![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3230302e3232352e3130382e302f32322d3332203d3e20323633343431.roa
File: 3230302e3232352e3130382e302f32322d3332203d3e20323633343431.roa (raw, json)
Hash identifier: X6+qTpDldMLORm4fFTkYVnPaYeps8kcBqt9s2L2zyqA=
Subject key identifier: A2:2B:8D:F4:93:E2:C3:91:AE:67:A0:C3:74:DB:BB:70:3D:98:0C:E2
Certificate issuer: /CN=3211CA82DAF201FF0C1B584CF7EA98A1B6F0ECD2
Certificate serial: 09254B09DA97CDF11EFEDFF88859962148E71238
Authority key identifier: 32:11:CA:82:DA:F2:01:FF:0C:1B:58:4C:F7:EA:98:A1:B6:F0:EC:D2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3211CA82DAF201FF0C1B584CF7EA98A1B6F0ECD2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3230302e3232352e3130382e302f32322d3332203d3e20323633343431.roa
Signing time: Tue 19 Dec 2023 12:53:22 +0000
ROA not before: Tue 19 Dec 2023 12:48:22 +0000
ROA not after: Tue 17 Dec 2024 12:53:22 +0000
asID: 263441
IP address blocks: 200.225.108.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:25:4b:09:da:97:cd:f1:1e:fe:df:f8:88:59:96:21:48:e7:12:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3211CA82DAF201FF0C1B584CF7EA98A1B6F0ECD2
Validity
Not Before: Dec 19 12:48:22 2023 GMT
Not After : Dec 17 12:53:22 2024 GMT
Subject: CN=A22B8DF493E2C391AE67A0C374DBBB703D980CE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:66:20:96:e3:35:11:57:58:68:e3:be:ad:be:
e5:df:de:0d:a0:71:6b:b4:40:82:8a:40:dd:20:e2:
8e:9d:ba:4f:c0:0e:e5:6b:dd:ae:5a:c3:ad:12:fe:
41:7e:58:d3:01:b9:58:25:d6:3b:0d:2d:9e:37:61:
d6:3d:d5:93:46:b9:90:ce:c3:18:ef:39:e8:2a:52:
ab:4f:89:f8:f0:45:55:cc:d3:90:b4:54:bf:46:17:
d6:cb:9e:34:c9:0b:b0:d9:ab:8c:92:06:a3:75:50:
42:06:a3:da:2f:a0:a7:c1:0a:b5:a9:cb:39:4b:af:
a5:1f:9c:13:9d:be:1a:48:9a:3e:8a:8c:bb:ea:9a:
a0:66:ec:d4:ee:af:c4:ee:6e:85:b8:13:76:87:00:
e5:9e:8e:80:90:c8:a8:c5:da:a4:9f:a3:69:df:af:
c8:89:e7:95:55:e7:30:98:98:f5:72:97:09:08:75:
45:a1:a3:ea:47:53:a9:8f:d2:ad:86:bd:92:ee:94:
1e:b8:ff:2f:57:e4:e4:43:c9:f0:ce:15:8b:44:f4:
6e:8d:2a:84:aa:80:26:13:8e:79:66:ac:44:b4:0a:
07:3b:07:98:28:70:46:3e:e2:d1:df:a0:05:77:cf:
0e:fc:06:65:5b:55:4f:06:ce:c2:ef:db:b3:50:dc:
05:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2B:8D:F4:93:E2:C3:91:AE:67:A0:C3:74:DB:BB:70:3D:98:0C:E2
X509v3 Authority Key Identifier:
keyid:32:11:CA:82:DA:F2:01:FF:0C:1B:58:4C:F7:EA:98:A1:B6:F0:EC:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3211CA82DAF201FF0C1B584CF7EA98A1B6F0ECD2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3211CA82DAF201FF0C1B584CF7EA98A1B6F0ECD2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3230302e3232352e3130382e302f32322d3332203d3e20323633343431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.225.108.0/22
