![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/3137302e38332e36382e302f32322d3234203d3e203631373534.roa
File: 3137302e38332e36382e302f32322d3234203d3e203631373534.roa (raw, json)
Hash identifier: UAViOZHYAoqmIxNKYvvWTTI4hS1u2OfuBGJkRtC9mgM=
Subject key identifier: 28:D6:1D:4F:01:76:33:5A:CA:14:3C:BB:BE:6D:A4:19:5F:CE:95:1B
Certificate issuer: /CN=107B680E5B5FB305DB89311B48605A8468508948
Certificate serial: 115AD18FFE90B1D9E0D78A450A3669F09E9EE4DE
Authority key identifier: 10:7B:68:0E:5B:5F:B3:05:DB:89:31:1B:48:60:5A:84:68:50:89:48
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/107B680E5B5FB305DB89311B48605A8468508948.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/3137302e38332e36382e302f32322d3234203d3e203631373534.roa
Signing time: Fri 16 Feb 2024 23:09:25 +0000
ROA not before: Fri 16 Feb 2024 23:04:25 +0000
ROA not after: Fri 14 Feb 2025 23:09:25 +0000
asID: 61754
IP address blocks: 170.83.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:5a:d1:8f:fe:90:b1:d9:e0:d7:8a:45:0a:36:69:f0:9e:9e:e4:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107B680E5B5FB305DB89311B48605A8468508948
Validity
Not Before: Feb 16 23:04:25 2024 GMT
Not After : Feb 14 23:09:25 2025 GMT
Subject: CN=28D61D4F0176335ACA143CBBBE6DA4195FCE951B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f8:1e:b6:08:6f:f1:24:ba:9b:af:59:e7:59:
b7:2a:ea:60:c0:fa:20:27:70:bb:d6:cb:2a:11:5b:
75:b8:b4:e4:b1:39:94:db:ac:2c:92:98:dc:2c:b8:
19:30:27:f4:f6:49:b4:75:6e:f4:09:18:d4:f0:98:
5f:f8:ed:af:c7:f5:05:43:e1:72:e3:50:f0:e8:4e:
a9:fb:6f:a4:b7:58:59:b7:5b:6c:f8:bb:55:66:3c:
46:eb:55:47:c5:cf:3f:a8:c9:a7:62:29:c5:e5:ef:
4a:21:68:5c:69:65:89:25:2a:fe:5e:40:da:2b:f5:
9b:91:b2:23:49:4b:94:ce:d5:cb:45:62:f9:3e:7e:
d6:35:24:66:bf:32:d8:19:91:51:01:b3:d5:66:47:
15:8c:06:86:2e:57:f0:85:e4:0f:f9:26:c6:bb:45:
c6:ba:a3:7b:f1:b6:24:94:38:59:ad:ce:7f:0b:81:
04:0a:97:cf:c0:54:a7:28:6b:50:e7:d7:3c:17:46:
93:35:76:fc:c4:03:a8:ac:ac:60:23:6b:31:14:1c:
6c:35:28:88:01:83:88:f9:e3:3a:bd:80:74:fb:57:
81:31:92:f4:ce:e4:69:ca:3e:2b:f5:5c:98:f0:72:
6c:9f:5f:ac:8c:ab:c0:4e:bf:3f:85:c2:4d:fd:c5:
42:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D6:1D:4F:01:76:33:5A:CA:14:3C:BB:BE:6D:A4:19:5F:CE:95:1B
X509v3 Authority Key Identifier:
keyid:10:7B:68:0E:5B:5F:B3:05:DB:89:31:1B:48:60:5A:84:68:50:89:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/107B680E5B5FB305DB89311B48605A8468508948.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/107B680E5B5FB305DB89311B48605A8468508948.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/3137302e38332e36382e302f32322d3234203d3e203631373534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.83.68.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:ca:2f:17:0a:d2:da:a7:03:ba:f7:76:9c:96:c0:92:3f:de:
bd:53:75:65:93:93:f0:34:d7:a1:31:95:19:4a:40:82:e6:a2:
3b:21:35:4d:7c:1d:ad:fe:10:73:11:ac:61:32:d0:04:5e:e4:
44:69:15:07:74:93:57:43:17:99:bf:35:4f:46:1b:67:64:dd:
21:18:ef:b3:d9:7d:c3:03:0f:96:97:7d:24:f8:4b:48:3a:b1:
fe:1b:2a:92:06:e3:a7:c7:1f:34:f3:55:dd:62:26:3f:35:40:
50:9e:5b:5d:35:24:d0:c9:76:64:6b:bb:0c:53:fb:3e:21:60:
96:2a:92:41:60:83:d9:6e:1e:43:6b:bf:13:78:6f:30:c6:71:
1c:21:68:dc:0a:db:23:bc:58:e9:56:0c:48:b4:ae:a7:f0:ac:
01:7c:82:4a:7a:d8:6b:74:30:9f:04:bb:57:ec:f8:4e:5c:6c:
cb:a0:ad:e1:b2:12:de:ba:e1:13:a0:45:21:da:42:59:f0:f5:
6c:a0:72:09:d1:27:0d:86:37:40:82:26:51:f7:7e:d5:ac:7d:
3c:ab:0f:82:b4:f3:31:2d:2e:27:c9:d8:d4:fa:eb:a6:71:3d:
fa:92:50:8e:4c:11:51:fb:8f:ac:71:39:98:c6:2d:e7:24:93:
98:76:58:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:58:42 2025 by rpki-client