![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/34352e3136352e39312e302f32342d3234203d3e20323634343739.roa
File: 34352e3136352e39312e302f32342d3234203d3e20323634343739.roa (raw, json)
Hash identifier: YbXv0WT7u2N3fydqWKXlPW+B85+UABQPzeH47c8BA0U=
Subject key identifier: F4:A5:35:61:84:74:C1:DF:C8:C6:90:6D:6E:94:B3:A5:48:B9:00:CA
Certificate issuer: /CN=3225A9367BE412857B6DFF323F2D20F155EF273C
Certificate serial: 5ADFFBB577CE511308AFA755768BEB0D49407B8E
Authority key identifier: 32:25:A9:36:7B:E4:12:85:7B:6D:FF:32:3F:2D:20:F1:55:EF:27:3C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3225A9367BE412857B6DFF323F2D20F155EF273C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/34352e3136352e39312e302f32342d3234203d3e20323634343739.roa
Signing time: Tue 05 Dec 2023 15:12:23 +0000
ROA not before: Tue 05 Dec 2023 15:07:23 +0000
ROA not after: Tue 03 Dec 2024 15:12:23 +0000
asID: 264479
IP address blocks: 45.165.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:df:fb:b5:77:ce:51:13:08:af:a7:55:76:8b:eb:0d:49:40:7b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3225A9367BE412857B6DFF323F2D20F155EF273C
Validity
Not Before: Dec 5 15:07:23 2023 GMT
Not After : Dec 3 15:12:23 2024 GMT
Subject: CN=F4A535618474C1DFC8C6906D6E94B3A548B900CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:97:8f:87:74:83:93:d6:e9:5e:68:57:d2:fe:
e3:15:f0:22:59:44:75:76:9c:32:72:68:e0:a0:d9:
91:82:49:3a:92:dd:73:11:71:db:3b:c4:f9:e3:7c:
9f:80:d0:e6:09:ca:55:fd:19:3c:0f:e4:43:29:0c:
dc:e9:d1:af:1f:0b:7f:8a:88:ec:67:c1:57:fa:20:
4e:25:b5:2d:12:95:2d:fc:6a:8a:bd:3c:48:b9:8a:
06:ba:04:27:b5:73:d6:e2:d2:4f:bf:c8:9b:c7:e5:
bb:02:cf:5b:6b:08:ad:f3:a2:8a:cb:f9:c9:bb:bd:
66:5e:05:f7:9b:cc:70:61:26:20:28:cf:cc:b7:f1:
19:bd:c3:9d:88:a4:38:6c:d6:83:2c:95:60:c4:34:
0b:82:4a:b6:6f:17:09:56:bd:2c:a7:da:f3:19:1d:
07:f3:b5:7d:b8:da:74:3b:ce:92:12:ff:6b:2a:5a:
f3:55:b0:c4:92:f1:1d:4a:03:ff:1f:67:2d:fe:bd:
ec:c0:48:a4:4c:90:4c:00:f0:0b:fc:92:ff:d3:b2:
f1:40:83:fd:4a:7a:78:3f:94:aa:d6:10:22:c0:d3:
40:78:d2:dd:a6:20:4d:91:12:91:fe:3c:e8:f1:d8:
50:ae:6e:7a:e2:c3:69:59:3e:7e:96:cb:ec:e2:2b:
07:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A5:35:61:84:74:C1:DF:C8:C6:90:6D:6E:94:B3:A5:48:B9:00:CA
X509v3 Authority Key Identifier:
keyid:32:25:A9:36:7B:E4:12:85:7B:6D:FF:32:3F:2D:20:F1:55:EF:27:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/3225A9367BE412857B6DFF323F2D20F155EF273C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3225A9367BE412857B6DFF323F2D20F155EF273C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/34352e3136352e39312e302f32342d3234203d3e20323634343739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.165.91.0/24
