![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/0/3138362e3232342e302e302f32302d3234203d3e20323632373535.roa
File: 3138362e3232342e302e302f32302d3234203d3e20323632373535.roa (raw, json)
Hash identifier: dtzQFVjRrf/5s/XUSEs2Bgbz32vk+J2W/VRieUFlkXU=
Subject key identifier: 9E:7F:51:A0:05:7E:0B:BC:60:DF:6B:94:11:53:61:14:57:F0:71:97
Certificate issuer: /CN=818DDB0D2DF0A6D1B534A098FAC04773983F7971
Certificate serial: 6563646146B922A9083BAA1AFEAB93CB30885400
Authority key identifier: 81:8D:DB:0D:2D:F0:A6:D1:B5:34:A0:98:FA:C0:47:73:98:3F:79:71
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/818DDB0D2DF0A6D1B534A098FAC04773983F7971.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/0/3138362e3232342e302e302f32302d3234203d3e20323632373535.roa
Signing time: Wed 31 Jan 2024 18:00:00 +0000
ROA not before: Wed 31 Jan 2024 17:55:00 +0000
ROA not after: Wed 29 Jan 2025 18:00:00 +0000
asID: 262755
IP address blocks: 186.224.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:63:64:61:46:b9:22:a9:08:3b:aa:1a:fe:ab:93:cb:30:88:54:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=818DDB0D2DF0A6D1B534A098FAC04773983F7971
Validity
Not Before: Jan 31 17:55:00 2024 GMT
Not After : Jan 29 18:00:00 2025 GMT
Subject: CN=9E7F51A0057E0BBC60DF6B941153611457F07197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c5:06:3f:5f:0b:b7:c5:e9:d5:ab:7e:af:4c:
80:e8:25:37:0e:cb:6f:84:29:bd:f1:2b:60:0f:7d:
15:bc:37:22:17:ce:23:17:7f:44:b5:0a:01:f8:cf:
13:af:a6:5d:f2:d4:ef:f7:cb:4a:74:17:8c:44:44:
df:ec:45:da:e2:6b:12:53:af:30:43:4b:cd:d6:be:
bd:ce:e9:57:35:f3:8f:e9:31:13:84:d6:69:cb:12:
9f:f1:63:4a:91:50:1e:ee:90:ab:d2:0a:c1:51:3e:
fc:97:14:f6:6d:55:97:2d:6b:7f:f1:16:e3:84:d1:
b2:ca:84:f7:a8:14:08:6d:eb:54:f1:37:02:1f:5e:
cf:f3:03:50:d1:4d:19:6d:08:b0:f3:28:03:cd:64:
c5:45:f7:c9:52:06:e9:a6:04:2a:05:9f:a4:02:67:
ff:7f:c4:09:a7:40:b8:54:49:cc:fb:a0:29:2e:58:
6a:6d:d4:b4:90:79:ca:31:7b:31:7b:1c:7c:55:73:
4d:09:d4:48:c7:26:2d:ef:30:66:ce:25:45:27:cb:
3e:e7:e1:bf:13:7c:70:22:e5:92:aa:71:b4:c7:33:
01:e1:e9:bc:79:81:3a:cc:0a:fe:88:50:1e:38:04:
cc:40:68:bd:0b:91:76:f2:da:89:69:ae:54:fc:4d:
76:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7F:51:A0:05:7E:0B:BC:60:DF:6B:94:11:53:61:14:57:F0:71:97
X509v3 Authority Key Identifier:
keyid:81:8D:DB:0D:2D:F0:A6:D1:B5:34:A0:98:FA:C0:47:73:98:3F:79:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/0/818DDB0D2DF0A6D1B534A098FAC04773983F7971.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/818DDB0D2DF0A6D1B534A098FAC04773983F7971.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/0/3138362e3232342e302e302f32302d3234203d3e20323632373535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.224.0.0/20
