f7:56:10:b7:fa:
61:49:37:3c:2f:9e:e4:9b:d7:29:be:d7:6e:04:e3:
c0:82:d4:f1:88:87:32:3d:2f:26:cb:7d:08:0e:1d:
c5:02:7b:19:51:72:d0:78:43:72:ac:fc:5c:d4:8e:
0a:6d:9e:c8:9b:c1:5a:01:7d:54:99:fc:2b:ce:a7:
50:a5:45:0d:ea:78:a9:f1:4f:2f:55:a0:f6:6b:0b:
27:62:15:68:43:ed:c0:0c:64:52:0e:78:2b:71:74:
0c:aa:93:c3:0b:67:16:df:d7:95:46:76:d3:b5:60:
42:c8:d5:cb:79:dc:b1:b2:5c:61:d6:42:8c:5e:47:
1e:8c:32:fc:7f:1c:aa:a2:05:33:bf:21:5e:bc:ec:
c6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A1:EC:EC:29:94:D6:B7:F1:3A:A1:41:06:7C:CA:B9:F3:A5:5D:F4
X509v3 Authority Key Identifier:
keyid:98:4A:4E:66:BC:65:EB:5C:94:C2:89:F8:24:90:33:C6:7B:BB:81:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/984A4E66BC65EB5C94C289F8249033C67BBB81E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/984A4E66BC65EB5C94C289F8249033C67BBB81E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/3137302e3234352e3230302e302f32322d3234203d3e20323633393938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.245.200.0/22
Signature Algorithm: sha256WithRSAEncryption
49:dd:91:47:ce:f2:88:59:4e:e6:c9:a3:9b:02:b5:d0:83:fa:
9f:9a:71:a7:ec:48:72:64:c7:7c:4c:e2:6f:51:97:2b:61:47:
db:52:ae:1c:6b:55:0f:ff:d7:52:9a:d4:37:77:26:d4:96:df:
b7:5d:fa:76:df:62:61:63:f3:a9:02:28:f8:08:e9:39:0c:25:
89:e4:e1:5a:45:1e:8c:6e:95:e0:da:72:40:b9:fb:94:03:1c:
e2:4e:79:86:bf:09:df:78:af:a2:06:f2:1b:de:29:7c:a6:f4:
76:8a:f6:7e:2b:82:ef:f6:f7:52:ce:ea:c5:71:21:a6:8d:ac:
62:92:82:46:25:fd:74:73:c7:60:d1:58:1d:3a:68:19:a0:6c:
5a:79:b8:f1:69:51:75:41:d8:ca:d2:b4:0b:10:28:c8:b2:b3:
af:33:e8:6f:45:74:52:94:d9:ac:d6:cd:53:af:85:05:7e:9b:
82:20:18:df:21:ee:98:20:d2:3c:40:00:27:40:da:80:e1:9c:
80:f3:c8:74:1a:62:13:b1:e0:cb:73:60:78:dc:5a:21:db:11:
cc:83:16:f7:af:49:52:da:79:61:f9:f6:bd:19:94:90:ed:60:
ae:9f:bc:95:4b:fa:77:8c:4f:9c:2e:5e:d0:59:bf:89:00:fc:
1c:81:f5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:01 2025 by rpki-client