![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/3136382e39302e3230382e302f32322d3232203d3e20323635323832.roa
File: 3136382e39302e3230382e302f32322d3232203d3e20323635323832.roa (raw, json)
Hash identifier: WJYOkX8m6l5F22Zy3zkCKJs62wFH+OiRAuyDzR+M6A8=
Subject key identifier: 30:92:8A:27:71:1A:92:63:6C:9E:22:3D:A2:86:D5:9B:F9:47:2C:8D
Certificate issuer: /CN=15CE72F864B9D222722D29CFB14428A88692222C
Certificate serial: 1005E9B101A6FAEF5346DC84EC8099FB3B863436
Authority key identifier: 15:CE:72:F8:64:B9:D2:22:72:2D:29:CF:B1:44:28:A8:86:92:22:2C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15CE72F864B9D222722D29CFB14428A88692222C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/3136382e39302e3230382e302f32322d3232203d3e20323635323832.roa
Signing time: Wed 27 Apr 2022 20:21:00 +0000
ROA not before: Wed 27 Apr 2022 20:16:00 +0000
ROA not after: Wed 26 Apr 2023 20:21:00 +0000
asID: 265282
IP address blocks: 168.90.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:05:e9:b1:01:a6:fa:ef:53:46:dc:84:ec:80:99:fb:3b:86:34:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15CE72F864B9D222722D29CFB14428A88692222C
Validity
Not Before: Apr 27 20:16:00 2022 GMT
Not After : Apr 26 20:21:00 2023 GMT
Subject: CN=30928A27711A92636C9E223DA286D59BF9472C8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:32:8f:6b:5f:f6:ac:28:d7:a2:b5:74:eb:91:
ca:e1:a5:46:9f:69:1c:0a:a1:dd:55:6d:ba:49:2d:
4f:9e:19:36:9c:6b:b0:92:25:de:a9:75:e4:b4:54:
7f:10:a0:eb:13:68:49:7f:5a:2c:46:4e:f4:84:47:
ce:9c:5e:4e:0e:b1:d2:10:bc:38:f0:cd:a7:ee:07:
9a:3d:46:fd:4c:2b:35:1b:dd:4b:77:54:39:2a:ae:
15:32:d0:f4:0d:9e:00:41:f4:ee:bb:24:36:a6:42:
bd:7c:f6:40:c5:5e:89:12:63:07:73:b5:36:f4:1b:
ef:65:d2:cf:34:a7:0a:54:ff:7a:b0:bf:7a:d5:ee:
47:39:4f:b0:2b:1c:6b:04:77:eb:24:e2:c9:e7:3c:
6f:a2:4f:18:fa:1c:55:e3:c4:9e:26:6f:50:74:17:
0a:e8:8f:f9:94:85:d2:a3:02:6b:fe:15:62:ff:9c:
11:ce:b9:d0:f4:80:cf:f9:e5:65:43:17:56:9b:91:
a3:f3:d9:d6:0b:2d:21:c0:9e:d7:a1:cb:4f:bd:89:
11:2a:f3:10:2d:58:20:e8:7b:f4:e3:bb:cf:d6:95:
0c:fe:01:52:29:b1:2c:e4:a4:6f:d6:a8:0a:b7:a4:
c2:3a:eb:f0:f0:88:2a:cb:f2:5d:e7:3e:5a:30:28:
85:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:92:8A:27:71:1A:92:63:6C:9E:22:3D:A2:86:D5:9B:F9:47:2C:8D
X509v3 Authority Key Identifier:
keyid:15:CE:72:F8:64:B9:D2:22:72:2D:29:CF:B1:44:28:A8:86:92:22:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/15CE72F864B9D222722D29CFB14428A88692222C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15CE72F864B9D222722D29CFB14428A88692222C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/3136382e39302e3230382e302f32322d3232203d3e20323635323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.90.208.0/22
