![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/0/3230302e3130362e3133362e302f32322d3234203d3e20323730343636.roa
File: 3230302e3130362e3133362e302f32322d3234203d3e20323730343636.roa (raw, json)
Hash identifier: V68oL8YhA26YvwwgA45DNF4nP56RmUbdZWrBujhNfu4=
Subject key identifier: CB:65:13:6A:6A:ED:70:0F:5F:A3:A0:8D:CA:5B:46:15:26:51:43:E4
Certificate issuer: /CN=088F5B84BDC57FA62F1769CACB1CDED1DF9BABB9
Certificate serial: 4741A0039E0E0B5AFDF18859A942FE740C519727
Authority key identifier: 08:8F:5B:84:BD:C5:7F:A6:2F:17:69:CA:CB:1C:DE:D1:DF:9B:AB:B9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/088F5B84BDC57FA62F1769CACB1CDED1DF9BABB9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/0/3230302e3130362e3133362e302f32322d3234203d3e20323730343636.roa
Signing time: Tue 09 Apr 2024 17:09:54 +0000
ROA not before: Tue 09 Apr 2024 17:04:54 +0000
ROA not after: Tue 08 Apr 2025 17:09:54 +0000
asID: 270466
IP address blocks: 200.106.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:41:a0:03:9e:0e:0b:5a:fd:f1:88:59:a9:42:fe:74:0c:51:97:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088F5B84BDC57FA62F1769CACB1CDED1DF9BABB9
Validity
Not Before: Apr 9 17:04:54 2024 GMT
Not After : Apr 8 17:09:54 2025 GMT
Subject: CN=CB65136A6AED700F5FA3A08DCA5B4615265143E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ea:1e:45:fb:d8:e9:dd:a7:7f:6a:cd:3f:2b:
ff:22:e0:34:69:43:e1:1e:32:63:dc:94:39:56:ec:
05:86:f6:34:61:f6:13:d0:0a:e1:2f:49:bd:f0:b9:
e6:57:9b:85:2d:b2:84:40:d4:96:7e:55:71:95:63:
fb:92:3c:4f:d8:7c:29:ec:0f:f9:82:8c:f9:f2:06:
61:32:ab:fe:bb:b3:a5:e6:b1:53:20:da:91:b2:f7:
2d:8b:ed:a2:99:b3:0a:ed:48:3d:26:78:9e:db:04:
68:d6:6f:45:09:4c:aa:80:0c:f2:a8:a8:8e:f1:fa:
cd:58:18:df:3d:1c:cc:0c:a0:06:aa:d3:a3:3f:11:
e6:ac:c2:97:f5:b2:06:ab:c6:33:b8:6b:f0:90:e8:
4c:15:4c:6f:61:34:0c:d7:5a:1b:b1:0e:20:dd:0c:
b3:f1:a0:ea:f7:fe:9b:36:8e:7c:89:c9:6e:10:b9:
24:34:99:57:1d:95:34:8e:44:35:13:83:ef:d7:6b:
dd:fc:c6:de:aa:5a:fd:d3:48:0e:70:c8:69:44:9e:
7d:de:56:47:20:c8:a7:3a:ed:16:84:ca:f5:39:fc:
b1:96:ad:34:9a:70:a9:76:02:4d:b0:a8:f2:ae:31:
ad:ce:f7:fe:83:0d:aa:78:20:c8:65:dc:09:1d:b8:
50:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:65:13:6A:6A:ED:70:0F:5F:A3:A0:8D:CA:5B:46:15:26:51:43:E4
X509v3 Authority Key Identifier:
keyid:08:8F:5B:84:BD:C5:7F:A6:2F:17:69:CA:CB:1C:DE:D1:DF:9B:AB:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/0/088F5B84BDC57FA62F1769CACB1CDED1DF9BABB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/088F5B84BDC57FA62F1769CACB1CDED1DF9BABB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/0/3230302e3130362e3133362e302f32322d3234203d3e20323730343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.106.136.0/22
