![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/3136382e3230352e38352e302f32342d3234203d3e203532373830.roa
File: 3136382e3230352e38352e302f32342d3234203d3e203532373830.roa (raw, json)
Hash identifier: Q+BdXVyvt4eF+R7CalkZx60jMajawbzT950+JKYruIE=
Subject key identifier: 04:85:9F:69:8F:67:56:18:60:ED:62:BF:1B:92:04:F3:5F:91:23:A9
Certificate issuer: /CN=94FF6D82FE05B1D7F21EA98687FFC98088B59B64
Certificate serial: 67FE65E78AE9727F1D7CFCF85839F4E51F7A2C32
Authority key identifier: 94:FF:6D:82:FE:05:B1:D7:F2:1E:A9:86:87:FF:C9:80:88:B5:9B:64
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94FF6D82FE05B1D7F21EA98687FFC98088B59B64.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/3136382e3230352e38352e302f32342d3234203d3e203532373830.roa
Signing time: Wed 06 Mar 2024 18:02:12 +0000
ROA not before: Wed 06 Mar 2024 17:57:12 +0000
ROA not after: Wed 05 Mar 2025 18:02:12 +0000
asID: 52780
IP address blocks: 168.205.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:fe:65:e7:8a:e9:72:7f:1d:7c:fc:f8:58:39:f4:e5:1f:7a:2c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94FF6D82FE05B1D7F21EA98687FFC98088B59B64
Validity
Not Before: Mar 6 17:57:12 2024 GMT
Not After : Mar 5 18:02:12 2025 GMT
Subject: CN=04859F698F67561860ED62BF1B9204F35F9123A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:af:99:72:b5:3b:1f:5c:4f:6d:f0:c9:e2:ca:
e9:45:32:fe:c6:a9:82:7f:73:73:35:09:56:5f:d0:
81:b1:1e:69:23:ce:fc:f3:36:81:86:43:ed:64:f3:
a7:1a:b9:c3:7f:65:9a:a2:a3:70:ae:7d:c5:af:7e:
97:e6:cf:95:d0:51:b0:e1:32:aa:f0:01:d4:cf:47:
d0:7e:db:e9:c0:e2:8f:3c:7f:bc:a1:d6:56:a5:81:
69:de:29:f7:74:01:dd:b9:60:36:c2:38:8d:b7:18:
ff:66:4e:4b:c5:6b:fa:13:ea:44:5d:c3:e6:97:28:
64:f6:83:39:14:c8:f8:91:ea:2d:43:05:f2:98:b2:
65:bd:e5:69:b9:70:dc:1b:8b:86:19:3b:24:a1:fa:
f9:24:a2:d2:91:eb:08:0b:34:2f:77:57:c3:a8:79:
41:18:36:e4:be:a6:be:6c:9c:3c:80:30:68:98:05:
54:3b:86:a8:88:dc:10:9d:3d:8d:dd:00:bc:50:6c:
09:23:51:c0:c6:43:9b:17:23:f7:f5:34:3f:77:ca:
bd:d3:8d:ba:48:f5:33:27:2b:92:99:24:36:cb:1b:
0d:18:f2:ae:7c:1f:3e:42:3b:bf:f2:1b:10:0f:1b:
98:95:65:16:6f:3f:c7:e6:23:be:cf:e6:cc:4d:4c:
72:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:85:9F:69:8F:67:56:18:60:ED:62:BF:1B:92:04:F3:5F:91:23:A9
X509v3 Authority Key Identifier:
keyid:94:FF:6D:82:FE:05:B1:D7:F2:1E:A9:86:87:FF:C9:80:88:B5:9B:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/94FF6D82FE05B1D7F21EA98687FFC98088B59B64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94FF6D82FE05B1D7F21EA98687FFC98088B59B64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/3136382e3230352e38352e302f32342d3234203d3e203532373830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.205.85.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:25:a4:1b:76:45:7e:be:13:54:9f:09:8d:7a:70:a2:6e:82:
01:c5:d9:8f:46:4d:18:9a:6b:87:20:81:94:bf:4a:f4:cc:83:
e8:24:0e:5c:19:c1:bb:e9:30:0f:44:b2:7a:dc:88:17:16:37:
6b:16:9b:58:1d:42:a0:94:7d:5d:5a:d9:18:92:56:a4:78:36:
6f:c7:15:8f:6c:08:de:ca:b4:d9:8a:68:fa:b5:40:3c:a4:8f:
2d:ed:52:16:3b:ac:5e:6b:69:c3:7d:1a:4a:11:ea:1e:e0:b8:
eb:e1:72:78:52:9d:81:4c:66:d9:73:04:09:ac:89:e9:34:23:
4e:f9:1f:fd:ea:8f:6d:81:0e:1c:47:51:ee:28:13:5a:c0:32:
04:e3:38:c8:f9:ef:7d:ba:71:4d:ae:8f:f2:2d:2c:bf:21:26:
34:67:be:78:1f:67:49:3f:6d:e9:99:e1:02:55:25:aa:30:1c:
83:0a:4f:93:65:40:8c:36:1e:85:35:bc:e8:b9:00:b9:0c:89:
b0:f0:09:3b:41:9b:04:04:f2:ff:6c:e1:13:a7:b6:5d:03:22:
ba:f2:c3:0d:60:f7:76:5a:72:ad:67:c4:6e:d4:d6:87:d7:21:
2e:7d:16:24:bc:7b:31:8b:9a:78:85:ae:17:dd:f5:ac:3b:32:
8e:a1:f9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:08 2025 by rpki-client