![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HJ8emFdrd1gCpaqJ81Xs62i1yAqtB9pJzu1KsLwutjuk/0/3139302e38332e342e302f32322d3233203d3e20323730333230.roa
File: 3139302e38332e342e302f32322d3233203d3e20323730333230.roa (raw, json)
Hash identifier: agMDvWqzh+IeWHdWmDKbvRhhjE3SJSJq112hQ/gqyEU=
Subject key identifier: 8A:10:7D:16:A2:5B:EE:F9:93:E7:9C:AD:B8:47:09:3A:9E:59:19:39
Certificate issuer: /CN=32F2AD125C3315F823A44E2CEE9FB684EA897421
Certificate serial: 04B0F8CBD2532A2545EFEBCFAEAAF33B9759FEF1
Authority key identifier: 32:F2:AD:12:5C:33:15:F8:23:A4:4E:2C:EE:9F:B6:84:EA:89:74:21
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32F2AD125C3315F823A44E2CEE9FB684EA897421.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HJ8emFdrd1gCpaqJ81Xs62i1yAqtB9pJzu1KsLwutjuk/0/3139302e38332e342e302f32322d3233203d3e20323730333230.roa
Signing time: Wed 23 Mar 2022 15:38:23 +0000
ROA not before: Wed 23 Mar 2022 15:33:23 +0000
ROA not after: Wed 22 Mar 2023 15:38:23 +0000
asID: 270320
IP address blocks: 190.83.4.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:b0:f8:cb:d2:53:2a:25:45:ef:eb:cf:ae:aa:f3:3b:97:59:fe:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32F2AD125C3315F823A44E2CEE9FB684EA897421
Validity
Not Before: Mar 23 15:33:23 2022 GMT
Not After : Mar 22 15:38:23 2023 GMT
Subject: CN=8A107D16A25BEEF993E79CADB847093A9E591939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:55:2e:05:72:10:b5:ac:7f:cb:b1:2d:ac:6e:
3e:2e:5a:ef:62:7c:a4:32:57:a2:50:73:fb:af:bb:
9a:a6:b2:ea:96:78:2c:96:0a:f2:2a:75:de:bc:c8:
0d:9f:8b:89:32:10:96:1a:e5:bb:2f:9b:f3:47:5b:
39:f8:df:71:92:29:81:c6:a0:ef:4a:6e:e2:77:5f:
1d:af:94:a6:3f:48:e4:6a:84:f1:5c:85:39:5f:51:
85:d8:42:ec:47:1c:8a:91:83:9d:60:fd:95:a5:14:
e4:86:f7:b0:e0:08:93:89:47:41:4f:42:cb:75:97:
4b:ad:8f:95:e0:b0:93:d1:fc:b3:d9:e5:ca:1e:5a:
4d:ef:30:b5:93:ef:48:46:ec:94:f9:38:a9:75:5a:
93:53:28:5b:0c:33:8f:40:73:d4:fd:a5:af:13:ed:
47:22:46:7e:c6:f6:9f:56:20:14:aa:12:96:d3:63:
bf:99:bf:6e:93:92:4c:83:51:e7:51:26:c6:64:02:
89:e7:d6:61:a2:a0:f6:e3:b1:85:9c:f6:49:7a:fc:
d9:99:1b:ea:cc:97:1a:73:40:dc:60:cb:16:51:5d:
ad:d7:1c:e4:a2:7b:a9:51:11:36:92:69:bc:5c:29:
2a:42:4e:8e:26:3e:ee:02:65:2d:28:66:4a:2d:d0:
26:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:10:7D:16:A2:5B:EE:F9:93:E7:9C:AD:B8:47:09:3A:9E:59:19:39
X509v3 Authority Key Identifier:
keyid:32:F2:AD:12:5C:33:15:F8:23:A4:4E:2C:EE:9F:B6:84:EA:89:74:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HJ8emFdrd1gCpaqJ81Xs62i1yAqtB9pJzu1KsLwutjuk/0/32F2AD125C3315F823A44E2CEE9FB684EA897421.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32F2AD125C3315F823A44E2CEE9FB684EA897421.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJ8emFdrd1gCpaqJ81Xs62i1yAqtB9pJzu1KsLwutjuk/0/3139302e38332e342e302f32322d3233203d3e20323730333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.83.4.0/22
Signature Algorithm: sha256WithRSAEncryption
d1:74:fb:d6:49:a9:93:d9:55:a5:8d:0a:1c:12:b8:cc:14:f7:
a6:9f:d4:13:4e:2f:ed:63:88:15:c8:68:8c:ee:41:20:96:a6:
36:38:70:13:06:c8:1a:55:a7:4b:0a:09:a3:6e:3a:ce:b9:72:
5e:e4:0c:fe:6c:cc:f6:a0:2c:d2:61:43:bf:1f:ee:77:fa:43:
b7:d1:f5:74:c3:c5:53:0a:f0:66:4d:81:e4:e2:f7:f9:d7:7d:
c9:e9:87:4a:33:2e:6f:5d:a0:e8:22:1b:f5:cc:80:62:37:c5:
8f:fe:ac:20:59:b3:e9:b9:28:44:e4:d8:09:cd:40:c3:82:43:
c8:ae:dd:83:62:e2:60:cb:0d:86:8b:a9:7e:a3:d7:1a:69:67:
65:5c:9d:66:7e:12:68:90:c6:36:09:39:a8:bc:85:06:41:e2:
0f:fd:d9:a1:06:1a:6d:54:79:d9:47:dd:29:60:8f:a3:e2:bf:
1d:80:5e:12:91:77:94:25:71:e5:35:8b:04:33:18:ed:18:65:
95:44:da:8f:44:5c:6d:0c:6d:8b:c6:5d:3b:04:88:4f:2b:8a:
88:e1:88:cf:77:ab:f8:e7:18:46:d5:03:aa:01:08:eb:9f:47:
9e:91:5a:10:d2:a7:3f:8c:cd:14:c4:a7:64:80:ee:f0:54:55:
13:24:bd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:13:51 2025 by rpki-client