![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137302e38322e37322e302f32322d3234203d3e20323632353639.roa
File: 3137302e38322e37322e302f32322d3234203d3e20323632353639.roa (raw, json)
Hash identifier: wnTI1d0sz1l0bvin+ItQeSqphynmezbuh7HG6W/tPd8=
Subject key identifier: 83:0D:E0:1E:40:AF:42:47:CF:47:DF:5F:77:89:96:38:D0:B4:AC:BD
Certificate issuer: /CN=FAB6DEFD935A1FD09149B7C7A83FF88F51D92AE9
Certificate serial: 04A8EAD751549A26530ED41D4EDD9EDC4E1A23F4
Authority key identifier: FA:B6:DE:FD:93:5A:1F:D0:91:49:B7:C7:A8:3F:F8:8F:51:D9:2A:E9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAB6DEFD935A1FD09149B7C7A83FF88F51D92AE9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137302e38322e37322e302f32322d3234203d3e20323632353639.roa
Signing time: Tue 30 Jan 2024 14:21:39 +0000
ROA not before: Tue 30 Jan 2024 14:16:39 +0000
ROA not after: Tue 28 Jan 2025 14:21:39 +0000
asID: 262569
IP address blocks: 170.82.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:a8:ea:d7:51:54:9a:26:53:0e:d4:1d:4e:dd:9e:dc:4e:1a:23:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FAB6DEFD935A1FD09149B7C7A83FF88F51D92AE9
Validity
Not Before: Jan 30 14:16:39 2024 GMT
Not After : Jan 28 14:21:39 2025 GMT
Subject: CN=830DE01E40AF4247CF47DF5F77899638D0B4ACBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8e:28:3e:fb:c2:1c:c0:c6:df:21:a8:66:07:
5d:45:3a:4e:72:ff:30:67:46:20:41:4a:bb:7f:3b:
65:39:be:88:64:b2:e1:1b:f0:fa:bc:e8:4b:b0:dc:
5d:82:47:59:87:a4:bf:df:a6:1e:b3:ea:49:e8:13:
7f:2e:f3:18:9b:8f:ce:10:3b:a4:f5:ad:ec:ca:80:
4f:b1:3e:8a:38:6a:5c:86:3a:cb:9a:d6:80:77:c5:
5e:ff:63:9a:82:ff:99:05:ba:58:ba:7a:ba:9e:be:
fa:fc:6b:33:ba:af:09:25:0d:c8:97:16:ca:37:2d:
fa:59:34:c5:e2:de:70:93:33:51:7b:3d:e7:7e:f5:
2b:7c:59:83:0c:3d:00:20:c7:3e:b7:cd:49:59:94:
ae:c5:ec:8f:d2:ab:14:97:87:47:80:f6:51:a8:b8:
49:a6:64:bf:d3:32:8f:17:ea:e5:c7:ef:dc:6b:6b:
24:08:04:32:6d:8d:90:a2:7f:0d:1a:50:89:01:50:
de:7c:e1:53:cb:70:d5:14:47:2f:09:cb:80:2b:e9:
4f:8f:fd:26:de:70:11:87:ed:d8:38:eb:a8:9d:f7:
93:25:53:81:54:07:04:40:af:43:94:d4:4f:7d:5b:
71:c1:a9:2c:b5:36:7f:38:be:99:ea:34:e6:de:c3:
df:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0D:E0:1E:40:AF:42:47:CF:47:DF:5F:77:89:96:38:D0:B4:AC:BD
X509v3 Authority Key Identifier:
keyid:FA:B6:DE:FD:93:5A:1F:D0:91:49:B7:C7:A8:3F:F8:8F:51:D9:2A:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/FAB6DEFD935A1FD09149B7C7A83FF88F51D92AE9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAB6DEFD935A1FD09149B7C7A83FF88F51D92AE9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137302e38322e37322e302f32322d3234203d3e20323632353639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.82.72.0/22
