![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3136382e3230352e36302e302f32322d3234203d3e20323633363431.roa
File: 3136382e3230352e36302e302f32322d3234203d3e20323633363431.roa (raw, json)
Hash identifier: bolZJMrKzaB1rJL1pC+xIZy3xJlq0qROhy2fbXYkp+o=
Subject key identifier: 00:78:92:B1:B8:3A:07:D4:EA:C7:A5:6F:A6:49:35:4B:BE:DE:07:34
Certificate issuer: /CN=551FF95B2328867EC2F8D3A8E213AF61D7EC076F
Certificate serial: 4F97E65A490E41E9CF7ED067AF20988FC1D64E7E
Authority key identifier: 55:1F:F9:5B:23:28:86:7E:C2:F8:D3:A8:E2:13:AF:61:D7:EC:07:6F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/551FF95B2328867EC2F8D3A8E213AF61D7EC076F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3136382e3230352e36302e302f32322d3234203d3e20323633363431.roa
Signing time: Mon 11 Mar 2024 19:55:30 +0000
ROA not before: Mon 11 Mar 2024 19:50:30 +0000
ROA not after: Mon 10 Mar 2025 19:55:30 +0000
asID: 263641
IP address blocks: 168.205.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:97:e6:5a:49:0e:41:e9:cf:7e:d0:67:af:20:98:8f:c1:d6:4e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551FF95B2328867EC2F8D3A8E213AF61D7EC076F
Validity
Not Before: Mar 11 19:50:30 2024 GMT
Not After : Mar 10 19:55:30 2025 GMT
Subject: CN=007892B1B83A07D4EAC7A56FA649354BBEDE0734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:11:c4:f9:f4:3b:79:89:e6:ef:4a:63:70:2d:
4b:d3:f0:42:8d:fe:27:a3:f2:2d:b8:bc:b0:6e:a7:
9d:7a:81:49:4a:92:47:d4:2a:bd:02:4c:2f:27:66:
1a:41:3f:cb:07:15:b3:5a:d1:e4:7f:f3:49:2b:4f:
40:ab:3b:df:89:9d:ee:0d:dc:65:d3:a7:c8:45:9d:
91:9a:03:35:17:8e:a0:e4:9b:58:51:54:30:3d:3a:
66:c2:db:fc:83:68:8a:e3:31:5f:5e:f4:9f:8e:12:
ae:eb:b2:d8:e7:ee:7c:57:90:f6:cf:9c:fe:d3:d8:
92:85:31:2e:1f:90:78:29:83:ea:2c:74:ee:bc:5f:
86:c8:44:5f:39:33:f8:9e:87:64:10:63:f2:db:1b:
a1:e1:13:58:58:6b:74:36:2d:8a:61:ee:ed:ce:e8:
64:06:86:ef:1d:7e:39:04:ca:f8:5d:0c:d7:5c:2d:
10:2f:74:19:3d:35:bc:73:01:d0:93:25:fb:43:9c:
38:54:ee:f1:4e:8c:08:44:4a:f8:cc:48:a5:d1:6e:
fc:e4:6c:82:ae:0f:8a:f6:b3:e8:75:6d:7e:fb:0b:
19:e8:b9:71:d9:99:b5:15:ff:72:44:2c:f2:d5:41:
2d:1e:6f:d9:c9:c2:c6:4b:c4:24:22:d6:fa:d7:1d:
13:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:78:92:B1:B8:3A:07:D4:EA:C7:A5:6F:A6:49:35:4B:BE:DE:07:34
X509v3 Authority Key Identifier:
keyid:55:1F:F9:5B:23:28:86:7E:C2:F8:D3:A8:E2:13:AF:61:D7:EC:07:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/551FF95B2328867EC2F8D3A8E213AF61D7EC076F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/551FF95B2328867EC2F8D3A8E213AF61D7EC076F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3136382e3230352e36302e302f32322d3234203d3e20323633363431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.205.60.0/22