Signature Algorithm: sha256WithRSAEncryption
38:5a:3d:7a:eb:bf:d0:0f:f8:63:ef:8b:83:ee:4f:eb:ad:cd:
92:66:36:df:55:0f:cf:dd:d3:e6:e9:94:a1:be:11:34:52:df:
ca:68:01:8b:d1:db:6c:1b:00:0c:f1:86:69:b3:b9:a2:0e:4f:
4a:0a:0f:29:fe:41:fb:1d:cf:7b:35:71:9c:3e:a3:f9:3a:93:
4a:08:27:aa:cb:3b:fc:55:55:6f:81:08:97:6d:72:2c:ce:19:
8a:11:72:2a:92:64:52:0d:3d:a3:91:8e:10:ae:fd:d1:4d:2b:
b5:87:8f:82:55:7c:e5:99:91:5c:32:e0:e2:51:d1:f8:e2:a4:
58:83:8e:fd:d6:db:a0:37:3a:c2:cd:e1:e7:69:fd:91:5f:88:
6f:78:e8:b1:3f:f0:c9:d2:ea:ed:3f:d1:0d:ce:28:73:85:78:
60:61:d3:94:ef:42:d7:14:6f:0a:0e:97:69:63:8c:21:6e:c2:
eb:83:d3:72:8d:24:28:72:ef:7b:c5:cb:e0:31:0c:b7:4e:f3:
2a:a7:7e:7f:c1:d7:d2:36:1c:24:e1:31:57:89:07:a4:c2:bb:
66:2a:ed:e4:ac:4c:c0:20:e8:3b:de:3d:5a:cd:6b:04:8c:4b:
98:f7:d2:e1:bd:c4:76:38:d6:e5:c5:b1:1e:91:bf:ac:e5:48:
4e:2e:b3:8d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUCSVLCdqXzfEe/t/4iFmWIUjnEjgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzIxMUNBODJEQUYyMDFGRjBDMUI1ODRDRjdFQTk4QTFC
NkYwRUNEMjAeFw0yMzEyMTkxMjQ4MjJaFw0yNDEyMTcxMjUzMjJaMDMxMTAvBgNV
BAMTKEEyMkI4REY0OTNFMkMzOTFBRTY3QTBDMzc0REJCQjcwM0Q5ODBDRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBZiCW4zURV1ho476tvuXf3g2g
cWu0QIKKQN0g4o6duk/ADuVr3a5aw60S/kF+WNMBuVgl1jsNLZ43YdY91ZNGuZDO
wxjvOegqUqtPifjwRVXM05C0VL9GF9bLnjTJC7DZq4ySBqN1UEIGo9ovoKfBCrWp
yzlLr6UfnBOdvhpImj6KjLvqmqBm7NTur8TuboW4E3aHAOWejoCQyKjF2qSfo2nf
r8iJ55VV5zCYmPVylwkIdUWho+pHU6mP0q2GvZLulB64/y9X5ORDyfDOFYtE9G6N
KoSqgCYTjnlmrES0Cgc7B5gocEY+4tHfoAV3zw78BmVbVU8GzsLv27NQ3AWjAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUoiuN9JPiw5GuZ6DDdNu7cD2YDOIwHwYDVR0j
BBgwFoAUMhHKgtryAf8MG1hM9+qYobbw7NIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmNyaXpZVjlQNlRMd1RyaG45TDhaV1JrendNWHE3UFVlZkFXTk1iM3c1
emQvMC8zMjExQ0E4MkRBRjIwMUZGMEMxQjU4NENGN0VBOThBMUI2RjBFQ0QyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMyMTFDQTgyREFGMjAxRkYw
QzFCNTg0Q0Y3RUE5OEExQjZGMEVDRDIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Zjcml6WVY5UDZUTHdUcmhuOUw4WldSa3p3TVhxN1BVZWZBV05NYjN3NXpkLzAv
MzIzMDMwMmUzMjMyMzUyZTMxMzAzODJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzMzM0MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAsjhbDANBgkqhkiG9w0BAQsFAAOCAQEAOFo9
euu/0A/4Y++Lg+5P663NkmY231UPz93T5umUob4RNFLfymgBi9HbbBsADPGGabO5
og5PSgoPKf5B+x3PezVxnD6j+TqTSggnqss7/FVVb4EIl21yLM4ZihFyKpJkUg09
o5GOEK790U0rtYePglV85ZmRXDLg4lHR+OKkWIOO/dbboDc6ws3h52n9kV+Ib3jo
sT/wydLq7T/RDc4oc4V4YGHTlO9C1xRvCg6XaWOMIW7C64PTco0kKHLve8XL4DEM
t07zKqd+f8HX0jYcJOExV4kHpMK7Zirt5KxMwCDoO949Ws1rBIxLmPfS4b3EdjjW
5cWxHpG/rOVITi6zjQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org