Signature Algorithm: sha256WithRSAEncryption
57:27:08:3d:64:4d:d8:fc:04:a0:ba:74:24:45:b7:e7:6e:24:
56:ac:5d:1d:8e:fa:b5:c0:5f:e0:f7:d9:72:bd:0f:3d:93:e5:
c6:e1:20:1e:bf:07:16:cb:6e:69:6e:ab:22:43:00:e2:70:62:
1d:f6:e3:70:22:8e:e1:cd:81:a0:37:29:83:0e:84:7b:a4:53:
68:fc:05:6c:cc:4a:9a:34:1b:11:0f:a1:5f:33:1f:79:d8:4f:
0a:ab:cb:7f:c7:f9:c7:f8:24:4d:97:c5:09:03:ea:70:6b:b5:
d9:0c:a8:43:e2:3b:81:af:b4:f7:ff:d2:ba:82:13:22:3b:b1:
ba:54:36:df:d1:df:30:2f:8c:80:b7:68:5a:5e:a5:ce:e9:1f:
07:03:9c:5b:11:d5:8d:04:5a:7e:24:3f:c3:79:8c:c0:11:e2:
c3:c7:89:63:32:4b:e6:6d:11:45:9a:1b:be:7f:ee:21:7b:a0:
a0:8d:8c:99:93:84:0d:8b:86:b0:2d:b0:19:72:ab:c2:02:cf:
3f:91:ec:06:27:b2:21:7e:10:5b:0b:01:5a:0b:c2:7d:ae:9a:
8a:c6:3e:7e:ca:2f:b1:be:14:6f:b4:01:f2:c5:0e:43:7e:b3:
28:ad:30:86:11:ae:ae:dc:89:5d:a1:27:ca:2e:1d:e6:3f:a5:
8d:be:da:c7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWt/7tXfOURMIr6dVdovrDUlAe44wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzIyNUE5MzY3QkU0MTI4NTdCNkRGRjMyM0YyRDIwRjE1
NUVGMjczQzAeFw0yMzEyMDUxNTA3MjNaFw0yNDEyMDMxNTEyMjNaMDMxMTAvBgNV
BAMTKEY0QTUzNTYxODQ3NEMxREZDOEM2OTA2RDZFOTRCM0E1NDhCOTAwQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSl4+HdIOT1uleaFfS/uMV8CJZ
RHV2nDJyaOCg2ZGCSTqS3XMRcds7xPnjfJ+A0OYJylX9GTwP5EMpDNzp0a8fC3+K
iOxnwVf6IE4ltS0SlS38aoq9PEi5iga6BCe1c9bi0k+/yJvH5bsCz1trCK3zoorL
+cm7vWZeBfebzHBhJiAoz8y38Rm9w52IpDhs1oMslWDENAuCSrZvFwlWvSyn2vMZ
HQfztX242nQ7zpIS/2sqWvNVsMSS8R1KA/8fZy3+vezASKRMkEwA8Av8kv/TsvFA
g/1Keng/lKrWECLA00B40t2mIE2REpH+POjx2FCubnriw2lZPn6Wy+ziKwd1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU9KU1YYR0wd/IxpBtbpSzpUi5AMowHwYDVR0j
BBgwFoAUMiWpNnvkEoV7bf8yPy0g8VXvJzwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEVBall0ZHhKM29RdzZqNnZVRE1UWHg4WHhacVZNS1BucnludFhCaXFu
dmQvMC8zMjI1QTkzNjdCRTQxMjg1N0I2REZGMzIzRjJEMjBGMTU1RUYyNzNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMyMjVBOTM2N0JFNDEyODU3
QjZERkYzMjNGMkQyMEYxNTVFRjI3M0MuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hFQWpZdGR4SjNvUXc2ajZ2VURNVFh4OFh4WnFWTUtQbnJ5bnRYQmlxbnZkLzAv
MzQzNTJlMzEzNjM1MmUzOTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0
MzQzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALaVbMA0GCSqGSIb3DQEBCwUAA4IBAQBXJwg9ZE3Y
/ASgunQkRbfnbiRWrF0djvq1wF/g99lyvQ89k+XG4SAevwcWy25pbqsiQwDicGId
9uNwIo7hzYGgNymDDoR7pFNo/AVszEqaNBsRD6FfMx952E8Kq8t/x/nH+CRNl8UJ
A+pwa7XZDKhD4juBr7T3/9K6ghMiO7G6VDbf0d8wL4yAt2haXqXO6R8HA5xbEdWN
BFp+JD/DeYzAEeLDx4ljMkvmbRFFmhu+f+4he6CgjYyZk4QNi4awLbAZcqvCAs8/
kewGJ7IhfhBbCwFaC8J9rpqKxj5+yi+xvhRvtAHyxQ5DfrMorTCGEa6u3IldoSfK
Lh3mP6WNvtrH
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:42 2025 by rpki-client