![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/0/34352e3137332e3235352e302f32342d3234203d3e20323638383437.roa
File: 34352e3137332e3235352e302f32342d3234203d3e20323638383437.roa (raw, json)
Hash identifier: hM1ukLz3pbQembEBANtxZBUsyMheNLrDE3THJMnONZU=
Subject key identifier: 3F:0A:87:0F:13:07:9A:ED:34:1F:A9:1A:E7:48:82:B7:4D:5A:17:64
Certificate issuer: /CN=AB42D964E5098F72C8A0F7319CB3924F4BE2B03A
Certificate serial: 0D31A83FA02D23E16CBBF44A9C1C1EAF40BEA46A
Authority key identifier: AB:42:D9:64:E5:09:8F:72:C8:A0:F7:31:9C:B3:92:4F:4B:E2:B0:3A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB42D964E5098F72C8A0F7319CB3924F4BE2B03A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/0/34352e3137332e3235352e302f32342d3234203d3e20323638383437.roa
Signing time: Tue 19 Jul 2022 18:34:49 +0000
ROA not before: Tue 19 Jul 2022 18:29:49 +0000
ROA not after: Tue 18 Jul 2023 18:34:49 +0000
asID: 268847
IP address blocks: 45.173.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:31:a8:3f:a0:2d:23:e1:6c:bb:f4:4a:9c:1c:1e:af:40:be:a4:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB42D964E5098F72C8A0F7319CB3924F4BE2B03A
Validity
Not Before: Jul 19 18:29:49 2022 GMT
Not After : Jul 18 18:34:49 2023 GMT
Subject: CN=3F0A870F13079AED341FA91AE74882B74D5A1764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:dc:b4:0b:43:37:9e:24:bf:c4:4e:7a:2d:27:
b3:b1:11:61:11:00:4e:6c:41:66:d9:34:27:67:a8:
8a:32:7c:c5:8e:26:fd:54:73:52:c0:df:23:44:4b:
9d:78:bd:71:4f:92:8c:ec:b1:6a:14:e4:57:8d:9c:
c2:f6:6a:17:4b:77:95:38:0a:53:0a:67:1e:93:51:
1f:78:b1:c9:e4:d9:31:d0:cd:31:e1:11:95:8d:50:
41:5a:ed:ed:c6:43:c7:e7:9f:da:a4:5f:f4:c5:ab:
5f:fd:3f:1f:59:70:93:e0:60:78:2f:70:c8:77:2e:
01:1f:f1:e2:1f:87:3c:31:f0:ff:47:9e:2c:06:bf:
30:0e:b7:0d:f9:88:b0:8d:f0:24:7d:f6:e0:9e:a5:
14:aa:43:b3:10:b9:6f:14:f4:a3:91:b9:c6:9c:76:
7c:87:86:d7:8b:8f:5d:2a:74:1f:43:d5:6b:91:5d:
d2:b9:be:84:43:07:e5:f1:a4:ff:34:61:ad:44:3a:
ec:66:bb:0e:6c:fe:cc:1b:16:c8:89:10:87:fd:a6:
e4:43:db:ce:d1:02:02:26:11:42:91:54:20:38:ba:
8f:a9:90:39:04:9c:1e:00:a9:3a:d1:4d:d4:2c:62:
be:a2:b4:94:f6:2d:b5:1b:19:97:10:41:8f:a0:9b:
44:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0A:87:0F:13:07:9A:ED:34:1F:A9:1A:E7:48:82:B7:4D:5A:17:64
X509v3 Authority Key Identifier:
keyid:AB:42:D9:64:E5:09:8F:72:C8:A0:F7:31:9C:B3:92:4F:4B:E2:B0:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/0/AB42D964E5098F72C8A0F7319CB3924F4BE2B03A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB42D964E5098F72C8A0F7319CB3924F4BE2B03A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/0/34352e3137332e3235352e302f32342d3234203d3e20323638383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.173.255.0/24
