![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/34352e3233342e3231322e302f32322d3232203d3e20323637333733.roa
File: 34352e3233342e3231322e302f32322d3232203d3e20323637333733.roa (raw, json)
Hash identifier: 2129Wi6DYRc+VW5c3JD/2CkOY7MPDMjfzh9SUkWElxg=
Subject key identifier: 55:FE:A1:EB:D1:17:4E:F5:0C:5C:05:AB:1D:9F:44:E7:27:3D:1F:98
Certificate issuer: /CN=98C8564D2D23C0B3238882D116CD64384F680CDC
Certificate serial: 50CA4C9AEE9FD990F0E8E7DD79C64027507AD088
Authority key identifier: 98:C8:56:4D:2D:23:C0:B3:23:88:82:D1:16:CD:64:38:4F:68:0C:DC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98C8564D2D23C0B3238882D116CD64384F680CDC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/34352e3233342e3231322e302f32322d3232203d3e20323637333733.roa
Signing time: Tue 25 Apr 2023 21:32:17 +0000
ROA not before: Tue 25 Apr 2023 21:27:17 +0000
ROA not after: Tue 23 Apr 2024 21:32:17 +0000
asID: 267373
IP address blocks: 45.234.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:ca:4c:9a:ee:9f:d9:90:f0:e8:e7:dd:79:c6:40:27:50:7a:d0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98C8564D2D23C0B3238882D116CD64384F680CDC
Validity
Not Before: Apr 25 21:27:17 2023 GMT
Not After : Apr 23 21:32:17 2024 GMT
Subject: CN=55FEA1EBD1174EF50C5C05AB1D9F44E7273D1F98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8b:73:36:d4:de:ef:9a:e7:57:3a:4f:25:99:
bc:f1:ae:15:cc:06:d6:6f:1d:3c:f1:04:b3:3e:bf:
c5:60:fe:6c:ec:ec:a9:35:6e:0a:05:83:32:48:e2:
f6:bb:43:1c:e7:33:d7:77:9f:be:94:dd:4f:7a:e8:
42:a4:d3:c5:13:dc:cc:4f:07:a3:cf:09:c5:2e:77:
20:34:4a:26:7a:d3:67:ec:36:86:ce:b7:6c:08:f1:
7a:0b:78:e1:e2:c5:60:80:d2:c1:f6:11:83:fb:a6:
b8:0a:5a:ca:b3:c5:c7:ec:b8:3d:03:96:65:2f:f5:
5a:50:03:da:56:86:64:cf:49:4f:62:8a:1b:00:3a:
a7:e4:d8:5e:44:ab:ce:6b:5d:97:d9:97:f7:37:d4:
40:f1:d4:98:22:f6:26:e0:66:03:8c:90:85:d5:a3:
76:05:0f:18:6e:d0:ec:dd:40:79:05:10:ae:94:77:
7a:98:f7:bc:75:a4:71:c3:86:e5:1e:c8:d8:00:60:
5b:cd:0e:7d:99:11:cf:65:38:57:97:20:72:39:f5:
82:7b:97:9b:98:1e:26:b2:85:06:1b:fa:64:42:ca:
ad:90:e2:bc:20:d0:9a:43:99:1c:31:76:36:dc:8f:
d8:50:80:dc:5f:ec:55:58:3d:44:e2:cc:03:f7:03:
89:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FE:A1:EB:D1:17:4E:F5:0C:5C:05:AB:1D:9F:44:E7:27:3D:1F:98
X509v3 Authority Key Identifier:
keyid:98:C8:56:4D:2D:23:C0:B3:23:88:82:D1:16:CD:64:38:4F:68:0C:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/98C8564D2D23C0B3238882D116CD64384F680CDC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98C8564D2D23C0B3238882D116CD64384F680CDC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/34352e3233342e3231322e302f32322d3232203d3e20323637333733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.212.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:b0:96:8d:b1:a9:1a:71:cb:97:ed:25:4a:aa:a3:f5:b8:16:
47:c5:54:49:3f:65:10:74:9a:b2:d1:47:c1:ae:31:19:28:44:
31:3c:ab:8d:3c:5b:88:36:65:fc:52:e2:ab:9d:96:ec:cf:65:
e0:51:c1:65:c9:d5:0c:fd:a9:b3:4d:cc:b1:9e:a1:e4:04:05:
6c:d8:81:f6:4c:d1:03:bd:cb:f5:d6:58:8c:ed:ce:95:01:1f:
b1:20:06:c7:38:bf:ba:9f:bb:f2:ad:9e:4c:ab:cb:2d:80:62:
17:05:92:b5:18:41:45:ad:37:cc:e7:f6:32:e3:ab:f9:d8:07:
f4:1f:bd:b5:77:84:b5:1b:f2:92:b5:fd:b5:83:66:25:11:9a:
97:54:78:f4:37:13:d8:bb:07:31:9a:38:c7:3d:6c:f8:93:4f:
d9:87:03:bb:19:22:74:2d:f9:b7:fe:1b:89:93:6e:70:a2:34:
85:6b:6f:f4:4d:76:3e:29:c7:ce:94:e6:ed:18:11:61:12:e0:
45:01:fd:65:b6:35:24:21:8e:8d:df:44:5b:0c:1b:4a:d1:d8:
bd:53:af:f9:a1:05:48:12:80:c6:4d:25:0c:0d:e4:55:35:ea:
1b:4f:86:57:f7:b5:96:92:8c:c2:af:ec:9b:74:a2:01:98:1e:
cc:ec:bc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:40 2025 by rpki-client