Signature Algorithm: sha256WithRSAEncryption
82:b9:65:54:df:d3:cc:82:d6:3b:7b:4e:84:69:88:59:89:f6:
4a:cd:38:03:02:7e:9e:53:1f:94:5e:c5:dc:76:c6:a5:b1:d0:
60:c3:10:03:d4:9e:f5:17:47:22:18:93:45:a8:13:fd:90:e2:
b3:f9:c1:a5:fc:91:42:07:13:c9:cb:8b:00:59:a6:75:9a:ab:
a0:6c:a9:c2:b3:e1:7a:a4:90:d7:e5:85:45:7a:a7:a4:39:8f:
3a:91:2a:77:b7:73:0b:a7:bb:d3:9d:d2:fe:79:fe:14:dc:0e:
65:c7:ec:08:5d:ff:1c:97:c2:79:7e:6b:26:54:d5:76:ae:ec:
d9:5b:cd:b5:03:ca:ad:fd:66:f3:ee:a8:19:7a:f7:05:6a:2c:
32:0e:82:62:dd:b9:68:d3:b0:4d:d1:db:ba:67:8f:23:05:bb:
11:df:ac:ee:4d:d1:17:53:22:1e:cd:74:17:a9:4e:fd:1e:d8:
c0:da:55:2c:c4:48:a3:e1:70:ca:43:54:3a:3b:66:96:86:12:
9e:cd:d0:3b:6b:13:00:d4:58:84:4b:a9:1b:20:a6:96:84:09:
17:93:b3:b8:29:c8:0c:5a:f5:52:e3:fa:d0:18:24:bd:24:55:
44:14:27:eb:69:1d:56:ee:f9:2a:c2:8a:78:cc:4d:38:f2:b0:
4d:0b:3d:84
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUBKjq11FUmiZTDtQdTt2e3E4aI/QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkFCNkRFRkQ5MzVBMUZEMDkxNDlCN0M3QTgzRkY4OEY1
MUQ5MkFFOTAeFw0yNDAxMzAxNDE2MzlaFw0yNTAxMjgxNDIxMzlaMDMxMTAvBgNV
BAMTKDgzMERFMDFFNDBBRjQyNDdDRjQ3REY1Rjc3ODk5NjM4RDBCNEFDQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6jig++8IcwMbfIahmB11FOk5y
/zBnRiBBSrt/O2U5vohksuEb8Pq86Euw3F2CR1mHpL/fph6z6knoE38u8xibj84Q
O6T1rezKgE+xPoo4alyGOsua1oB3xV7/Y5qC/5kFuli6erqevvr8azO6rwklDciX
Fso3LfpZNMXi3nCTM1F7Ped+9St8WYMMPQAgxz63zUlZlK7F7I/SqxSXh0eA9lGo
uEmmZL/TMo8X6uXH79xrayQIBDJtjZCifw0aUIkBUN584VPLcNUURy8Jy4Ar6U+P
/SbecBGH7dg466id95MlU4FUBwRAr0OU1E99W3HBqSy1Nn84vpnqNObew98VAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUgw3gHkCvQkfPR99fd4mWONC0rL0wHwYDVR0j
BBgwFoAU+rbe/ZNaH9CRSbfHqD/4j1HZKukwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9SS21yWkFLRVZlb0g3WVZlN1lHZ1VqVnBKb1lUcVNHS25IVGVYYkVxRjNi
LzAvRkFCNkRFRkQ5MzVBMUZEMDkxNDlCN0M3QTgzRkY4OEY1MUQ5MkFFOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9GQUI2REVGRDkzNUExRkQwOTE0
OUI3QzdBODNGRjg4RjUxRDkyQUU5LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9S
S21yWkFLRVZlb0g3WVZlN1lHZ1VqVnBKb1lUcVNHS25IVGVYYkVxRjNiLzAvMzEz
NzMwMmUzODMyMmUzNzMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMyMzUz
NjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCqlJIMA0GCSqGSIb3DQEBCwUAA4IBAQCCuWVU39PMgtY7
e06EaYhZifZKzTgDAn6eUx+UXsXcdsalsdBgwxAD1J71F0ciGJNFqBP9kOKz+cGl
/JFCBxPJy4sAWaZ1mqugbKnCs+F6pJDX5YVFeqekOY86kSp3t3MLp7vTndL+ef4U
3A5lx+wIXf8cl8J5fmsmVNV2ruzZW821A8qt/Wbz7qgZevcFaiwyDoJi3blo07BN
0du6Z48jBbsR36zuTdEXUyIezXQXqU79HtjA2lUsxEij4XDKQ1Q6O2aWhhKezdA7
axMA1FiES6kbIKaWhAkXk7O4KcgMWvVS4/rQGCS9JFVEFCfraR1W7vkqwop4zE04
8rBNCz2E
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org