![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3230302e3232392e3232342e302f32302d3234203d3e203238313635.roa
File: 3230302e3232392e3232342e302f32302d3234203d3e203238313635.roa (raw, json)
Hash identifier: u2VmcyyH9Sw6CLthl3nIN0rKaQiEFyMNXozUhbl/pxU=
Subject key identifier: 45:D9:F7:CC:C8:9C:15:CE:6B:04:CE:7F:EC:61:EE:2A:9A:45:48:B9
Certificate issuer: /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial: 1F23F83656BABB11368C772071EB5C55859DAEE5
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3230302e3232392e3232342e302f32302d3234203d3e203238313635.roa
Signing time: Mon 01 Jul 2024 19:26:52 +0000
ROA not before: Mon 01 Jul 2024 19:21:52 +0000
ROA not after: Mon 30 Jun 2025 19:26:52 +0000
asID: 28165
IP address blocks: 200.229.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:23:f8:36:56:ba:bb:11:36:8c:77:20:71:eb:5c:55:85:9d:ae:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Validity
Not Before: Jul 1 19:21:52 2024 GMT
Not After : Jun 30 19:26:52 2025 GMT
Subject: CN=45D9F7CCC89C15CE6B04CE7FEC61EE2A9A4548B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:55:20:cf:1e:c6:7f:20:3f:fa:09:1b:69:75:
61:0d:d0:4d:cc:72:2b:79:ca:53:fc:d8:88:de:b9:
a5:59:d5:81:34:ad:34:99:8e:3a:a9:e1:25:a5:96:
46:a1:ca:3f:ea:01:16:d0:e4:17:6d:92:24:ae:ea:
28:4c:52:9e:f8:f9:b0:c4:43:b7:88:65:38:77:88:
46:1b:64:9b:3f:df:7d:51:b3:29:a2:4f:f2:45:4b:
be:4b:f2:d0:0e:5b:87:c5:69:35:6e:d3:dc:63:65:
79:97:7f:97:5b:c3:9e:1f:10:94:6e:ba:f1:f8:59:
a8:cc:27:8e:21:60:77:6a:7c:60:80:95:4b:b4:03:
a7:e7:08:c7:32:f5:bd:84:92:fd:c0:ee:c5:43:2b:
9e:4a:68:48:fe:d6:65:97:23:22:16:ce:18:64:5c:
57:25:d1:9a:5d:cd:ea:ba:09:68:d1:b2:ba:e5:dc:
56:9b:bf:e1:cd:eb:1e:34:46:33:50:73:ce:4e:e8:
b0:9c:f2:13:15:7b:d0:1e:c4:2a:16:6c:62:ff:98:
8a:f8:ae:3f:dc:d5:18:0e:72:df:2c:af:c2:ee:42:
7f:df:33:f5:2f:0a:7d:29:fc:a5:c6:de:07:e6:14:
f6:9d:6e:60:ab:0c:44:1f:f5:e8:2e:c1:e7:26:62:
0e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D9:F7:CC:C8:9C:15:CE:6B:04:CE:7F:EC:61:EE:2A:9A:45:48:B9
X509v3 Authority Key Identifier:
keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3230302e3232392e3232342e302f32302d3234203d3e203238313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.229.224.0/20
Signature Algorithm: sha256WithRSAEncryption
82:5d:b6:eb:c0:2a:49:38:b5:df:a6:d8:1a:46:23:7e:37:f3:
fe:1d:d9:5c:c8:c5:db:28:5d:dd:6e:52:1e:cf:cb:0a:5c:7c:
95:4f:03:7e:87:66:aa:24:e1:08:84:92:91:1a:c2:38:70:b7:
f0:8d:8c:c9:44:e9:4f:af:3a:22:ab:92:26:40:3b:75:4f:27:
c3:90:49:ef:cc:58:11:ba:92:bc:9f:88:07:bd:bf:78:cf:d7:
83:28:04:60:c4:d6:6d:34:e3:9d:c0:39:c7:8b:9a:10:7d:c8:
e3:2f:2d:9b:c9:96:9a:00:87:0a:6e:2b:e4:4d:9d:a9:0f:12:
4f:dc:30:de:c6:45:5c:28:6a:fd:2f:84:4c:66:36:ee:ca:10:
d3:a9:87:e5:f2:6b:09:4f:13:a7:68:22:76:f8:2d:a4:ae:ab:
09:4c:c7:38:27:78:ed:70:86:a0:00:85:79:0a:fa:70:81:2c:
64:ba:fd:d4:75:43:bf:ed:72:eb:14:49:5b:2d:21:ee:fc:63:
84:f0:9c:03:fe:0b:77:d8:2a:7b:92:51:71:4a:d8:29:cf:fc:
72:01:2e:28:46:b3:45:9d:56:2f:0a:58:b5:fc:ba:d6:38:3c:
2a:e7:0e:cd:65:bf:55:16:ef:08:58:fa:65:95:0d:5b:6a:50:
f1:21:e0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:33 2025 by rpki-client