![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3230312e3135392e3131372e302f32342d3234203d3e20323632353335.roa
File: 3230312e3135392e3131372e302f32342d3234203d3e20323632353335.roa (raw, json)
Hash identifier: zCeJrkSbPCLwh3oNrVmF+bjKeU0UQXUQCNBbEoujI+g=
Subject key identifier: 75:60:9F:31:85:89:57:04:6F:94:50:AE:18:60:25:8B:9E:80:33:9C
Certificate issuer: /CN=0F9446CA777E0CEA27C32FB15199BBBBEB2BBFFE
Certificate serial: 72BBDD76CEF79588C424C9D6387DC8E4BCBAAE32
Authority key identifier: 0F:94:46:CA:77:7E:0C:EA:27:C3:2F:B1:51:99:BB:BB:EB:2B:BF:FE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F9446CA777E0CEA27C32FB15199BBBBEB2BBFFE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3230312e3135392e3131372e302f32342d3234203d3e20323632353335.roa
Signing time: Wed 11 Jan 2023 18:50:35 +0000
ROA not before: Wed 11 Jan 2023 18:45:35 +0000
ROA not after: Wed 10 Jan 2024 18:50:35 +0000
asID: 262535
IP address blocks: 201.159.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:bb:dd:76:ce:f7:95:88:c4:24:c9:d6:38:7d:c8:e4:bc:ba:ae:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0F9446CA777E0CEA27C32FB15199BBBBEB2BBFFE
Validity
Not Before: Jan 11 18:45:35 2023 GMT
Not After : Jan 10 18:50:35 2024 GMT
Subject: CN=75609F31858957046F9450AE1860258B9E80339C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f0:40:31:1d:02:9e:53:c4:30:f8:28:1b:e7:
69:36:9c:d1:ed:ee:f2:1e:0e:8d:06:7b:42:3c:97:
e7:5f:8d:a0:54:b3:18:dc:37:f3:ac:44:84:b5:3c:
b5:60:f7:25:62:55:67:b0:b1:8a:f5:02:51:ed:2c:
b7:c3:90:ff:d6:df:a0:a0:27:a3:8b:0d:07:18:51:
c6:dc:66:8e:65:ef:e0:48:2f:6d:a1:26:09:f9:72:
9e:72:40:f1:83:b8:00:d1:e4:c6:c9:ff:40:93:13:
0e:84:c5:25:c1:dc:63:50:28:67:7a:f1:16:10:8f:
0d:23:6d:bd:a1:7b:70:c3:0d:9d:45:b8:3e:b0:be:
12:16:b1:28:d8:eb:9e:63:04:64:ff:39:2b:c3:21:
7e:31:4b:26:45:8d:91:64:d3:59:43:4f:74:39:8f:
1d:ad:05:94:c6:c2:d5:fd:cb:42:4a:3f:fb:3c:2f:
c7:b4:2e:ef:17:42:d6:7d:60:d1:e4:2a:5d:d9:6c:
76:db:a1:d9:ef:ea:ad:5c:86:ae:d8:49:c0:51:fb:
a4:c8:63:e4:2a:f6:5e:a0:6b:71:6b:7a:68:ad:12:
0c:f1:cf:c5:1b:9b:b9:4f:59:93:8b:49:9a:d8:05:
f9:6e:d6:d3:e4:70:e9:60:27:cc:b7:66:2b:cc:98:
e5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:60:9F:31:85:89:57:04:6F:94:50:AE:18:60:25:8B:9E:80:33:9C
X509v3 Authority Key Identifier:
keyid:0F:94:46:CA:77:7E:0C:EA:27:C3:2F:B1:51:99:BB:BB:EB:2B:BF:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/0F9446CA777E0CEA27C32FB15199BBBBEB2BBFFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F9446CA777E0CEA27C32FB15199BBBBEB2BBFFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3230312e3135392e3131372e302f32342d3234203d3e20323632353335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.159.117.0/24
