![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/34352e3136382e3130312e302f32342d3234203d3e20323638303838.roa
File: 34352e3136382e3130312e302f32342d3234203d3e20323638303838.roa (raw, json)
Hash identifier: geaYO1HAHApxKczKPqGyzkdoWpctprJ/T8OI3STU/ww=
Subject key identifier: BF:BE:C5:62:3C:A5:BC:E3:E3:97:5C:6E:E0:C7:B8:9D:E7:F8:08:6B
Certificate issuer: /CN=94A3DB62B012EF07C9AFE1762646CC714080A576
Certificate serial: 628867C92E11E7C59C82DED9CE1925AA73482643
Authority key identifier: 94:A3:DB:62:B0:12:EF:07:C9:AF:E1:76:26:46:CC:71:40:80:A5:76
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94A3DB62B012EF07C9AFE1762646CC714080A576.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/34352e3136382e3130312e302f32342d3234203d3e20323638303838.roa
Signing time: Fri 27 Oct 2023 15:56:53 +0000
ROA not before: Fri 27 Oct 2023 15:51:53 +0000
ROA not after: Fri 25 Oct 2024 15:56:53 +0000
asID: 268088
IP address blocks: 45.168.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:88:67:c9:2e:11:e7:c5:9c:82:de:d9:ce:19:25:aa:73:48:26:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94A3DB62B012EF07C9AFE1762646CC714080A576
Validity
Not Before: Oct 27 15:51:53 2023 GMT
Not After : Oct 25 15:56:53 2024 GMT
Subject: CN=BFBEC5623CA5BCE3E3975C6EE0C7B89DE7F8086B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ec:a4:df:73:53:3c:67:82:ef:32:9f:24:8e:
1b:69:6e:de:b9:b9:14:20:6f:a9:eb:c1:7f:d2:e0:
1e:43:73:23:4e:84:7a:45:51:41:20:44:53:90:5a:
d6:84:61:52:23:3c:af:b9:fc:15:a5:9e:5e:c8:97:
de:0f:54:62:8c:be:02:73:d8:d7:4e:f9:3c:8d:3a:
6f:ff:00:66:d9:5b:65:3f:c8:97:c3:99:f0:46:6c:
c5:4b:08:e7:95:72:6b:03:aa:37:ed:4f:c9:2a:ea:
9d:0a:88:69:69:0c:b3:b4:6e:c0:7f:c6:23:51:80:
20:73:41:44:4e:bc:d7:c5:04:ad:f5:58:75:fb:f5:
b9:0a:f6:e2:12:85:8b:d4:33:1a:bb:b0:62:05:0f:
f5:57:da:ff:bd:12:0a:13:db:9c:0f:c0:fe:0c:f6:
cc:aa:23:de:56:31:9d:38:f0:1d:9b:0b:7f:7f:d1:
98:a7:e2:e1:ab:a4:7f:3f:4d:56:47:1d:34:c9:c3:
41:6d:ff:83:cb:e5:d8:17:ad:4e:c4:54:08:29:5b:
6a:6e:5a:1a:e2:27:4b:d3:3e:e0:f2:b9:f8:5e:e1:
99:75:3a:79:c2:fb:af:3b:e4:a8:2c:4a:92:b3:1e:
f3:db:59:4a:96:2a:40:57:2c:8e:40:08:d5:3e:fe:
34:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BE:C5:62:3C:A5:BC:E3:E3:97:5C:6E:E0:C7:B8:9D:E7:F8:08:6B
X509v3 Authority Key Identifier:
keyid:94:A3:DB:62:B0:12:EF:07:C9:AF:E1:76:26:46:CC:71:40:80:A5:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/94A3DB62B012EF07C9AFE1762646CC714080A576.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94A3DB62B012EF07C9AFE1762646CC714080A576.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/34352e3136382e3130312e302f32342d3234203d3e20323638303838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.101.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:7b:e4:68:4c:22:de:f1:99:aa:09:97:64:ee:ec:ec:59:88:
95:4b:dc:5b:cc:00:ca:b7:e5:c9:12:a7:e1:25:81:87:90:2a:
ee:17:d9:d5:2e:fa:3b:16:0b:01:be:f0:be:af:bf:13:2b:a4:
e0:dc:41:1f:fa:58:5f:fd:06:eb:ae:02:e1:80:eb:e0:6b:5f:
1b:3a:33:21:e8:58:71:8f:84:5c:73:31:8b:55:6e:31:4f:41:
53:d4:be:60:2f:ec:76:cd:34:84:93:1e:47:d4:b8:ed:41:bb:
31:49:4a:2b:14:d0:2d:83:f2:40:87:61:53:5f:20:f3:6e:ee:
4c:49:70:82:36:ab:f0:a2:d6:b9:97:f0:3e:71:00:60:66:dd:
8d:79:cb:e4:7c:65:8e:da:48:d5:74:8e:c6:b5:c8:90:e1:1c:
5f:65:e0:95:60:04:b6:5d:9a:01:6c:85:63:64:d7:db:ec:2b:
e4:59:0c:34:af:5f:f7:7c:24:04:40:23:43:41:91:0d:8c:d1:
3a:ac:17:bf:d2:ae:d0:d5:84:1e:e4:4d:7c:4e:93:37:f0:97:
73:f3:e9:21:6d:ec:bb:50:04:31:b7:35:15:66:0a:78:d8:fa:
f8:60:1b:3e:08:cb:7a:75:4b:fc:c4:fb:ec:20:d6:d9:fa:f6:
00:d1:59:3d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYohnyS4R58Wcgt7ZzhklqnNIJkMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTRBM0RCNjJCMDEyRUYwN0M5QUZFMTc2MjY0NkNDNzE0
MDgwQTU3NjAeFw0yMzEwMjcxNTUxNTNaFw0yNDEwMjUxNTU2NTNaMDMxMTAvBgNV
BAMTKEJGQkVDNTYyM0NBNUJDRTNFMzk3NUM2RUUwQzdCODlERTdGODA4NkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU7KTfc1M8Z4LvMp8kjhtpbt65
uRQgb6nrwX/S4B5DcyNOhHpFUUEgRFOQWtaEYVIjPK+5/BWlnl7Il94PVGKMvgJz
2NdO+TyNOm//AGbZW2U/yJfDmfBGbMVLCOeVcmsDqjftT8kq6p0KiGlpDLO0bsB/
xiNRgCBzQUROvNfFBK31WHX79bkK9uIShYvUMxq7sGIFD/VX2v+9EgoT25wPwP4M
9syqI95WMZ048B2bC39/0Zin4uGrpH8/TVZHHTTJw0Ft/4PL5dgXrU7EVAgpW2pu
WhriJ0vTPuDyufhe4Zl1OnnC+6875KgsSpKzHvPbWUqWKkBXLI5ACNU+/jRfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUv77FYjylvOPjl1xu4Me4nef4CGswHwYDVR0j
BBgwFoAUlKPbYrAS7wfJr+F2JkbMcUCApXYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHZ4clVDbW5ZZVRraDFRRGpQcm9HdEJQMzNFV25BV2k0QkVGQkt0TXhy
dUUvMC85NEEzREI2MkIwMTJFRjA3QzlBRkUxNzYyNjQ2Q0M3MTQwODBBNTc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk0QTNEQjYyQjAxMkVGMDdD
OUFGRTE3NjI2NDZDQzcxNDA4MEE1NzYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R2eHJVQ21uWWVUa2gxUURqUHJvR3RCUDMzRVduQVdpNEJFRkJLdE14cnVFLzAv
MzQzNTJlMzEzNjM4MmUzMTMwMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMDM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtqGUwDQYJKoZIhvcNAQELBQADggEBAKh75GhM
It7xmaoJl2Tu7OxZiJVL3FvMAMq35ckSp+ElgYeQKu4X2dUu+jsWCwG+8L6vvxMr
pODcQR/6WF/9BuuuAuGA6+BrXxs6MyHoWHGPhFxzMYtVbjFPQVPUvmAv7HbNNIST
HkfUuO1BuzFJSisU0C2D8kCHYVNfIPNu7kxJcII2q/Ci1rmX8D5xAGBm3Y15y+R8
ZY7aSNV0jsa1yJDhHF9l4JVgBLZdmgFshWNk19vsK+RZDDSvX/d8JARAI0NBkQ2M
0TqsF7/SrtDVhB7kTXxOkzfwl3Pz6SFt7LtQBDG3NRVmCnjY+vhgGz4Iy3p1S/zE
++wg1tn69gDRWT0=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:59:02 2025 by rpki-client