Signature Algorithm: sha256WithRSAEncryption
89:f3:fe:b6:5d:4d:98:4a:b5:36:03:80:8f:18:68:d4:9f:53:
a3:f2:f7:35:e2:78:4e:d6:ea:bf:4d:94:76:bb:d7:40:26:0e:
33:6f:31:91:98:3f:c5:be:89:56:41:71:e1:d2:b4:6b:09:7f:
55:54:9d:ea:41:3a:ed:69:c0:85:18:67:95:36:a5:d2:f8:9d:
36:2d:c8:a3:5d:f7:84:d7:0e:2c:69:2e:fe:3b:b9:22:34:06:
19:f8:25:4d:92:57:66:27:18:6d:1c:26:d0:e6:bd:78:de:32:
8b:ec:89:21:5d:5c:ef:19:39:88:66:d2:f9:ae:be:79:f3:59:
56:f0:76:8f:ec:ae:8c:98:8a:e1:38:63:d8:31:68:1f:c2:2d:
56:d2:4b:de:e7:e7:7f:52:f2:53:5b:fc:c7:e4:f1:c1:da:b2:
cc:68:66:ef:d7:15:2d:89:20:cf:11:08:4e:e0:64:ec:c4:ea:
b8:97:b4:e6:44:d1:d3:6b:45:fb:c9:e6:b8:59:de:89:cb:79:
a4:dc:75:26:95:7a:60:48:00:15:e9:c7:70:8f:51:23:1a:e4:
bb:31:42:65:4a:14:21:49:0f:af:6d:ce:a9:23:ed:83:88:b4:
ea:25:db:2c:5c:94:a4:90:15:f1:91:6e:b1:8b:a5:a5:38:fe:
e8:31:1e:a9
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUR0GgA54OC1r98YhZqUL+dAxRlycwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4RjVCODRCREM1N0ZBNjJGMTc2OUNBQ0IxQ0RFRDFE
RjlCQUJCOTAeFw0yNDA0MDkxNzA0NTRaFw0yNTA0MDgxNzA5NTRaMDMxMTAvBgNV
BAMTKENCNjUxMzZBNkFFRDcwMEY1RkEzQTA4RENBNUI0NjE1MjY1MTQzRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ6h5F+9jp3ad/as0/K/8i4DRp
Q+EeMmPclDlW7AWG9jRh9hPQCuEvSb3wueZXm4UtsoRA1JZ+VXGVY/uSPE/YfCns
D/mCjPnyBmEyq/67s6XmsVMg2pGy9y2L7aKZswrtSD0meJ7bBGjWb0UJTKqADPKo
qI7x+s1YGN89HMwMoAaq06M/Eeaswpf1sgarxjO4a/CQ6EwVTG9hNAzXWhuxDiDd
DLPxoOr3/ps2jnyJyW4QuSQ0mVcdlTSORDUTg+/Xa938xt6qWv3TSA5wyGlEnn3e
VkcgyKc67RaEyvU5/LGWrTSacKl2Ak2wqPKuMa3O9/6DDap4IMhl3AkduFBlAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUy2UTamrtcA9fo6CNyltGFSZRQ+QwHwYDVR0j
BBgwFoAUCI9bhL3Ff6YvF2nKyxze0d+bq7kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREE3TXFyRHBGeDlKazhOOGtHRVpEYjJqaWo4eWd2ZlpuaEN0eFk2QlZB
dWEvMC8wODhGNUI4NEJEQzU3RkE2MkYxNzY5Q0FDQjFDREVEMURGOUJBQkI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA4OEY1Qjg0QkRDNTdGQTYy
RjE3NjlDQUNCMUNERUQxREY5QkFCQjkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RBN01xckRwRng5Sms4TjhrR0VaRGIyamlqOHlndmZabmhDdHhZNkJWQXVhLzAv
MzIzMDMwMmUzMTMwMzYyZTMxMzMzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzczMDM0MzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAshqiDANBgkqhkiG9w0BAQsFAAOCAQEAifP+
tl1NmEq1NgOAjxho1J9To/L3NeJ4Ttbqv02UdrvXQCYOM28xkZg/xb6JVkFx4dK0
awl/VVSd6kE67WnAhRhnlTal0vidNi3Io133hNcOLGku/ju5IjQGGfglTZJXZicY
bRwm0Oa9eN4yi+yJIV1c7xk5iGbS+a6+efNZVvB2j+yujJiK4Thj2DFoH8ItVtJL
3ufnf1LyU1v8x+TxwdqyzGhm79cVLYkgzxEITuBk7MTquJe05kTR02tF+8nmuFne
ict5pNx1JpV6YEgAFenHcI9RIxrkuzFCZUoUIUkPr23OqSPtg4i06iXbLFyUpJAV
8ZFusYulpTj+6DEeqQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:51 2025 by rpki-client