Signature Algorithm: sha256WithRSAEncryption
45:45:e6:db:3b:6b:f0:4d:66:5b:fb:bd:48:f7:36:bb:fa:57:
0d:13:6a:fb:59:95:82:25:8b:09:dc:4b:78:a4:52:e1:79:de:
dc:cd:61:8b:6a:aa:cf:39:64:ff:8a:b7:87:7e:d5:c3:0d:f2:
1c:0c:ee:50:e8:fd:4b:41:d6:80:8d:89:af:26:8f:8c:04:34:
1b:aa:4f:e3:84:a5:d5:16:31:0c:a3:52:e1:f6:4c:bf:7c:24:
87:24:bc:48:75:ff:fc:9c:14:1b:be:38:47:bd:9a:9e:64:d1:
86:e3:3d:e2:e4:36:3a:97:97:41:b2:89:3d:99:c8:cb:d9:8c:
c7:d1:96:fa:6c:ae:cc:7f:6d:64:12:b0:21:83:d0:9c:bb:bb:
24:c1:a4:1c:33:35:ff:11:83:f6:eb:22:89:5c:19:2f:a3:c8:
2c:5a:d0:1c:b2:dd:02:98:61:2f:ef:7a:e6:29:af:9c:0b:04:
8a:77:1a:7b:3e:e3:c3:35:ec:da:ec:b2:b1:34:c6:41:c1:a6:
e9:94:91:0f:b9:36:b7:77:6c:26:34:34:3a:c9:88:d8:27:d1:
be:fd:97:1a:8b:4f:b9:6b:1a:6c:57:45:26:9f:63:a2:4b:c7:
c2:d6:d2:1b:1a:44:16:eb:50:c1:17:82:6a:fa:ee:10:6d:09:
c3:82:2b:36
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUT5fmWkkOQenPftBnryCYj8HWTn4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTUxRkY5NUIyMzI4ODY3RUMyRjhEM0E4RTIxM0FGNjFE
N0VDMDc2RjAeFw0yNDAzMTExOTUwMzBaFw0yNTAzMTAxOTU1MzBaMDMxMTAvBgNV
BAMTKDAwNzg5MkIxQjgzQTA3RDRFQUM3QTU2RkE2NDkzNTRCQkVERTA3MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoEcT59Dt5iebvSmNwLUvT8EKN
/iej8i24vLBup516gUlKkkfUKr0CTC8nZhpBP8sHFbNa0eR/80krT0CrO9+Jne4N
3GXTp8hFnZGaAzUXjqDkm1hRVDA9OmbC2/yDaIrjMV9e9J+OEq7rstjn7nxXkPbP
nP7T2JKFMS4fkHgpg+osdO68X4bIRF85M/ieh2QQY/LbG6HhE1hYa3Q2LYph7u3O
6GQGhu8dfjkEyvhdDNdcLRAvdBk9NbxzAdCTJftDnDhU7vFOjAhESvjMSKXRbvzk
bIKuD4r2s+h1bX77CxnouXHZmbUV/3JELPLVQS0eb9nJwsZLxCQi1vrXHRORAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUAHiSsbg6B9Tqx6Vvpkk1S77eBzQwHwYDVR0j
BBgwFoAUVR/5WyMohn7C+NOo4hOvYdfsB28wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0p2d3hCS01vcVBFNXVuektGNlJ4c3UxY0J4YTVQWkFGYlBwdVNIRnhm
a2EvMC81NTFGRjk1QjIzMjg4NjdFQzJGOEQzQThFMjEzQUY2MUQ3RUMwNzZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU1MUZGOTVCMjMyODg2N0VD
MkY4RDNBOEUyMTNBRjYxRDdFQzA3NkYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NKdnd4QktNb3FQRTV1bnpLRjZSeHN1MWNCeGE1UFpBRmJQcHVTSEZ4ZmthLzAv
MzEzNjM4MmUzMjMwMzUyZTM2MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzMzNjM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKozTwwDQYJKoZIhvcNAQELBQADggEBAEVF5ts7
a/BNZlv7vUj3Nrv6Vw0TavtZlYIliwncS3ikUuF53tzNYYtqqs85ZP+Kt4d+1cMN
8hwM7lDo/UtB1oCNia8mj4wENBuqT+OEpdUWMQyjUuH2TL98JIckvEh1//ycFBu+
OEe9mp5k0YbjPeLkNjqXl0GyiT2ZyMvZjMfRlvpsrsx/bWQSsCGD0Jy7uyTBpBwz
Nf8Rg/brIolcGS+jyCxa0Byy3QKYYS/veuYpr5wLBIp3Gns+48M17NrssrE0xkHB
pumUkQ+5Nrd3bCY0NDrJiNgn0b79lxqLT7lrGmxXRSafY6JLx8LW0hsaRBbrUMEX
gmr67hBtCcOCKzY=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:59:06 2025 by rpki-client