![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3132382e302f32332d3233203d3e203238313832.roa
File: 3137302e3233312e3132382e302f32332d3233203d3e203238313832.roa (raw, json)
Hash identifier: TJl7q/vm6CV9nLatcVvXLmB1y3Sg19uB2lgb+2XFKk4=
Subject key identifier: E4:EA:FC:B3:FA:7A:E8:8F:E1:60:ED:CA:09:8A:A5:F6:86:95:F8:BA
Certificate issuer: /CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
Certificate serial: 75E78ADFF3A5946A5B48AD2CD244630D54B70858
Authority key identifier: 68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3132382e302f32332d3233203d3e203238313832.roa
Signing time: Wed 17 Apr 2024 11:39:50 +0000
ROA not before: Wed 17 Apr 2024 11:34:50 +0000
ROA not after: Wed 16 Apr 2025 11:39:50 +0000
asID: 28182
IP address blocks: 170.231.128.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:e7:8a:df:f3:a5:94:6a:5b:48:ad:2c:d2:44:63:0d:54:b7:08:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
Validity
Not Before: Apr 17 11:34:50 2024 GMT
Not After : Apr 16 11:39:50 2025 GMT
Subject: CN=E4EAFCB3FA7AE88FE160EDCA098AA5F68695F8BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fd:e4:62:11:64:83:79:37:32:be:9e:4c:b2:
58:6e:d5:4a:27:d5:79:48:89:16:dc:6e:a9:1b:5f:
5d:83:4d:94:d7:95:3a:10:13:4e:19:7d:53:92:45:
be:d3:3f:f1:fa:5c:18:1f:e4:9e:1b:7e:3e:2e:5a:
d6:02:19:62:fc:95:9f:86:10:cb:f3:f6:2f:85:76:
e6:80:7e:17:d2:05:42:71:03:fe:ed:71:99:ee:fe:
b4:b9:41:0f:f6:cf:51:80:ed:3d:15:9a:65:b8:15:
79:8e:00:38:3c:bd:cc:4b:26:cf:00:bf:36:71:9d:
2c:c9:57:28:34:9e:ed:69:46:6d:04:48:d1:1e:f7:
bd:de:34:cd:03:e1:fa:50:46:08:e1:fe:a6:d6:f3:
54:f0:ad:cd:15:01:14:13:19:46:98:cc:36:f2:04:
a4:f0:a1:9a:ba:7b:b1:5f:e0:35:39:2d:d8:71:8a:
a2:93:ee:01:75:4c:71:0c:64:ce:37:c4:40:28:b2:
e9:b9:02:93:58:b2:20:69:9c:96:71:e0:da:26:43:
23:56:c3:dc:ff:6f:65:6f:a5:e1:22:41:33:ab:cf:
70:1f:cd:04:1c:25:a8:34:0d:85:b6:30:13:86:95:
b0:e5:c6:68:18:e0:42:5f:68:95:f8:9e:d9:30:f8:
51:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EA:FC:B3:FA:7A:E8:8F:E1:60:ED:CA:09:8A:A5:F6:86:95:F8:BA
X509v3 Authority Key Identifier:
keyid:68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3132382e302f32332d3233203d3e203238313832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.231.128.0/23
Signature Algorithm: sha256WithRSAEncryption
33:13:4f:29:19:57:4e:72:43:ce:f7:74:60:8d:ad:da:c0:aa:
e4:cb:3b:a0:12:a7:3a:c5:99:37:50:ba:91:38:23:dd:7d:f7:
2a:d0:aa:7e:eb:b2:c6:7b:fc:a4:77:5e:f8:6e:48:4f:b2:1a:
07:9d:fb:61:8e:5d:6f:17:6e:2c:9a:ea:ae:04:40:1f:e0:bc:
37:93:2e:b6:93:c7:63:f5:e3:1d:ae:9a:d0:52:af:45:01:fc:
3e:0d:cc:ca:90:c3:1a:1e:c4:ec:17:af:14:51:ab:66:97:30:
ff:f3:1a:4e:8a:20:8a:60:72:bd:3d:98:d7:31:0b:11:f7:bd:
55:ee:30:39:0a:bf:ac:03:24:38:f2:44:ca:21:67:69:d3:32:
4d:38:6f:31:97:b9:0b:c6:4d:ce:2f:a3:a5:8c:fb:61:7d:51:
4e:a4:3c:53:c7:b9:a9:a4:fc:07:6c:7d:e1:80:2a:8a:a7:35:
bd:8f:28:f6:0e:c9:d2:9e:6d:76:fe:0e:01:07:55:ca:75:dd:
d0:fa:78:f9:bc:d6:f9:db:3e:87:2a:15:e2:08:bc:38:16:ac:
a0:cf:d1:42:67:c9:41:f9:a4:20:1b:0f:a0:4d:ee:67:c0:25:
70:44:1f:5d:7d:25:00:59:d6:7d:02:fc:5e:44:11:2a:50:91:
6d:e0:a5:19
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdeeK3/OllGpbSK0s0kRjDVS3CFgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhFM0YwQzdCRTRGQTAxNzUyNENFMjI0NEU0QUE4MzYz
NDQ2RkQwRDAeFw0yNDA0MTcxMTM0NTBaFw0yNTA0MTYxMTM5NTBaMDMxMTAvBgNV
BAMTKEU0RUFGQ0IzRkE3QUU4OEZFMTYwRURDQTA5OEFBNUY2ODY5NUY4QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8/eRiEWSDeTcyvp5Mslhu1Uon
1XlIiRbcbqkbX12DTZTXlToQE04ZfVOSRb7TP/H6XBgf5J4bfj4uWtYCGWL8lZ+G
EMvz9i+FduaAfhfSBUJxA/7tcZnu/rS5QQ/2z1GA7T0VmmW4FXmOADg8vcxLJs8A
vzZxnSzJVyg0nu1pRm0ESNEe973eNM0D4fpQRgjh/qbW81Twrc0VARQTGUaYzDby
BKTwoZq6e7Ff4DU5LdhxiqKT7gF1THEMZM43xEAosum5ApNYsiBpnJZx4NomQyNW
w9z/b2VvpeEiQTOrz3AfzQQcJag0DYW2MBOGlbDlxmgY4EJfaJX4ntkw+FG7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU5Or8s/p66I/hYO3KCYql9oaV+LowHwYDVR0j
BBgwFoAUaOPwx75PoBdSTOIkTkqoNjRG/Q0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3Vqejg5dUE1VThIZ3UyNlM3ZEdqYXdhS3dWS2o0V3RFUkY0NlJDbXJw
NnovMC82OEUzRjBDN0JFNEZBMDE3NTI0Q0UyMjQ0RTRBQTgzNjM0NDZGRDBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4RTNGMEM3QkU0RkEwMTc1
MjRDRTIyNDRFNEFBODM2MzQ0NkZEMEQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d1ano4OXVBNVU4SGd1MjZTN2RHamF3YUt3VktqNFd0RVJGNDZSQ21ycDZ6LzAv
MzEzNzMwMmUzMjMzMzEyZTMxMzIzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzgzMTM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGq54AwDQYJKoZIhvcNAQELBQADggEBADMTTykZ
V05yQ873dGCNrdrAquTLO6ASpzrFmTdQupE4I9199yrQqn7rssZ7/KR3XvhuSE+y
Gged+2GOXW8Xbiya6q4EQB/gvDeTLraTx2P14x2umtBSr0UB/D4NzMqQwxoexOwX
rxRRq2aXMP/zGk6KIIpgcr09mNcxCxH3vVXuMDkKv6wDJDjyRMohZ2nTMk04bzGX
uQvGTc4vo6WM+2F9UU6kPFPHuamk/AdsfeGAKoqnNb2PKPYOydKebXb+DgEHVcp1
3dD6ePm81vnbPocqFeIIvDgWrKDP0UJnyUH5pCAbD6BN7mfAJXBEH119JQBZ1n0C
/F5EESpQkW3gpRk=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:58:51 2025 by rpki-client