Signature Algorithm: sha256WithRSAEncryption
06:3c:43:e8:87:76:c7:da:79:91:3e:e3:b4:be:38:93:12:12:
6b:80:f4:f4:db:e0:2c:7d:b1:f6:e0:91:2c:ab:02:69:3c:55:
e3:b6:fd:f7:27:b6:0f:3b:c3:9c:ab:f7:8e:b4:0d:a5:a6:49:
2b:c5:a4:83:0e:e5:1a:7a:42:c3:d7:cd:d1:78:72:bf:11:6f:
e3:70:db:fa:ac:c8:64:3e:f8:09:1e:77:23:7f:e0:bb:2f:11:
3c:08:0e:64:35:8e:98:64:fb:10:e9:b7:83:c7:68:57:8c:05:
78:77:6d:d3:79:6f:38:b5:9b:77:2f:48:67:60:3f:72:78:f3:
58:de:87:13:62:42:ba:fb:30:1c:2f:7d:1f:8d:0d:b8:51:cb:
e8:b6:cb:44:2e:49:a0:5c:85:32:83:4c:3c:d7:b9:63:25:90:
ef:49:bf:fa:b0:e4:a2:a8:ae:3d:04:2e:24:f1:7e:1f:d3:4f:
0f:d6:85:9e:48:e7:63:cd:a4:e3:82:c5:88:0d:73:9a:f7:89:
e3:52:87:77:2b:dd:18:10:aa:10:97:f0:e6:fe:c1:6c:b7:e3:
19:fe:bb:d1:7d:d1:c8:46:20:79:38:c7:de:eb:a7:3a:f5:50:
7b:39:fd:be:e2:3b:bb:fa:c7:f4:7d:f7:be:8e:ee:fe:bd:16:
fa:73:e8:dd
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUcrvdds73lYjEJMnWOH3I5Ly6rjIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEY5NDQ2Q0E3NzdFMENFQTI3QzMyRkIxNTE5OUJCQkJF
QjJCQkZGRTAeFw0yMzAxMTExODQ1MzVaFw0yNDAxMTAxODUwMzVaMDMxMTAvBgNV
BAMTKDc1NjA5RjMxODU4OTU3MDQ2Rjk0NTBBRTE4NjAyNThCOUU4MDMzOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC98EAxHQKeU8Qw+Cgb52k2nNHt
7vIeDo0Ge0I8l+dfjaBUsxjcN/OsRIS1PLVg9yViVWewsYr1AlHtLLfDkP/W36Cg
J6OLDQcYUcbcZo5l7+BIL22hJgn5cp5yQPGDuADR5MbJ/0CTEw6ExSXB3GNQKGd6
8RYQjw0jbb2he3DDDZ1FuD6wvhIWsSjY655jBGT/OSvDIX4xSyZFjZFk01lDT3Q5
jx2tBZTGwtX9y0JKP/s8L8e0Lu8XQtZ9YNHkKl3ZbHbbodnv6q1chq7YScBR+6TI
Y+Qq9l6ga3FremitEgzxz8Ubm7lPWZOLSZrYBflu1tPkcOlgJ8y3ZivMmOUDAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUdWCfMYWJVwRvlFCuGGAli56AM5wwHwYDVR0j
BBgwFoAUD5RGynd+DOonwy+xUZm7u+srv/4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXFtMkFvNDVtOWI3a3JDQm91UWtyWTdSVjlYVzZwV1p1cnIxRXM1R2d4
cmkvMC8wRjk0NDZDQTc3N0UwQ0VBMjdDMzJGQjE1MTk5QkJCQkVCMkJCRkZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBGOTQ0NkNBNzc3RTBDRUEy
N0MzMkZCMTUxOTlCQkJCRUIyQkJGRkUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VxbTJBbzQ1bTliN2tyQ0JvdVFrclk3UlY5WFc2cFdadXJyMUVzNUdneHJpLzAv
MzIzMDMxMmUzMTM1MzkyZTMxMzEzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM1MzMzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMmfdTANBgkqhkiG9w0BAQsFAAOCAQEABjxD
6Id2x9p5kT7jtL44kxISa4D09NvgLH2x9uCRLKsCaTxV47b99ye2DzvDnKv3jrQN
paZJK8Wkgw7lGnpCw9fN0XhyvxFv43Db+qzIZD74CR53I3/guy8RPAgOZDWOmGT7
EOm3g8doV4wFeHdt03lvOLWbdy9IZ2A/cnjzWN6HE2JCuvswHC99H40NuFHL6LbL
RC5JoFyFMoNMPNe5YyWQ70m/+rDkoqiuPQQuJPF+H9NPD9aFnkjnY82k44LFiA1z
mveJ41KHdyvdGBCqEJfw5v7BbLfjGf670X3RyEYgeTjH3uunOvVQezn9vuI7u/rH
9H33vo7u/r0W+nPo3Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:52 2024 by rpki-client on console-ams.rpki-client.org