![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/0/3137302e38322e3232302e302f32322d3232203d3e20323636343438.roa
File: 3137302e38322e3232302e302f32322d3232203d3e20323636343438.roa (raw, json)
Hash identifier: 2QFyskvirZHKV0T5rk6VLa5kq9OUkr/zaOFdv22tkMo=
Subject key identifier: 57:0B:B3:71:5E:DE:DB:AB:62:2F:56:2A:20:A6:A8:D4:2F:16:E6:77
Certificate issuer: /CN=10DEC0A55B9A627408EE1F1B0E2C098588812FB5
Certificate serial: 47C2229E4129A0E2EF7F412BD283E8AB8058A1AD
Authority key identifier: 10:DE:C0:A5:5B:9A:62:74:08:EE:1F:1B:0E:2C:09:85:88:81:2F:B5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10DEC0A55B9A627408EE1F1B0E2C098588812FB5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/0/3137302e38322e3232302e302f32322d3232203d3e20323636343438.roa
Signing time: Mon 04 Mar 2024 19:23:18 +0000
ROA not before: Mon 04 Mar 2024 19:18:18 +0000
ROA not after: Mon 03 Mar 2025 19:23:18 +0000
asID: 266448
IP address blocks: 170.82.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:c2:22:9e:41:29:a0:e2:ef:7f:41:2b:d2:83:e8:ab:80:58:a1:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10DEC0A55B9A627408EE1F1B0E2C098588812FB5
Validity
Not Before: Mar 4 19:18:18 2024 GMT
Not After : Mar 3 19:23:18 2025 GMT
Subject: CN=570BB3715EDEDBAB622F562A20A6A8D42F16E677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a2:22:0f:26:a1:26:c8:a4:1c:ba:aa:f2:06:
2b:7d:45:26:bc:58:3c:ac:22:40:d3:c5:e5:61:af:
06:00:18:16:f2:b4:f6:9c:0e:db:30:9d:a8:1b:55:
70:8b:50:ca:aa:fa:7d:21:1a:60:29:02:08:24:ce:
ec:a7:e3:da:e7:aa:4d:00:02:4d:07:65:6c:ae:53:
13:5f:bc:08:47:b3:da:43:4b:ee:8e:00:fe:fa:c9:
32:d9:a2:0b:2b:7c:23:75:66:66:f4:40:b6:1e:45:
50:0c:9b:4f:16:a8:e4:60:19:67:44:fb:1d:8a:99:
47:1d:23:6a:e4:01:01:65:72:de:b9:71:98:2d:9c:
da:c4:57:1b:cf:ac:ac:4e:b0:f4:1d:12:6d:81:78:
79:6f:4d:ff:84:44:3d:35:0c:b7:1d:4f:2b:03:da:
12:12:f1:7b:1b:9c:98:80:df:db:43:0c:c6:b7:2b:
ca:4c:90:da:95:72:bb:00:3a:4f:bc:86:08:f6:32:
ad:a1:cd:80:b0:dc:64:fb:1c:6b:05:a9:22:4f:59:
52:1f:e2:5a:38:4a:cc:69:5c:20:f0:6b:b5:e1:7f:
f5:5b:bd:ac:77:c0:40:92:e8:ef:ac:db:c1:64:63:
fb:08:f7:1f:dd:2d:81:c9:98:a6:0d:31:2d:b5:04:
66:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0B:B3:71:5E:DE:DB:AB:62:2F:56:2A:20:A6:A8:D4:2F:16:E6:77
X509v3 Authority Key Identifier:
keyid:10:DE:C0:A5:5B:9A:62:74:08:EE:1F:1B:0E:2C:09:85:88:81:2F:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/0/10DEC0A55B9A627408EE1F1B0E2C098588812FB5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10DEC0A55B9A627408EE1F1B0E2C098588812FB5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/0/3137302e38322e3232302e302f32322d3232203d3e20323636343438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.82.220.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:31:28:a5:24:95:53:77:40:51:9e:45:15:a7:7b:f1:bf:f5:
56:0a:e2:8b:05:0a:3e:6f:bc:04:fe:48:f9:a2:fb:4e:ae:78:
6b:0d:f9:f9:52:0d:74:b7:0f:a5:23:9d:a0:aa:73:17:82:39:
d1:bd:19:86:a8:7b:1b:31:bc:9a:1d:0f:19:03:7b:8a:50:a9:
05:e5:3b:bf:e5:80:de:67:57:f0:1e:99:ea:03:66:19:3c:a9:
5f:5c:64:38:7d:f5:4d:92:34:0c:0a:d2:6a:59:68:f9:08:2c:
ed:87:dd:3a:bf:61:e9:25:c5:dd:16:1b:54:32:c0:9a:ad:e6:
bd:69:8d:c4:88:a2:30:96:e5:61:99:17:fd:96:af:e2:65:68:
25:f4:d3:26:7b:c4:a2:b7:b9:2c:99:d3:b0:98:74:1d:c1:0c:
77:95:ad:22:b5:77:0c:31:b8:48:9d:c0:18:94:57:27:d1:c2:
99:d0:4a:94:fe:2b:e7:4f:e1:31:42:f6:2e:c6:a2:48:cd:11:
6a:4e:76:0c:e4:c5:bf:1c:24:a6:85:41:95:d0:7e:e9:97:65:
c6:ac:d0:59:13:39:37:d8:31:69:8f:5b:37:bd:bd:8a:61:3c:
f3:97:ea:d2:44:b8:73:52:99:bb:a2:96:aa:35:8e:2e:11:41:
0d:c9:08:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:31 2025 by rpki-client