![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Hyvr8kdMTNrgG9XbP7xo4k35WAdCcZP6D31eKCbPyq1c/0/3137302e3235342e38342e302f32332d3233203d3e20323635313132.roa
File: 3137302e3235342e38342e302f32332d3233203d3e20323635313132.roa (raw, json)
Hash identifier: ECd9HrBxOhiRMGW0VUbVj37EkuYYf96gcr9A3e3tidI=
Subject key identifier: A3:2A:0C:AB:B2:14:2B:F8:29:00:EB:A0:C4:45:2E:5C:76:13:31:7C
Certificate issuer: /CN=B7326415BE734D8A751207ED27CE3E324C6FA9BE
Certificate serial: 3A3EE9F935880CAFE01F1E416F7F0526BF188C6A
Authority key identifier: B7:32:64:15:BE:73:4D:8A:75:12:07:ED:27:CE:3E:32:4C:6F:A9:BE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7326415BE734D8A751207ED27CE3E324C6FA9BE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Hyvr8kdMTNrgG9XbP7xo4k35WAdCcZP6D31eKCbPyq1c/0/3137302e3235342e38342e302f32332d3233203d3e20323635313132.roa
Signing time: Tue 19 Dec 2023 18:49:27 +0000
ROA not before: Tue 19 Dec 2023 18:44:27 +0000
ROA not after: Tue 17 Dec 2024 18:49:27 +0000
asID: 265112
IP address blocks: 170.254.84.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:3e:e9:f9:35:88:0c:af:e0:1f:1e:41:6f:7f:05:26:bf:18:8c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7326415BE734D8A751207ED27CE3E324C6FA9BE
Validity
Not Before: Dec 19 18:44:27 2023 GMT
Not After : Dec 17 18:49:27 2024 GMT
Subject: CN=A32A0CABB2142BF82900EBA0C4452E5C7613317C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b5:45:f2:e8:af:5c:6d:10:b2:c9:7e:34:fd:
40:4f:d1:f3:0f:2a:cc:d1:e6:66:eb:8d:d9:b4:ab:
12:2b:d5:2b:9d:a4:2c:fa:91:05:a1:a1:bd:45:42:
71:be:49:9d:ad:8d:55:37:60:3a:00:b7:78:a0:8c:
2d:b9:ad:d5:b2:8a:94:1d:6e:66:8a:4c:4c:18:7d:
4b:1a:fe:0a:d0:dd:bb:2f:25:14:25:93:ff:53:5c:
01:2e:f6:d6:bd:67:eb:dd:65:ce:c4:73:69:e1:1a:
10:9e:26:16:bc:81:63:2f:12:d9:8f:3c:50:b6:d4:
ad:07:fa:d0:bf:65:d2:2a:db:00:5f:44:b7:b9:02:
f5:4f:b9:f0:6e:e0:2d:d1:5b:a0:c2:1e:c9:f0:18:
97:c2:e3:8a:c8:b9:53:d6:9a:08:d0:63:0d:63:4b:
bc:30:34:1f:d7:54:c6:53:13:7f:8b:77:97:20:2e:
32:61:04:d0:4e:87:9e:0a:47:c1:a6:c4:78:47:ee:
98:a2:be:9a:67:2e:d6:ef:6f:a3:f5:f1:a0:5a:2c:
8e:1b:5e:14:a0:3f:4a:52:0e:46:a9:83:54:ba:56:
70:c4:f5:46:c7:31:1e:2f:dc:99:7d:bb:f8:e8:66:
f1:8b:84:11:a2:c5:03:f4:4a:a3:18:1e:25:dc:e9:
2e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:2A:0C:AB:B2:14:2B:F8:29:00:EB:A0:C4:45:2E:5C:76:13:31:7C
X509v3 Authority Key Identifier:
keyid:B7:32:64:15:BE:73:4D:8A:75:12:07:ED:27:CE:3E:32:4C:6F:A9:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Hyvr8kdMTNrgG9XbP7xo4k35WAdCcZP6D31eKCbPyq1c/0/B7326415BE734D8A751207ED27CE3E324C6FA9BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7326415BE734D8A751207ED27CE3E324C6FA9BE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hyvr8kdMTNrgG9XbP7xo4k35WAdCcZP6D31eKCbPyq1c/0/3137302e3235342e38342e302f32332d3233203d3e20323635313132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.84.0/23
