![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137372e38372e3131362e302f32332d3234203d3e20323632333031.roa
File: 3137372e38372e3131362e302f32332d3234203d3e20323632333031.roa (raw, json)
Hash identifier: DBMgr6tONf/4FpyxwxfURh39pW5yyGoVcQ8NsSsK5vE=
Subject key identifier: B8:F3:9D:74:69:DA:54:D2:1C:22:E4:A2:92:4F:40:F9:27:EE:AB:65
Certificate issuer: /CN=20D0C50C62128FF4D2F9FF85B6A5784BF430123F
Certificate serial: 22171F5B0E5EEB019A1F5126CAC753A447EDCBCB
Authority key identifier: 20:D0:C5:0C:62:12:8F:F4:D2:F9:FF:85:B6:A5:78:4B:F4:30:12:3F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20D0C50C62128FF4D2F9FF85B6A5784BF430123F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137372e38372e3131362e302f32332d3234203d3e20323632333031.roa
Signing time: Tue 12 Mar 2024 12:56:53 +0000
ROA not before: Tue 12 Mar 2024 12:51:53 +0000
ROA not after: Tue 11 Mar 2025 12:56:53 +0000
asID: 262301
IP address blocks: 177.87.116.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:17:1f:5b:0e:5e:eb:01:9a:1f:51:26:ca:c7:53:a4:47:ed:cb:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20D0C50C62128FF4D2F9FF85B6A5784BF430123F
Validity
Not Before: Mar 12 12:51:53 2024 GMT
Not After : Mar 11 12:56:53 2025 GMT
Subject: CN=B8F39D7469DA54D21C22E4A2924F40F927EEAB65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a0:06:cd:12:24:c2:83:f2:b6:2f:47:b7:0c:
4e:e8:70:b2:88:12:90:7d:a7:cc:84:c3:42:c4:9f:
66:9c:17:dc:aa:80:3d:f7:0c:86:76:84:20:cc:99:
ed:2b:65:94:2a:e2:5d:9c:7c:ab:d2:80:f8:24:46:
5f:6f:18:51:0f:e5:51:b5:a4:ef:da:46:85:2c:01:
ac:44:81:a7:1b:75:12:18:5e:ec:95:d1:68:3d:d5:
70:69:86:4b:44:62:9d:96:bd:6d:a0:1a:70:22:3b:
8b:6b:b9:da:17:a8:a9:d9:d0:90:34:09:c8:ce:b0:
ac:e4:d0:80:bb:4f:d8:f7:b4:76:65:42:f4:a3:ce:
14:7e:4b:49:13:76:de:40:78:0e:8f:bb:be:b1:38:
64:69:aa:bb:40:86:a6:5c:1e:99:ea:d4:d6:0a:ee:
90:2d:1f:46:00:61:d7:da:49:e1:28:37:c3:52:c6:
a9:f2:13:1d:59:d1:e3:72:ac:be:34:be:88:32:3e:
1d:b9:9c:fa:95:a1:3c:5c:ea:f9:78:c1:a5:41:45:
a5:20:43:92:81:b1:9a:47:c5:10:9a:b8:2c:c2:d4:
53:ee:ed:21:46:05:1b:8d:cf:40:c3:0c:b2:21:45:
61:c9:d3:30:8e:e2:f5:d2:f0:a4:72:8e:74:70:42:
b3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F3:9D:74:69:DA:54:D2:1C:22:E4:A2:92:4F:40:F9:27:EE:AB:65
X509v3 Authority Key Identifier:
keyid:20:D0:C5:0C:62:12:8F:F4:D2:F9:FF:85:B6:A5:78:4B:F4:30:12:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/20D0C50C62128FF4D2F9FF85B6A5784BF430123F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20D0C50C62128FF4D2F9FF85B6A5784BF430123F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137372e38372e3131362e302f32332d3234203d3e20323632333031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.87.116.0/23
