![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/0/34352e37312e3131362e302f32322d3234203d3e20323637363035.roa
File: 34352e37312e3131362e302f32322d3234203d3e20323637363035.roa (raw, json)
Hash identifier: gtPhbyMIaSrkRGn9D0O8zO7k/+o7xQjuVDpBluf6YCc=
Subject key identifier: 1A:BC:28:E8:19:0E:49:56:1F:50:44:62:60:B5:7E:EC:A5:F9:BF:6C
Certificate issuer: /CN=47D8D5FEE9032D80A186B4EBC0BF422F045F309B
Certificate serial: 12D7214687C276E3565A33FFB3E6042890D4EB9C
Authority key identifier: 47:D8:D5:FE:E9:03:2D:80:A1:86:B4:EB:C0:BF:42:2F:04:5F:30:9B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47D8D5FEE9032D80A186B4EBC0BF422F045F309B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/0/34352e37312e3131362e302f32322d3234203d3e20323637363035.roa
Signing time: Tue 19 Mar 2024 18:57:01 +0000
ROA not before: Tue 19 Mar 2024 18:52:01 +0000
ROA not after: Tue 18 Mar 2025 18:57:01 +0000
asID: 267605
IP address blocks: 45.71.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:d7:21:46:87:c2:76:e3:56:5a:33:ff:b3:e6:04:28:90:d4:eb:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47D8D5FEE9032D80A186B4EBC0BF422F045F309B
Validity
Not Before: Mar 19 18:52:01 2024 GMT
Not After : Mar 18 18:57:01 2025 GMT
Subject: CN=1ABC28E8190E49561F50446260B57EECA5F9BF6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b3:4e:2b:6f:96:23:03:6c:b7:8d:23:0a:69:
35:80:c1:c5:28:b5:43:81:81:1f:0e:14:c4:47:0f:
92:96:9c:d8:0f:5a:5d:d0:c7:94:77:c0:ec:ef:01:
b0:1d:e5:e2:14:d2:12:4e:5e:3c:e2:8d:79:10:6a:
ab:eb:29:fc:bd:4c:82:7a:52:63:eb:c3:96:7c:2f:
b4:9c:2d:38:a6:0e:32:36:56:d3:e7:da:c4:13:a1:
21:d5:98:c6:54:e1:fd:5e:c2:c6:32:1e:97:24:97:
2a:59:1d:44:fc:ef:31:f2:cf:a2:91:bb:cd:e4:70:
48:0b:f0:48:ce:d4:37:33:ea:87:f6:3c:ea:f7:24:
0c:5d:6f:1f:1c:7e:83:db:61:c8:be:5c:0e:02:78:
b8:73:20:c9:7e:cf:aa:23:2a:50:54:0e:a7:94:a9:
b5:f6:11:6b:64:73:69:64:07:2a:fc:ca:cc:31:b1:
af:50:1d:b3:a4:e7:ce:0e:2b:d9:6c:55:c5:20:27:
6a:57:31:8c:2b:2d:16:81:0a:ce:1e:0d:ab:ac:fc:
bf:ee:61:8b:c1:4b:26:65:0e:53:77:b8:aa:29:30:
12:07:ce:1c:4d:d9:ff:ad:d4:2b:0a:7d:97:99:10:
48:84:43:c5:0c:10:dd:d6:b6:25:1b:32:1b:19:3d:
37:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BC:28:E8:19:0E:49:56:1F:50:44:62:60:B5:7E:EC:A5:F9:BF:6C
X509v3 Authority Key Identifier:
keyid:47:D8:D5:FE:E9:03:2D:80:A1:86:B4:EB:C0:BF:42:2F:04:5F:30:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/0/47D8D5FEE9032D80A186B4EBC0BF422F045F309B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47D8D5FEE9032D80A186B4EBC0BF422F045F309B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/0/34352e37312e3131362e302f32322d3234203d3e20323637363035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.116.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:50:9a:d1:dc:e9:2f:f3:05:67:17:e8:fd:6e:a6:1a:18:e7:
