![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/3133382e3138352e32302e302f32322d3232203d3e20323634333332.roa
File: 3133382e3138352e32302e302f32322d3232203d3e20323634333332.roa (raw, json)
Hash identifier: ei+8Jgrx97WN6oaKizPsqT+/WbOZDtn6dZwkJDNYbWg=
Subject key identifier: 77:A7:E4:AA:E6:87:83:B8:C3:AB:05:BC:12:CD:AC:2B:A8:9E:BF:67
Certificate issuer: /CN=F427EBED04EEA9E14CD726DEB3CC299993C1802E
Certificate serial: 7443F1F3A5A26A4EF52D41D94EB9772E56D2F789
Authority key identifier: F4:27:EB:ED:04:EE:A9:E1:4C:D7:26:DE:B3:CC:29:99:93:C1:80:2E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F427EBED04EEA9E14CD726DEB3CC299993C1802E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/3133382e3138352e32302e302f32322d3232203d3e20323634333332.roa
Signing time: Mon 05 Feb 2024 14:00:00 +0000
ROA not before: Mon 05 Feb 2024 13:55:00 +0000
ROA not after: Mon 03 Feb 2025 14:00:00 +0000
asID: 264332
IP address blocks: 138.185.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:43:f1:f3:a5:a2:6a:4e:f5:2d:41:d9:4e:b9:77:2e:56:d2:f7:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F427EBED04EEA9E14CD726DEB3CC299993C1802E
Validity
Not Before: Feb 5 13:55:00 2024 GMT
Not After : Feb 3 14:00:00 2025 GMT
Subject: CN=77A7E4AAE68783B8C3AB05BC12CDAC2BA89EBF67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e0:70:6a:08:21:a0:9b:46:98:80:c0:21:2e:
53:38:41:7a:9c:fe:db:b6:7c:f1:99:28:b3:c9:1f:
a0:d7:e4:bd:77:c0:33:c5:90:f6:04:04:fd:89:af:
b2:e4:93:fe:47:f6:2b:5d:f3:ee:69:c2:1c:7b:96:
d5:4f:fe:7e:56:9f:6e:47:26:fb:41:bc:05:19:8b:
79:9a:b9:1d:10:b6:7a:91:42:3a:28:bd:20:1d:96:
27:d8:a8:84:8b:2d:01:0f:93:a6:04:f9:ef:0f:5c:
65:b7:22:57:e2:bf:0f:3b:5f:fa:7a:ab:25:e1:01:
55:57:7b:72:0b:36:1a:fd:76:33:06:95:38:f3:d7:
ca:81:00:4e:d8:c5:31:69:df:33:c5:a9:10:0b:79:
44:f7:3d:24:df:2c:bc:1c:ca:65:6d:10:9e:a8:27:
4f:c5:8b:f9:5a:b1:ef:bb:92:ce:a7:6b:34:8f:47:
38:dd:27:ed:f3:73:23:ad:be:2a:a5:4f:a2:a3:60:
67:40:29:3b:01:a7:70:07:6c:85:67:c0:f4:06:b4:
8a:77:67:bc:80:9d:a0:1e:bc:fc:0e:7f:d7:22:69:
11:08:80:9a:cf:0c:ad:16:87:44:f6:46:be:0c:a0:
69:60:69:02:82:6e:15:be:63:19:f6:6e:de:3e:65:
73:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A7:E4:AA:E6:87:83:B8:C3:AB:05:BC:12:CD:AC:2B:A8:9E:BF:67
X509v3 Authority Key Identifier:
keyid:F4:27:EB:ED:04:EE:A9:E1:4C:D7:26:DE:B3:CC:29:99:93:C1:80:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/F427EBED04EEA9E14CD726DEB3CC299993C1802E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F427EBED04EEA9E14CD726DEB3CC299993C1802E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/3133382e3138352e32302e302f32322d3232203d3e20323634333332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.20.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:ba:ab:7d:95:e7:d2:92:9b:18:8b:c5:84:60:db:be:4a:ef:
9a:9f:49:ae:ae:fe:3f:14:9c:f1:ee:b9:54:01:64:63:0c:ba:
2d:39:fd:5b:d2:5b:e6:5f:93:2d:25:9f:21:e6:fd:dc:7b:17:
e4:fa:54:66:3d:9b:2d:cd:d8:0c:f1:50:a6:47:8f:60:4b:d6:
6f:2d:0c:af:14:60:a9:68:70:3c:5d:76:3a:81:5e:0b:6b:91:
5d:90:a7:e8:12:6e:20:76:64:7b:ed:c8:4c:3d:85:51:c8:de:
e3:b0:17:e5:7d:00:f3:2a:55:39:c5:66:30:e5:dc:86:13:b4:
19:16:5c:f3:fa:ae:76:94:2b:51:48:0a:e6:be:45:82:d2:0b:
18:f7:2f:f9:ea:95:95:af:62:0e:90:ed:44:8e:9a:75:35:fc:
f0:54:15:f3:70:00:52:fa:cb:19:7d:66:c8:b0:91:d5:01:11:
da:f9:ef:5c:93:28:c1:07:61:5c:cb:6b:de:f4:09:44:d8:51:
95:ba:3e:fe:3e:f0:fa:d9:33:6a:6c:89:de:a3:dc:65:8c:20:
fa:16:82:dc:a0:be:ca:1b:1a:ca:d4:34:73:ae:a8:ec:77:af:
de:7e:1c:d4:b5:16:5e:ad:1b:3c:f5:15:30:02:11:c9:e4:7d:
34:b8:01:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:35 2025 by rpki-client