Signature Algorithm: sha256WithRSAEncryption
91:06:99:6a:34:8e:ff:dc:f5:56:88:36:93:d7:9c:83:62:1b:
21:3b:77:7b:7b:de:94:0b:3d:5f:0f:85:f0:f6:20:c4:b1:39:
20:1c:75:0b:de:8f:46:c6:b4:7f:fb:74:41:4c:ae:b0:bb:bb:
63:e3:96:03:26:f2:82:b2:1a:ef:3a:ae:41:84:27:82:d0:30:
76:45:d5:ff:3f:7d:33:04:51:a6:bb:bf:52:c0:e8:da:08:b9:
1b:92:9f:7d:73:b1:19:ed:94:d0:e1:c4:fb:f7:c4:a2:27:7e:
cf:64:3a:0c:0e:98:78:cf:ad:44:4e:4f:02:ba:6b:ee:05:88:
33:a7:09:44:43:1b:e7:73:6d:d1:6b:f3:56:f5:90:71:e7:99:
d2:e7:a9:94:d6:cc:9d:98:ab:ac:66:2f:d2:0a:6f:fa:a2:c4:
ae:fe:53:29:99:56:09:7a:8d:17:8f:3f:01:f4:dc:61:85:86:
31:c4:f6:ed:65:d4:a5:e0:9f:46:72:43:46:7b:2f:97:6b:0f:
8c:43:b8:e0:f2:59:0c:53:c6:3e:f8:e0:2a:39:f5:d9:d0:8e:
a1:ef:96:1f:7b:3d:dd:57:a1:27:8a:70:0a:ed:8c:7d:1c:06:
e2:2e:f1:98:62:c2:8f:73:cc:14:b3:94:8e:92:b0:30:83:6f:
40:06:92:9a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIhcfWw5e6wGaH1EmysdTpEfty8swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBEMEM1MEM2MjEyOEZGNEQyRjlGRjg1QjZBNTc4NEJG
NDMwMTIzRjAeFw0yNDAzMTIxMjUxNTNaFw0yNTAzMTExMjU2NTNaMDMxMTAvBgNV
BAMTKEI4RjM5RDc0NjlEQTU0RDIxQzIyRTRBMjkyNEY0MEY5MjdFRUFCNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZoAbNEiTCg/K2L0e3DE7ocLKI
EpB9p8yEw0LEn2acF9yqgD33DIZ2hCDMme0rZZQq4l2cfKvSgPgkRl9vGFEP5VG1
pO/aRoUsAaxEgacbdRIYXuyV0Wg91XBphktEYp2WvW2gGnAiO4trudoXqKnZ0JA0
CcjOsKzk0IC7T9j3tHZlQvSjzhR+S0kTdt5AeA6Pu76xOGRpqrtAhqZcHpnq1NYK
7pAtH0YAYdfaSeEoN8NSxqnyEx1Z0eNyrL40vogyPh25nPqVoTxc6vl4waVBRaUg
Q5KBsZpHxRCauCzC1FPu7SFGBRuNz0DDDLIhRWHJ0zCO4vXS8KRyjnRwQrM5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUuPOddGnaVNIcIuSikk9A+Sfuq2UwHwYDVR0j
BBgwFoAUINDFDGISj/TS+f+FtqV4S/QwEj8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVhjUzcxVEtaMjJkenlNUU51dkhha2M5UGJBQkNyRHFxZmpCTm9GeWFI
eUgvMC8yMEQwQzUwQzYyMTI4RkY0RDJGOUZGODVCNkE1Nzg0QkY0MzAxMjNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzIwRDBDNTBDNjIxMjhGRjRE
MkY5RkY4NUI2QTU3ODRCRjQzMDEyM0YuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VYY1M3MVRLWjIyZHp5TVFOdXZIYWtjOVBiQUJDckRxcWZqQk5vRnlhSHlILzAv
MzEzNzM3MmUzODM3MmUzMTMxMzYyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM2
MzIzMzMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxV3QwDQYJKoZIhvcNAQELBQADggEBAJEGmWo0
jv/c9VaINpPXnINiGyE7d3t73pQLPV8PhfD2IMSxOSAcdQvej0bGtH/7dEFMrrC7
u2PjlgMm8oKyGu86rkGEJ4LQMHZF1f8/fTMEUaa7v1LA6NoIuRuSn31zsRntlNDh
xPv3xKInfs9kOgwOmHjPrUROTwK6a+4FiDOnCURDG+dzbdFr81b1kHHnmdLnqZTW
zJ2Yq6xmL9IKb/qixK7+UymZVgl6jRePPwH03GGFhjHE9u1l1KXgn0ZyQ0Z7L5dr
D4xDuODyWQxTxj744Co59dnQjqHvlh97Pd1XoSeKcArtjH0cBuIu8Zhiwo9zzBSz
lI6SsDCDb0AGkpo=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:15 2025 by rpki-client