Signature Algorithm: sha256WithRSAEncryption
48:a3:19:c0:9e:ec:2b:61:8c:fd:50:e7:94:ba:bf:28:80:e9:
41:34:fe:8e:64:cb:3c:4e:89:74:68:8a:f3:23:c1:2d:fe:54:
af:f6:16:d4:cd:9b:14:8c:50:97:64:2b:7a:73:71:9b:0c:bc:
67:c3:22:09:a9:79:36:b5:d9:1d:5c:b3:4a:a4:fd:5f:0f:aa:
27:08:75:74:02:f8:32:e8:97:33:66:b4:f3:be:e9:1a:62:a3:
46:a7:f1:38:27:e0:fa:43:87:fb:17:64:58:6e:63:e3:ec:29:
94:82:b3:12:db:f9:6d:4d:c2:78:06:fa:4a:f0:c9:84:e3:21:
cf:74:e4:dc:26:bd:69:40:a6:03:d8:ed:7c:83:8d:7c:9d:ae:
1d:7b:3e:05:d3:eb:5c:7d:bc:dc:a1:20:de:59:d6:de:32:2f:
9d:b5:2e:74:a6:48:c0:e0:56:98:20:4b:f2:3b:a3:20:d1:f1:
57:cb:d6:5b:ad:69:e2:36:3f:16:a6:c4:c2:ab:64:ac:40:04:
7c:e4:96:37:a4:13:d1:89:2c:23:ff:5d:d0:4a:a0:71:17:bb:
42:2e:ea:d0:c0:a6:d4:e6:ef:34:18:78:0a:64:05:cf:ca:b7:
c3:61:66:7d:ee:6c:7a:8e:08:27:cd:ec:05:a3:3d:62:30:6b:
9c:a0:84:89
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEAXpsQGm+u9TRtyE7ICZ+zuGNDYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTVDRTcyRjg2NEI5RDIyMjcyMkQyOUNGQjE0NDI4QTg4
NjkyMjIyQzAeFw0yMjA0MjcyMDE2MDBaFw0yMzA0MjYyMDIxMDBaMDMxMTAvBgNV
BAMTKDMwOTI4QTI3NzExQTkyNjM2QzlFMjIzREEyODZENTlCRjk0NzJDOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjMo9rX/asKNeitXTrkcrhpUaf
aRwKod1VbbpJLU+eGTaca7CSJd6pdeS0VH8QoOsTaEl/WixGTvSER86cXk4OsdIQ
vDjwzafuB5o9Rv1MKzUb3Ut3VDkqrhUy0PQNngBB9O67JDamQr189kDFXokSYwdz
tTb0G+9l0s80pwpU/3qwv3rV7kc5T7ArHGsEd+sk4snnPG+iTxj6HFXjxJ4mb1B0
Fwroj/mUhdKjAmv+FWL/nBHOudD0gM/55WVDF1abkaPz2dYLLSHAntehy0+9iREq
8xAtWCDoe/Tju8/WlQz+AVIpsSzkpG/WqAq3pMI66/DwiCrL8l3nPlowKIWVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUMJKKJ3EakmNsniI9oobVm/lHLI0wHwYDVR0j
BBgwFoAUFc5y+GS50iJyLSnPsUQoqIaSIiwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHZ4ZjNlSjV4MkNMeGsyTkZhVUZhUnhoR21XeFIxR28zdFdZdHREOGRF
Tk4vMC8xNUNFNzJGODY0QjlEMjIyNzIyRDI5Q0ZCMTQ0MjhBODg2OTIyMjJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE1Q0U3MkY4NjRCOUQyMjI3
MjJEMjlDRkIxNDQyOEE4ODY5MjIyMkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h2eGYzZUo1eDJDTHhrMk5GYVVGYVJ4aEdtV3hSMUdvM3RXWXR0RDhkRU5OLzAv
MzEzNjM4MmUzOTMwMmUzMjMwMzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzUzMjM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKoWtAwDQYJKoZIhvcNAQELBQADggEBAEijGcCe
7CthjP1Q55S6vyiA6UE0/o5kyzxOiXRoivMjwS3+VK/2FtTNmxSMUJdkK3pzcZsM
vGfDIgmpeTa12R1cs0qk/V8PqicIdXQC+DLolzNmtPO+6Rpio0an8Tgn4PpDh/sX
ZFhuY+PsKZSCsxLb+W1NwngG+krwyYTjIc905NwmvWlApgPY7XyDjXydrh17PgXT
61x9vNyhIN5Z1t4yL521LnSmSMDgVpggS/I7oyDR8VfL1lutaeI2PxamxMKrZKxA
BHzkljekE9GJLCP/XdBKoHEXu0Iu6tDAptTm7zQYeApkBc/Kt8NhZn3ubHqOCCfN
7AWjPWIwa5yghIk=
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:15:06 2025 by rpki-client