Signature Algorithm: sha256WithRSAEncryption
18:28:19:4f:31:4c:93:dc:4e:2e:9c:10:d3:d8:c3:a5:a1:34:
8b:01:1d:47:10:3a:76:43:c3:9e:dc:07:93:53:16:55:73:4d:
46:8b:5d:25:bf:b5:dd:54:73:4b:c0:d8:98:fe:cd:53:a1:be:
0e:4e:f0:b3:a8:32:d4:e6:7c:b0:90:6f:d6:e1:d9:7f:02:67:
b1:85:09:3e:0b:8b:b3:ec:75:cb:8a:01:d1:42:dd:44:4b:23:
f2:a1:c6:93:43:e8:52:b0:12:c2:23:04:11:81:a3:66:99:f7:
77:35:45:1a:9a:01:16:12:cf:98:58:bc:11:d2:b0:ec:09:30:
88:6f:df:6c:4e:fc:a4:ac:1e:2a:00:60:04:56:a2:c5:2e:2e:
fc:ef:1a:59:93:c7:d2:f1:8d:45:01:a2:23:f7:3a:f2:be:bc:
d5:14:25:ab:ec:8d:ca:31:b4:6c:32:25:0a:e7:a4:30:9a:e2:
53:d4:a6:08:a5:ff:90:a0:f6:28:62:20:71:1d:1c:44:0e:80:
6d:c3:06:ff:ad:8b:0a:3f:98:0c:03:33:c7:78:ed:86:81:24:
8e:25:b7:de:3e:38:2a:c8:75:5e:e4:6e:53:4e:36:6a:bb:47:
01:d1:4f:90:1e:23:17:45:c3:6e:8e:16:ab:64:30:c6:7c:26:
4b:49:10:94
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOj7p+TWIDK/gHx5Bb38FJr8YjGowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjczMjY0MTVCRTczNEQ4QTc1MTIwN0VEMjdDRTNFMzI0
QzZGQTlCRTAeFw0yMzEyMTkxODQ0MjdaFw0yNDEyMTcxODQ5MjdaMDMxMTAvBgNV
BAMTKEEzMkEwQ0FCQjIxNDJCRjgyOTAwRUJBMEM0NDUyRTVDNzYxMzMxN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCntUXy6K9cbRCyyX40/UBP0fMP
KszR5mbrjdm0qxIr1SudpCz6kQWhob1FQnG+SZ2tjVU3YDoAt3igjC25rdWyipQd
bmaKTEwYfUsa/grQ3bsvJRQlk/9TXAEu9ta9Z+vdZc7Ec2nhGhCeJha8gWMvEtmP
PFC21K0H+tC/ZdIq2wBfRLe5AvVPufBu4C3RW6DCHsnwGJfC44rIuVPWmgjQYw1j
S7wwNB/XVMZTE3+Ld5cgLjJhBNBOh54KR8GmxHhH7piivppnLtbvb6P18aBaLI4b
XhSgP0pSDkapg1S6VnDE9UbHMR4v3Jl9u/joZvGLhBGixQP0SqMYHiXc6S4RAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUoyoMq7IUK/gpAOugxEUuXHYTMXwwHwYDVR0j
BBgwFoAUtzJkFb5zTYp1EgftJ84+Mkxvqb4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHl2cjhrZE1UTnJnRzlYYlA3eG80azM1V0FkQ2NaUDZEMzFlS0NiUHlx
MWMvMC9CNzMyNjQxNUJFNzM0RDhBNzUxMjA3RUQyN0NFM0UzMjRDNkZBOUJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I3MzI2NDE1QkU3MzREOEE3
NTEyMDdFRDI3Q0UzRTMyNEM2RkE5QkUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h5dnI4a2RNVE5yZ0c5WGJQN3hvNGszNVdBZENjWlA2RDMxZUtDYlB5cTFjLzAv
MzEzNzMwMmUzMjM1MzQyZTM4MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzUzMTMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGq/lQwDQYJKoZIhvcNAQELBQADggEBABgoGU8x
TJPcTi6cENPYw6WhNIsBHUcQOnZDw57cB5NTFlVzTUaLXSW/td1Uc0vA2Jj+zVOh
vg5O8LOoMtTmfLCQb9bh2X8CZ7GFCT4Li7PsdcuKAdFC3URLI/KhxpND6FKwEsIj
BBGBo2aZ93c1RRqaARYSz5hYvBHSsOwJMIhv32xO/KSsHioAYARWosUuLvzvGlmT
x9LxjUUBoiP3OvK+vNUUJavsjcoxtGwyJQrnpDCa4lPUpgil/5Cg9ihiIHEdHEQO
gG3DBv+tiwo/mAwDM8d47YaBJI4lt94+OCrIdV7kblNONmq7RwHRT5AeIxdFw26O
FqtkMMZ8JktJEJQ=
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:13:52 2025 by rpki-client