![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H3nKqPam6j4vjx3kR8UYnpJLpP3knP4gMQvkYqJDgUEd/0/3137372e38352e3131322e302f32312d3234203d3e20323632363037.roa
File: 3137372e38352e3131322e302f32312d3234203d3e20323632363037.roa (raw, json)
Hash identifier: 4xA29h0YN1tSnBT0d/jPzoU5LTxSjizSGzkvMrE8SVY=
Subject key identifier: D2:0A:DD:32:7A:08:CD:55:C1:65:0B:67:81:12:DB:F1:C9:61:D5:71
Certificate issuer: /CN=4214C29D7E63A3D42BD59FD054A82A2231F16C7D
Certificate serial: 57F1E3F67AB409FCFCA861F09CA736A90748C073
Authority key identifier: 42:14:C2:9D:7E:63:A3:D4:2B:D5:9F:D0:54:A8:2A:22:31:F1:6C:7D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4214C29D7E63A3D42BD59FD054A82A2231F16C7D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H3nKqPam6j4vjx3kR8UYnpJLpP3knP4gMQvkYqJDgUEd/0/3137372e38352e3131322e302f32312d3234203d3e20323632363037.roa
Signing time: Wed 18 May 2022 13:59:23 +0000
ROA not before: Wed 18 May 2022 13:54:23 +0000
ROA not after: Wed 17 May 2023 13:59:23 +0000
asID: 262607
IP address blocks: 177.85.112.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:f1:e3:f6:7a:b4:09:fc:fc:a8:61:f0:9c:a7:36:a9:07:48:c0:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4214C29D7E63A3D42BD59FD054A82A2231F16C7D
Validity
Not Before: May 18 13:54:23 2022 GMT
Not After : May 17 13:59:23 2023 GMT
Subject: CN=D20ADD327A08CD55C1650B678112DBF1C961D571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:70:3c:ea:4c:62:44:06:f4:96:24:04:6b:38:
76:3d:e7:a9:f9:1c:34:a9:12:8d:3b:6b:d9:b6:e9:
27:cc:ed:a9:6b:0a:14:c0:33:6d:ac:da:78:34:09:
8a:0f:a6:27:5b:71:41:a9:eb:9d:fe:f3:8c:41:7c:
06:76:75:59:ec:05:64:5a:a8:31:c0:a3:ae:03:70:
f9:8f:d2:97:73:ee:79:67:c3:8c:db:62:8f:11:91:
58:f3:52:77:b2:c6:c6:07:8f:2a:19:75:67:4e:e5:
a3:0a:04:5d:80:be:ee:81:31:eb:59:ed:5f:21:c1:
5b:55:fe:1c:ed:7f:8e:a4:88:63:ba:53:f5:61:1f:
33:13:97:5d:a4:51:94:9a:c0:24:19:ae:c0:a0:c5:
46:8e:8f:bc:11:c4:b0:85:66:9a:ab:8d:f4:d3:41:
a5:7d:a9:17:c1:b9:a2:0b:5c:9c:8a:85:8c:56:7b:
62:23:21:d5:7a:1c:22:97:c3:c7:ab:94:17:25:16:
f8:9b:46:6f:2e:15:64:6b:35:a5:3e:e9:bd:33:ce:
64:09:a3:26:78:f0:6b:05:63:16:c5:e5:5b:bb:cf:
a0:9f:38:7b:32:fd:53:bf:b1:64:e7:dd:51:53:44:
35:5b:a2:d9:50:41:12:f3:47:fe:f6:b7:02:33:6c:
9f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0A:DD:32:7A:08:CD:55:C1:65:0B:67:81:12:DB:F1:C9:61:D5:71
X509v3 Authority Key Identifier:
keyid:42:14:C2:9D:7E:63:A3:D4:2B:D5:9F:D0:54:A8:2A:22:31:F1:6C:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H3nKqPam6j4vjx3kR8UYnpJLpP3knP4gMQvkYqJDgUEd/0/4214C29D7E63A3D42BD59FD054A82A2231F16C7D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4214C29D7E63A3D42BD59FD054A82A2231F16C7D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3nKqPam6j4vjx3kR8UYnpJLpP3knP4gMQvkYqJDgUEd/0/3137372e38352e3131322e302f32312d3234203d3e20323632363037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.85.112.0/21
Signature Algorithm: sha256WithRSAEncryption
49:e7:8b:44:fe:f5:2c:1c:6d:df:df:fa:ea:2d:05:1a:83:07:
10:75:45:1f:67:84:dc:9c:3e:98:a4:f0:27:a4:1b:d9:6d:b9:
6d:bc:9a:1b:ff:6f:6c:18:bf:86:11:84:90:23:4f:66:2d:be:
8d:d8:f9:60:92:4a:e2:81:cb:21:03:77:e0:76:67:f5:a9:2d:
87:53:d5:9e:e5:04:ab:c9:17:0d:6a:a0:d7:8b:c5:8e:1d:95:
e6:e2:59:50:c1:56:97:46:e5:ef:35:40:4e:8b:91:7e:06:55:
f7:a8:69:80:43:de:6d:35:e5:23:fd:1f:cd:1a:0b:47:e0:47:
82:46:74:7d:f2:64:70:61:2b:2e:4f:f1:e7:1c:85:c7:98:90:
53:bc:23:e3:94:1b:b5:8a:dd:44:0b:cc:e0:42:9d:83:ea:2e:
a6:22:95:c6:2c:a1:9c:4e:6d:05:ab:2e:45:cd:bc:b8:6a:14:
cc:c1:9f:cf:05:c7:d2:db:61:7c:c7:ca:17:17:3b:b5:a5:a8:
8d:7e:04:6b:e2:6b:32:45:87:f0:64:ad:1d:19:53:81:bf:d8:
39:cd:0c:91:19:9a:c5:44:5a:b4:7a:b3:99:3a:b6:28:f6:c3:
1e:ac:0b:69:2c:0a:4a:3f:71:10:e8:51:9a:8d:b0:bc:03:ab:
60:30:c4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:48:47 2025 by rpki-client