![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3133312e3136312e39322e302f32322d3234203d3e20323634333937.roa
File: 3133312e3136312e39322e302f32322d3234203d3e20323634333937.roa (raw, json)
Hash identifier: ycoZx0SCiQ1me2W5ytVHNzgQWYc/qgi8WgoMTet8FhE=
Subject key identifier: 16:ED:67:5C:CE:2C:60:B9:B9:2A:B5:2D:19:55:E9:5E:3A:BE:F5:7D
Certificate issuer: /CN=D40D71C26E8C990D22430A76496945930ECE72FE
Certificate serial: 1D23313DCF80F04AA25D381C03E2A770125E6217
Authority key identifier: D4:0D:71:C2:6E:8C:99:0D:22:43:0A:76:49:69:45:93:0E:CE:72:FE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40D71C26E8C990D22430A76496945930ECE72FE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3133312e3136312e39322e302f32322d3234203d3e20323634333937.roa
Signing time: Mon 16 Dec 2024 18:28:50 +0000
ROA not before: Mon 16 Dec 2024 18:23:50 +0000
ROA not after: Mon 15 Dec 2025 18:28:50 +0000
asID: 264397
IP address blocks: 131.161.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:23:31:3d:cf:80:f0:4a:a2:5d:38:1c:03:e2:a7:70:12:5e:62:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D40D71C26E8C990D22430A76496945930ECE72FE
Validity
Not Before: Dec 16 18:23:50 2024 GMT
Not After : Dec 15 18:28:50 2025 GMT
Subject: CN=16ED675CCE2C60B9B92AB52D1955E95E3ABEF57D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f4:82:e0:ee:ff:66:c8:41:03:3b:62:b1:bb:
3c:6c:47:99:62:b1:a8:e2:1b:60:37:2a:37:54:e0:
f4:ea:f2:88:36:3a:02:18:37:11:ab:0f:f9:b2:ef:
3e:0f:4f:f9:b3:24:1c:0a:c8:41:0f:ec:b6:e0:18:
36:b8:e2:72:fb:3b:bd:e8:01:63:7a:36:37:0f:fb:
0d:a1:18:a7:29:9b:35:40:da:cd:15:5f:86:21:15:
f9:df:1e:49:75:22:3d:55:86:f5:27:41:1c:53:cd:
e6:d7:82:1a:d4:49:e2:92:08:78:fd:4c:6d:17:05:
fa:61:ec:8e:e9:95:8b:f3:27:19:a6:9a:ed:f2:9f:
59:01:58:38:40:27:75:57:f7:d2:b0:cf:7a:06:76:
be:1e:82:ae:96:43:4c:53:6c:13:c9:e6:48:50:d1:
e6:9c:85:52:40:09:de:6b:31:3b:cd:fc:8e:4c:06:
b8:0c:68:78:3d:04:f1:13:17:af:dc:cb:ee:66:78:
64:9a:69:58:3a:fd:9e:57:8a:cf:2b:fd:42:49:65:
53:ee:50:cb:85:4b:31:d3:4d:94:25:2e:dd:d7:03:
89:ef:ed:c5:71:36:b8:df:0d:be:be:c2:e2:9b:ac:
81:0b:67:8e:9d:13:18:8f:91:07:83:94:84:2f:1a:
4b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:ED:67:5C:CE:2C:60:B9:B9:2A:B5:2D:19:55:E9:5E:3A:BE:F5:7D
X509v3 Authority Key Identifier:
keyid:D4:0D:71:C2:6E:8C:99:0D:22:43:0A:76:49:69:45:93:0E:CE:72:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/D40D71C26E8C990D22430A76496945930ECE72FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40D71C26E8C990D22430A76496945930ECE72FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3133312e3136312e39322e302f32322d3234203d3e20323634333937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.161.92.0/22
Signature Algorithm: sha256WithRSAEncryption
72:06:da:65:67:8f:43:a8:91:2f:22:b3:cf:df:30:dd:ff:a8:
8f:4c:1d:37:d4:b2:34:9e:24:ae:14:69:52:ba:f6:f4:57:7b:
ea:29:87:d9:bc:d3:23:cd:cc:c7:fc:cf:95:47:37:e1:cf:e0:
11:2e:d8:59:5b:8d:a7:f6:15:a9:97:62:8b:57:24:a8:fa:26:
07:57:f4:d0:00:b3:d4:a4:61:40:91:b7:fa:26:3f:a8:4a:7f:
cf:35:3c:0f:84:84:8a:4c:bc:87:95:66:13:0d:61:4a:39:5b:
bc:ed:93:68:3d:09:29:bf:51:66:c9:49:12:a8:e0:29:37:12:
10:be:d4:ce:b0:39:c6:66:bf:62:a8:c4:46:3e:5f:fb:10:43:
28:08:46:59:02:b9:e1:75:0b:f3:c7:96:98:a5:17:a3:a1:43:
d4:17:ad:a5:31:d7:ca:f3:10:6c:97:ef:b2:a8:83:60:43:4e:
a4:70:c2:a7:66:48:9a:7b:ca:5f:42:16:d0:84:8a:16:0c:4e:
9d:e0:9c:4c:d8:b4:84:38:99:1a:92:ea:ee:f7:d7:e2:80:c8:
86:74:6e:0e:0d:92:79:c4:2d:bb:9e:c4:fc:6f:73:d6:5f:63:
7d:13:f7:b1:85:5e:ef:25:8e:d6:7a:6d:73:69:3d:22:a6:6a:
04:fd:33:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:40:01 2025 by rpki-client