![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/3138312e3233322e3132382e302f32322d3234203d3e20323731353132.roa
File: 3138312e3233322e3132382e302f32322d3234203d3e20323731353132.roa (raw, json)
Hash identifier: KPtMT86kJEBLXuP4YyBmGeVaqWT/lDmxP0ESV8qnqy4=
Subject key identifier: 4A:66:7F:74:4C:DA:B9:6F:40:89:CE:65:46:4E:0E:94:1A:66:9F:76
Certificate issuer: /CN=AC88E2B8518089044D3F00C0A71F5699DC4E11FA
Certificate serial: 422498F024D74A01ABF82318F55E69EC12B32067
Authority key identifier: AC:88:E2:B8:51:80:89:04:4D:3F:00:C0:A7:1F:56:99:DC:4E:11:FA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC88E2B8518089044D3F00C0A71F5699DC4E11FA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/3138312e3233322e3132382e302f32322d3234203d3e20323731353132.roa
Signing time: Wed 25 Oct 2023 22:57:07 +0000
ROA not before: Wed 25 Oct 2023 22:52:07 +0000
ROA not after: Wed 23 Oct 2024 22:57:07 +0000
asID: 271512
IP address blocks: 181.232.128.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:24:98:f0:24:d7:4a:01:ab:f8:23:18:f5:5e:69:ec:12:b3:20:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC88E2B8518089044D3F00C0A71F5699DC4E11FA
Validity
Not Before: Oct 25 22:52:07 2023 GMT
Not After : Oct 23 22:57:07 2024 GMT
Subject: CN=4A667F744CDAB96F4089CE65464E0E941A669F76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a8:89:9b:a6:7a:6f:01:72:f9:7f:0b:8c:21:
69:79:bb:2c:fb:10:57:d8:f6:e6:5d:ad:40:c9:4e:
93:7b:be:7e:31:52:73:a1:8c:e2:d1:37:7d:5e:4d:
95:26:ec:cb:62:d4:03:01:0c:55:16:71:2c:cc:ed:
53:6e:b9:22:cf:c4:3d:7c:81:54:6f:06:02:96:64:
e5:5c:12:85:80:55:b9:23:2f:c4:92:88:79:dc:a2:
55:d5:89:4f:5e:b3:44:21:e6:78:e2:9d:ef:d8:34:
16:58:c5:9b:cf:91:93:15:85:3a:69:14:28:49:00:
e4:27:5c:8e:da:e2:bc:31:e9:eb:7c:2c:08:83:04:
05:d6:81:8c:0e:1f:4f:3f:53:e9:74:cd:7e:3e:0e:
26:33:a2:02:76:57:93:20:5d:29:61:bb:c8:63:1f:
77:cb:67:0f:ae:77:c6:d0:bf:f5:32:45:5d:da:2f:
41:84:8a:1e:c4:45:63:6f:72:67:1e:b8:ac:a3:04:
85:ae:37:bf:72:15:e6:e4:2b:24:02:e3:a4:03:7e:
e6:14:62:36:e4:2a:12:36:b2:81:ed:c0:94:94:a1:
c0:07:d0:a8:76:eb:bb:e1:20:30:42:2d:8e:26:6a:
b4:c6:5a:94:59:2a:df:0d:77:3f:1b:22:74:34:58:
43:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:66:7F:74:4C:DA:B9:6F:40:89:CE:65:46:4E:0E:94:1A:66:9F:76
X509v3 Authority Key Identifier:
keyid:AC:88:E2:B8:51:80:89:04:4D:3F:00:C0:A7:1F:56:99:DC:4E:11:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/AC88E2B8518089044D3F00C0A71F5699DC4E11FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC88E2B8518089044D3F00C0A71F5699DC4E11FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/3138312e3233322e3132382e302f32322d3234203d3e20323731353132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.232.128.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:87:5b:ab:9d:3f:2a:d2:f1:ba:87:45:da:be:56:ef:0c:69:
0a:a8:0e:2f:2d:06:13:4f:f3:9f:04:d7:af:9b:09:bc:d8:23:
cb:8c:2c:dc:4a:5a:f2:f3:7d:20:9d:a8:82:b7:97:3c:9b:89:
32:93:10:e5:40:e7:ca:3f:5f:55:37:65:7e:45:77:b1:85:21:
f5:01:f9:91:de:ae:c1:bf:19:e6:0c:c1:3c:55:d4:8c:33:1d:
cc:9c:63:62:93:d4:de:41:30:b7:ea:18:05:a3:ae:cd:30:61:
d6:97:cb:26:14:a4:90:97:61:7e:59:23:99:95:89:c5:8e:92:
43:a4:9e:0c:d4:ea:ca:50:b0:26:d7:4d:9a:b7:8c:b6:05:4e:
35:5b:3d:c3:7f:fe:2e:1d:c6:f8:79:3f:bc:1c:a8:2a:b9:e2:
73:e9:75:04:e8:a3:ca:e3:3d:cb:ae:64:10:4c:3b:0e:fd:b5:
cd:74:0e:74:22:0f:1f:7a:61:41:45:86:c8:c6:4c:2e:09:9a:
8b:2d:1f:d9:b7:b9:be:94:27:1a:57:46:1a:2c:70:6b:e6:20:
f3:7e:80:33:e3:f3:21:f7:0c:81:39:f7:5e:0e:ba:fc:30:db:
c1:93:36:39:10:b1:0b:fc:ae:c1:7f:70:23:85:f3:7f:6b:10:
25:e4:af:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:07 2025 by rpki-client