3f:3b:ab:f6:e2:cd:a5:1e:30:21:d9:31:17:ff:aa:22:d5:3a:
b0:73:24:6c:45:38:d2:09:92:1c:df:14:44:d3:9f:9c:a5:41:
a2:09:c2:64:68:b1:5b:ba:a3:b9:88:90:83:07:a3:89:9b:8c:
a4:9a:0f:48:d9:6e:f2:25:76:71:b6:34:78:43:86:41:92:d0:
d2:cf:07:4c:3b:d0:96:88:f3:55:0f:bb:98:2b:ba:69:48:e2:
f4:cb:92:56:b2:de:ed:5f:89:92:3d:41:c5:73:9f:66:3d:e4:
da:bd:81:26:dd:89:fb:6d:07:2b:36:ec:d3:4f:7e:59:24:8d:
c9:8a:c8:a2:2b:9f:24:72:0f:fa:d2:34:6b:6c:66:fd:d5:59:
ab:b7:dd:0d:94:04:92:17:90:b5:43:bc:3f:1b:38:79:5b:db:
f1:a7:74:e1:3f:19:39:98:66:55:7b:26:8b:7e:33:0e:fe:2d:
79:1f:8a:45:24:c0:f6:a6:91:43:1d:26:de:83:e7:01:c8:c4:
eb:bd:d0:97:a4:8f:a6:47:22:cc:75:74:6a:8d:69:b5:72:9f:
8d:ce:04:37:d1:91:0a:71:80:e9:2c:9e:9f:16:49:49:e3:73:
55:ad:74:a6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEtchRofCduNWWjP/s+YEKJDU65wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdEOEQ1RkVFOTAzMkQ4MEExODZCNEVCQzBCRjQyMkYw
NDVGMzA5QjAeFw0yNDAzMTkxODUyMDFaFw0yNTAzMTgxODU3MDFaMDMxMTAvBgNV
BAMTKDFBQkMyOEU4MTkwRTQ5NTYxRjUwNDQ2MjYwQjU3RUVDQTVGOUJGNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCms04rb5YjA2y3jSMKaTWAwcUo
tUOBgR8OFMRHD5KWnNgPWl3Qx5R3wOzvAbAd5eIU0hJOXjzijXkQaqvrKfy9TIJ6
UmPrw5Z8L7ScLTimDjI2VtPn2sQToSHVmMZU4f1ewsYyHpcklypZHUT87zHyz6KR
u83kcEgL8EjO1Dcz6of2POr3JAxdbx8cfoPbYci+XA4CeLhzIMl+z6ojKlBUDqeU
qbX2EWtkc2lkByr8yswxsa9QHbOk584OK9lsVcUgJ2pXMYwrLRaBCs4eDaus/L/u
YYvBSyZlDlN3uKopMBIHzhxN2f+t1CsKfZeZEEiEQ8UMEN3WtiUbMhsZPTeBAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUGrwo6BkOSVYfUERiYLV+7KX5v2wwHwYDVR0j
BBgwFoAUR9jV/ukDLYChhrTrwL9CLwRfMJswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkN4dE5pa0xaZEZ3RUZiQ3hxU2QzVkxKREN2RVBvQWkxVXN0MkxZelpt
N0cvMC80N0Q4RDVGRUU5MDMyRDgwQTE4NkI0RUJDMEJGNDIyRjA0NUYzMDlCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ3RDhENUZFRTkwMzJEODBB
MTg2QjRFQkMwQkY0MjJGMDQ1RjMwOUIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZDeHROaWtMWmRGd0VGYkN4cVNkM1ZMSkRDdkVQb0FpMVVzdDJMWXpabTdHLzAv
MzQzNTJlMzczMTJlMzEzMTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3
MzYzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLUd0MA0GCSqGSIb3DQEBCwUAA4IBAQBaUJrR3Okv
8wVnF+j9bqYaGOc/O6v24s2lHjAh2TEX/6oi1TqwcyRsRTjSCZIc3xRE05+cpUGi
CcJkaLFbuqO5iJCDB6OJm4ykmg9I2W7yJXZxtjR4Q4ZBktDSzwdMO9CWiPNVD7uY
K7ppSOL0y5JWst7tX4mSPUHFc59mPeTavYEm3Yn7bQcrNuzTT35ZJI3JisiiK58k
cg/60jRrbGb91Vmrt90NlASSF5C1Q7w/Gzh5W9vxp3ThPxk5mGZVeyaLfjMO/i15
H4pFJMD2ppFDHSbeg+cByMTrvdCXpI+mRyLMdXRqjWm1cp+NzgQ30ZEKcYDpLJ6f
FklJ43NVrXSm
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:30 2025 by rpki-client