Signature Algorithm: sha256WithRSAEncryption
35:6a:ed:e8:eb:ca:9f:3e:71:ab:ad:3f:82:75:12:9d:25:b4:
f5:c9:31:6c:f1:bf:df:b4:52:b4:ec:26:d7:b4:e6:47:bf:2d:
6d:c4:e6:56:d8:be:9c:90:41:76:e6:64:05:c0:5c:12:d5:e7:
7d:ce:78:8e:32:0f:16:a0:f0:d2:f4:02:ed:4f:fb:fd:60:46:
26:83:1c:5b:1d:4c:3c:f8:b2:2e:61:4d:99:bc:4e:1c:08:af:
1e:0c:7c:bd:a6:49:51:23:a6:16:6d:c4:51:93:d8:cd:80:3a:
10:ea:fd:38:cc:80:6d:d8:a1:58:17:73:60:30:1e:e4:a9:0a:
c7:5a:96:38:bb:6e:be:cf:7f:57:e4:00:76:86:02:99:da:01:
ba:42:88:23:54:fa:68:db:f2:9c:25:37:66:6b:48:4f:05:59:
cf:de:72:f4:b2:c5:fa:aa:1e:84:91:66:07:39:b6:75:e8:d4:
fd:ce:6c:85:a3:ee:f3:96:9e:28:82:2b:a8:fe:c5:c5:82:48:
06:ba:3d:f6:77:9b:43:dd:b0:0f:1c:44:21:95:0c:61:86:64:
fc:37:fe:37:11:37:e4:20:2f:f5:e9:51:f0:0d:88:e1:36:b9:
5b:32:38:49:5b:4c:ad:d8:3c:05:0c:a5:9a:f4:52:75:87:91:
cf:a1:94:d6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZWNkYUa5IqkIO6oa/quTyzCIVAAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE4RERCMEQyREYwQTZEMUI1MzRBMDk4RkFDMDQ3NzM5
ODNGNzk3MTAeFw0yNDAxMzExNzU1MDBaFw0yNTAxMjkxODAwMDBaMDMxMTAvBgNV
BAMTKDlFN0Y1MUEwMDU3RTBCQkM2MERGNkI5NDExNTM2MTE0NTdGMDcxOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBxQY/Xwu3xenVq36vTIDoJTcO
y2+EKb3xK2APfRW8NyIXziMXf0S1CgH4zxOvpl3y1O/3y0p0F4xERN/sRdriaxJT
rzBDS83Wvr3O6Vc184/pMROE1mnLEp/xY0qRUB7ukKvSCsFRPvyXFPZtVZcta3/x
FuOE0bLKhPeoFAht61TxNwIfXs/zA1DRTRltCLDzKAPNZMVF98lSBummBCoFn6QC
Z/9/xAmnQLhUScz7oCkuWGpt1LSQecoxezF7HHxVc00J1EjHJi3vMGbOJUUnyz7n
4b8TfHAi5ZKqcbTHMwHh6bx5gTrMCv6IUB44BMxAaL0LkXby2olprlT8TXbLAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUnn9RoAV+C7xg32uUEVNhFFfwcZcwHwYDVR0j
BBgwFoAUgY3bDS3wptG1NKCY+sBHc5g/eXEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1BmMUYxNHFXaVdVa3JmNDJqZWgxczRibVdCMmV6YXNMZ3dqeWpVZDl4
WHMvMC84MThEREIwRDJERjBBNkQxQjUzNEEwOThGQUMwNDc3Mzk4M0Y3OTcxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzgxOEREQjBEMkRGMEE2RDFC
NTM0QTA5OEZBQzA0NzczOTgzRjc5NzEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NQZjFGMTRxV2lXVWtyZjQyamVoMXM0Ym1XQjJlemFzTGd3anlqVWQ5eFhzLzAv
MzEzODM2MmUzMjMyMzQyZTMwMmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzNjMy
MzczNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEuuAAMA0GCSqGSIb3DQEBCwUAA4IBAQA1au3o68qf
PnGrrT+CdRKdJbT1yTFs8b/ftFK07CbXtOZHvy1txOZW2L6ckEF25mQFwFwS1ed9
zniOMg8WoPDS9ALtT/v9YEYmgxxbHUw8+LIuYU2ZvE4cCK8eDHy9pklRI6YWbcRR
k9jNgDoQ6v04zIBt2KFYF3NgMB7kqQrHWpY4u26+z39X5AB2hgKZ2gG6QogjVPpo
2/KcJTdma0hPBVnP3nL0ssX6qh6EkWYHObZ16NT9zmyFo+7zlp4ogiuo/sXFgkgG
uj32d5tD3bAPHEQhlQxhhmT8N/43ETfkIC/16VHwDYjhNrlbMjhJW0yt2DwFDKWa
9FJ1h5HPoZTW
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:18 2025 by rpki-client