![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133312e3235352e3130302e302f32322d3232203d3e203238313635.roa
File: 3133312e3235352e3130302e302f32322d3232203d3e203238313635.roa (raw, json)
Hash identifier: 3TFS+1/WXPddKZGW9h0LVfaI9k0WDfh51t2eBxsLeP8=
Subject key identifier: 1E:89:59:E0:05:54:D0:D3:A1:FF:0C:22:CB:BA:09:0E:56:F5:21:0F
Certificate issuer: /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial: 7CFEA404B19162E76D16348D9108B261C7103F6D
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133312e3235352e3130302e302f32322d3232203d3e203238313635.roa
Signing time: Mon 01 Jul 2024 18:45:31 +0000
ROA not before: Mon 01 Jul 2024 18:40:31 +0000
ROA not after: Mon 30 Jun 2025 18:45:31 +0000
asID: 28165
IP address blocks: 131.255.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:fe:a4:04:b1:91:62:e7:6d:16:34:8d:91:08:b2:61:c7:10:3f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Validity
Not Before: Jul 1 18:40:31 2024 GMT
Not After : Jun 30 18:45:31 2025 GMT
Subject: CN=1E8959E00554D0D3A1FF0C22CBBA090E56F5210F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f7:df:09:a3:95:a6:1f:d4:a2:78:18:27:0c:
4b:14:0d:62:71:93:d4:9d:b3:7f:dc:89:db:9f:ca:
a8:01:15:b6:0f:f0:4a:31:32:31:24:3a:f9:dd:45:
d0:25:c3:ef:52:dc:ae:77:93:6d:b0:6b:26:1e:f7:
a7:09:30:5d:f3:6e:bc:9e:48:74:83:3c:ca:27:f7:
9e:fb:5a:34:da:f0:88:a6:35:61:c1:5f:0e:f1:c6:
c8:c9:16:19:2e:d4:a0:54:eb:5b:fa:9c:92:d5:a2:
a5:a1:da:0d:d7:d9:f4:9e:42:cb:f6:58:2f:5a:0a:
a1:49:5e:17:a1:73:de:f5:31:b8:80:03:84:cb:f0:
84:b4:6e:d9:2a:bc:8a:b5:ea:4a:65:01:16:17:f7:
ca:6f:79:5c:9c:7f:65:98:c9:35:34:7a:b6:9a:24:
94:bd:fb:68:0f:f5:87:23:f7:a1:74:c8:96:dd:92:
a7:bf:91:68:df:7b:af:da:5f:b9:5a:76:e3:a6:96:
06:62:eb:f3:33:a9:c1:33:45:e7:60:ce:19:79:e9:
5d:f1:34:c7:42:27:67:c9:9f:65:ef:9b:c5:0f:7f:
49:a3:5a:f1:4f:a6:90:1d:2b:73:11:2b:e5:d4:ed:
0e:bb:f5:2b:59:78:cf:ca:44:55:c7:c5:63:af:85:
b6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:89:59:E0:05:54:D0:D3:A1:FF:0C:22:CB:BA:09:0E:56:F5:21:0F
X509v3 Authority Key Identifier:
keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133312e3235352e3130302e302f32322d3232203d3e203238313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.255.100.0/22
Signature Algorithm: sha256WithRSAEncryption
86:b5:b5:ca:91:61:1f:a7:b0:d5:65:65:fa:88:1e:89:4d:9a:
27:e0:33:fb:9d:11:c7:5a:20:80:3b:a8:ea:cd:03:a0:25:90:
1f:1d:cd:84:82:f0:88:bf:06:9d:04:db:e8:24:e5:5f:eb:38:
56:10:d8:24:d7:72:fb:61:49:0a:d1:95:bf:77:f9:66:39:82:
f1:fc:af:99:70:f1:da:a7:65:63:41:7c:cc:1f:01:84:d1:53:
4b:65:cb:70:24:33:34:98:b8:80:84:4b:1f:11:0a:cd:81:1c:
83:fa:29:c6:5a:88:2a:e4:bf:e3:fd:8c:94:c7:e1:0b:2a:c4:
a8:2c:07:ab:0c:cb:3d:90:31:2e:62:88:59:7d:6f:41:ac:3d:
3e:38:ff:f6:b3:c7:17:d3:c2:6e:5d:1a:6b:17:a3:fc:e4:f2:
ea:cd:fe:5d:11:6f:eb:7a:ee:ba:c3:42:a4:12:18:13:6b:05:
3f:9d:a2:55:dc:50:a1:a2:9a:05:c2:de:49:ae:7f:17:3f:d0:
f5:1d:05:94:3a:06:f2:4e:17:34:4b:f2:73:db:9c:8a:db:0d:
1e:35:a6:d3:52:0c:eb:d5:bc:6c:66:fe:95:18:ba:a2:71:53:
0c:2b:7a:8b:34:3a:98:9e:02:6a:b8:47:fc:b1:14:f9:17:f2:
b5:6b:b1:03
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfP6kBLGRYudtFjSNkQiyYccQP20wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODlFRjJEQTMwQzFERjBGMkI3ODZCMUVDMjY0MDkxNTc0
RjU0RTI3MjAeFw0yNDA3MDExODQwMzFaFw0yNTA2MzAxODQ1MzFaMDMxMTAvBgNV
BAMTKDFFODk1OUUwMDU1NEQwRDNBMUZGMEMyMkNCQkEwOTBFNTZGNTIxMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg998Jo5WmH9SieBgnDEsUDWJx
k9Sds3/cidufyqgBFbYP8EoxMjEkOvndRdAlw+9S3K53k22wayYe96cJMF3zbrye
SHSDPMon9577WjTa8IimNWHBXw7xxsjJFhku1KBU61v6nJLVoqWh2g3X2fSeQsv2
WC9aCqFJXhehc971MbiAA4TL8IS0btkqvIq16kplARYX98pveVycf2WYyTU0eraa
JJS9+2gP9Ycj96F0yJbdkqe/kWjfe6/aX7laduOmlgZi6/MzqcEzRedgzhl56V3x
NMdCJ2fJn2Xvm8UPf0mjWvFPppAdK3MRK+XU7Q679StZeM/KRFXHxWOvhbZrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUHolZ4AVU0NOh/wwiy7oJDlb1IQ8wHwYDVR0j
BBgwFoAUie8towwd8PK3hrHsJkCRV09U4nIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDJNUlZWOFd3SkVEYUROcFR6bTlqckg2N050dDNIQ0xHM1Yyd1dmRXpr
b0QvMC84OUVGMkRBMzBDMURGMEYyQjc4NkIxRUMyNjQwOTE1NzRGNTRFMjcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5RUYyREEzMEMxREYwRjJC
Nzg2QjFFQzI2NDA5MTU3NEY1NEUyNzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QyTVJWVjhXd0pFRGFETnBUem05anJINjdOdHQzSENMRzNWMndXZkV6a29ELzAv
MzEzMzMxMmUzMjM1MzUyZTMxMzAzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzgzMTM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKD/2QwDQYJKoZIhvcNAQELBQADggEBAIa1tcqR
YR+nsNVlZfqIHolNmifgM/udEcdaIIA7qOrNA6AlkB8dzYSC8Ii/Bp0E2+gk5V/r
OFYQ2CTXcvthSQrRlb93+WY5gvH8r5lw8dqnZWNBfMwfAYTRU0tly3AkMzSYuICE
Sx8RCs2BHIP6KcZaiCrkv+P9jJTH4QsqxKgsB6sMyz2QMS5iiFl9b0GsPT44//az
xxfTwm5dGmsXo/zk8urN/l0Rb+t67rrDQqQSGBNrBT+dolXcUKGimgXC3kmufxc/
0PUdBZQ6BvJOFzRL8nPbnIrbDR41ptNSDOvVvGxm/pUYuqJxUwwreos0OpieAmq4
R/yxFPkX8rVrsQM=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:28 2025 by rpki-client