![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/3137372e3135342e33322e302f32302d3234203d3e20323632323732.roa
File: 3137372e3135342e33322e302f32302d3234203d3e20323632323732.roa (raw, json)
Hash identifier: L690Y2UAxsfNO1X0rI6pVQxfx/rxS6v0Dr3Ic2FWnqs=
Subject key identifier: 69:16:DA:9C:33:43:03:BF:4D:5B:2B:28:7B:47:F8:00:AE:EF:3D:D2
Certificate issuer: /CN=0234F91A291644025C2C2460D355272A046B58DD
Certificate serial: 2522E2AFBE6DD4BA220AE2BB852EA05A4D73BAAC
Authority key identifier: 02:34:F9:1A:29:16:44:02:5C:2C:24:60:D3:55:27:2A:04:6B:58:DD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0234F91A291644025C2C2460D355272A046B58DD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/3137372e3135342e33322e302f32302d3234203d3e20323632323732.roa
Signing time: Mon 22 Jul 2024 18:02:19 +0000
ROA not before: Mon 22 Jul 2024 17:57:19 +0000
ROA not after: Mon 21 Jul 2025 18:02:19 +0000
asID: 262272
IP address blocks: 177.154.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:22:e2:af:be:6d:d4:ba:22:0a:e2:bb:85:2e:a0:5a:4d:73:ba:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0234F91A291644025C2C2460D355272A046B58DD
Validity
Not Before: Jul 22 17:57:19 2024 GMT
Not After : Jul 21 18:02:19 2025 GMT
Subject: CN=6916DA9C334303BF4D5B2B287B47F800AEEF3DD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a0:4c:86:4e:a5:f6:b8:d2:ea:68:5a:03:fd:
05:02:12:06:d6:b5:fe:3e:b7:5b:94:c8:e9:86:14:
54:50:00:0e:57:18:f0:73:0a:78:ce:15:05:61:1d:
4a:cd:da:29:21:81:30:b7:ad:bf:60:f9:fa:18:3a:
9e:fc:3f:f1:8c:89:f2:df:60:c6:a0:ab:09:fe:3e:
de:d7:08:4c:b4:0d:c5:0f:34:dd:62:26:7b:2b:a5:
e4:63:3e:53:26:87:43:91:a8:4a:e8:1d:d2:77:e7:
75:53:28:cf:fd:69:0b:56:a1:54:7d:68:15:a6:08:
00:c1:23:50:b4:b8:3b:3f:c1:08:34:cb:fd:50:6a:
0f:24:e6:50:4b:80:04:79:9c:cc:15:42:24:84:a0:
9a:24:d9:ce:e3:5b:4f:28:1a:89:60:49:40:76:bb:
d5:0c:bf:ef:f7:63:ce:77:f0:19:92:6a:9f:e3:9a:
24:28:ca:b6:6c:5a:5f:d4:80:2f:69:c2:e3:18:99:
e3:6f:25:4f:21:39:1d:f6:b0:4e:b9:9d:64:c4:03:
e2:6d:21:5d:dd:c0:14:a0:58:8b:fd:fd:9c:6e:6a:
62:b3:b7:33:9c:ea:b2:bb:90:a6:8a:0f:97:7c:d0:
92:c9:c3:b6:c6:29:98:0d:87:75:22:e8:58:0e:9f:
e7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:16:DA:9C:33:43:03:BF:4D:5B:2B:28:7B:47:F8:00:AE:EF:3D:D2
X509v3 Authority Key Identifier:
keyid:02:34:F9:1A:29:16:44:02:5C:2C:24:60:D3:55:27:2A:04:6B:58:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/0234F91A291644025C2C2460D355272A046B58DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0234F91A291644025C2C2460D355272A046B58DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/3137372e3135342e33322e302f32302d3234203d3e20323632323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.154.32.0/20
Signature Algorithm: sha256WithRSAEncryption
0b:37:d7:87:9a:9a:ef:1d:69:86:a5:d6:1a:2f:0c:ea:44:2b:
04:c8:a9:8e:da:2d:e8:f9:fb:2a:83:2a:89:cc:27:fa:37:03:
91:2f:5f:af:eb:f9:b8:d1:25:1c:be:43:dc:7e:e4:5e:4f:8c:
be:e4:9e:25:a5:a2:38:21:fd:73:1a:78:09:95:28:fe:19:de:
62:e7:de:7f:96:57:6f:35:72:8c:55:9d:f4:05:8a:05:97:44:
29:3b:98:85:e1:da:9c:7c:9a:a6:b6:41:d8:6f:09:bc:b3:1d:
63:a9:f1:8f:8f:14:56:21:91:97:d1:04:74:58:a2:e0:cd:44:
f3:9a:63:00:33:8a:55:06:0d:4c:bf:58:e2:e2:89:02:76:10:
08:a6:32:f3:2c:79:3f:b2:07:22:1b:39:eb:56:84:24:db:0f:
f3:e2:6a:49:92:aa:83:5f:51:34:43:73:4a:6d:93:c0:36:cf:
3d:cf:0c:aa:ab:39:f6:37:f3:7d:00:27:ac:06:b2:2f:45:ab:
65:9d:33:ee:08:f3:d5:a7:ee:67:de:8b:43:7a:c8:d2:07:cd:
13:92:1c:b8:de:65:b9:ce:a4:70:6e:00:4f:3a:72:00:56:3f:
d2:62:88:7a:c5:ae:35:1e:fd:c9:f6:a1:55:1f:c4:a3:54:50:
a9:a9:87:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:14:04 2025 by rpki-client