Signature Algorithm: sha256WithRSAEncryption
96:f6:27:2b:1a:5a:1b:ff:ad:cb:52:ef:78:1d:28:4a:a7:ab:
3c:4a:f9:76:22:c2:c7:33:2e:dc:55:ec:77:65:07:3b:10:a4:
56:24:9c:57:50:4b:0c:7a:4e:b6:49:2c:d3:37:9c:36:da:ce:
0a:71:85:61:1e:fb:47:8f:9a:49:e8:b5:7f:4c:8d:ae:aa:96:
55:20:0c:fb:f3:36:08:3e:e3:d7:b1:bb:dd:4e:6d:40:2e:b5:
b4:e7:59:62:41:a9:dd:f8:21:1d:c3:0c:e2:5c:22:3a:1f:b3:
cd:b3:f4:28:59:ae:e6:ca:83:e9:1e:c5:c7:d2:c1:ba:1f:dc:
24:1f:f9:66:39:bd:05:21:bf:e6:d2:f3:ae:66:1a:70:d6:3e:
41:2b:8a:ba:f8:89:7e:2d:c8:21:9f:a6:d6:5f:f3:7b:90:a5:
8c:d3:93:58:50:8b:43:e5:aa:bf:91:9c:14:34:c5:54:3e:4e:
47:86:95:c4:e8:55:bf:26:53:14:39:b0:ec:ac:87:a8:34:c8:
09:5f:ec:92:34:39:01:a5:8f:23:df:96:ee:58:7b:d1:26:62:
07:c1:a7:e0:ab:40:10:41:57:c7:0a:ec:56:8e:12:cf:7f:18:
c1:f8:d8:b2:98:87:d5:7e:bc:03:d9:8a:8a:6e:c4:b7:38:55:
45:a5:0b:c1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDTGoP6AtI+Fsu/RKnBwer0C+pGowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUI0MkQ5NjRFNTA5OEY3MkM4QTBGNzMxOUNCMzkyNEY0
QkUyQjAzQTAeFw0yMjA3MTkxODI5NDlaFw0yMzA3MTgxODM0NDlaMDMxMTAvBgNV
BAMTKDNGMEE4NzBGMTMwNzlBRUQzNDFGQTkxQUU3NDg4MkI3NEQ1QTE3NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA3LQLQzeeJL/ETnotJ7OxEWER
AE5sQWbZNCdnqIoyfMWOJv1Uc1LA3yNES514vXFPkozssWoU5FeNnML2ahdLd5U4
ClMKZx6TUR94scnk2THQzTHhEZWNUEFa7e3GQ8fnn9qkX/TFq1/9Px9ZcJPgYHgv
cMh3LgEf8eIfhzwx8P9HniwGvzAOtw35iLCN8CR99uCepRSqQ7MQuW8U9KORucac
dnyHhteLj10qdB9D1WuRXdK5voRDB+XxpP80Ya1EOuxmuw5s/swbFsiJEIf9puRD
287RAgImEUKRVCA4uo+pkDkEnB4AqTrRTdQsYr6itJT2LbUbGZcQQY+gm0RDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUPwqHDxMHmu00H6ka50iCt01aF2QwHwYDVR0j
BBgwFoAUq0LZZOUJj3LIoPcxnLOST0visDowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0JVS3E0bVdSd0VHWlo5NDNqeUFOdUozNUhReURtUnJjYkxVY1Nud2Nn
dUwvMC9BQjQyRDk2NEU1MDk4RjcyQzhBMEY3MzE5Q0IzOTI0RjRCRTJCMDNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FCNDJEOTY0RTUwOThGNzJD
OEEwRjczMTlDQjM5MjRGNEJFMkIwM0EuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NCVUtxNG1XUndFR1paOTQzanlBTnVKMzVIUXlEbVJyY2JMVWNTbndjZ3VMLzAv
MzQzNTJlMzEzNzMzMmUzMjM1MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzODM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtrf8wDQYJKoZIhvcNAQELBQADggEBAJb2Jysa
Whv/rctS73gdKEqnqzxK+XYiwsczLtxV7HdlBzsQpFYknFdQSwx6TrZJLNM3nDba
zgpxhWEe+0ePmknotX9Mja6qllUgDPvzNgg+49exu91ObUAutbTnWWJBqd34IR3D
DOJcIjofs82z9ChZrubKg+kexcfSwbof3CQf+WY5vQUhv+bS865mGnDWPkErirr4
iX4tyCGfptZf83uQpYzTk1hQi0Plqr+RnBQ0xVQ+TkeGlcToVb8mUxQ5sOysh6g0
yAlf7JI0OQGljyPflu5Ye9EmYgfBp+CrQBBBV8cK7FaOEs9/GMH42LKYh9V+vAPZ
iopuxLc4VUWlC8E=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:47 2025 by rpki-client