![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3137392e3130382e34342e302f32322d3232203d3e20323634383836.roa
File: 3137392e3130382e34342e302f32322d3232203d3e20323634383836.roa (raw, json)
Hash identifier: SHYLCAN3CLldybMM+dz+0mceaJPVeOOBMDE8ZUOnMuk=
Subject key identifier: 04:50:04:09:67:1B:1C:2A:4C:8C:13:62:53:E5:4E:DC:46:C5:09:38
Certificate issuer: /CN=BE343E3D32BA67E514AD2010392367A6DF1F003E
Certificate serial: 2D5A584356C5C38C33EF7CAF9A04422633437A70
Authority key identifier: BE:34:3E:3D:32:BA:67:E5:14:AD:20:10:39:23:67:A6:DF:1F:00:3E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE343E3D32BA67E514AD2010392367A6DF1F003E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3137392e3130382e34342e302f32322d3232203d3e20323634383836.roa
Signing time: Thu 17 Nov 2022 18:25:09 +0000
ROA not before: Thu 17 Nov 2022 18:20:09 +0000
ROA not after: Thu 16 Nov 2023 18:25:09 +0000
asID: 264886
IP address blocks: 179.108.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:5a:58:43:56:c5:c3:8c:33:ef:7c:af:9a:04:42:26:33:43:7a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE343E3D32BA67E514AD2010392367A6DF1F003E
Validity
Not Before: Nov 17 18:20:09 2022 GMT
Not After : Nov 16 18:25:09 2023 GMT
Subject: CN=04500409671B1C2A4C8C136253E54EDC46C50938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:09:f4:54:07:4a:b9:1a:5a:ec:02:01:1a:f2:
60:7a:de:0d:9a:2d:f2:c6:04:db:c7:6c:fc:84:34:
e0:43:66:b9:df:e7:5b:85:6d:58:0c:07:c9:a0:a6:
8a:ac:01:b4:42:91:97:c3:0f:c7:3e:01:06:ca:1e:
83:d6:a6:6e:6e:73:78:1e:25:cd:72:f4:ab:dc:0d:
fd:f1:71:8e:aa:ec:72:4c:ba:11:67:0f:cc:f5:28:
8b:a1:02:4b:24:e1:27:6e:80:d7:bd:40:19:93:5d:
05:07:49:fe:00:68:cc:81:8b:00:c9:38:71:5b:93:
7b:59:a9:f0:93:fa:3f:d1:c3:ec:24:d7:34:cd:69:
65:85:a4:0c:c6:2e:ec:cc:8a:ee:6b:1a:1a:cd:11:
39:1e:3d:18:7b:8c:fc:cc:6c:c5:c6:ec:d3:0d:bd:
63:6c:db:8d:87:c0:f1:ae:11:68:8e:c9:35:b3:11:
a6:1f:f6:e6:db:17:29:91:a0:5d:67:89:ec:d9:ea:
f7:94:7c:dd:34:c8:5d:7c:77:67:72:93:89:49:0e:
4b:18:fd:39:6c:b2:e8:ab:a0:4f:32:40:bf:7b:4e:
fc:e0:3b:ba:05:ec:95:51:91:d4:db:0d:88:88:ac:
3e:ae:de:57:83:54:25:dc:b3:a1:d6:18:bd:53:b2:
05:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:50:04:09:67:1B:1C:2A:4C:8C:13:62:53:E5:4E:DC:46:C5:09:38
X509v3 Authority Key Identifier:
keyid:BE:34:3E:3D:32:BA:67:E5:14:AD:20:10:39:23:67:A6:DF:1F:00:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/BE343E3D32BA67E514AD2010392367A6DF1F003E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE343E3D32BA67E514AD2010392367A6DF1F003E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3137392e3130382e34342e302f32322d3232203d3e20323634383836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.108.44.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:43:c6:a8:c0:30:d1:3c:ff:e2:22:22:6f:4b:4e:f6:cd:71:
df:98:67:3f:93:b8:bf:61:80:b1:2c:f7:d5:de:fa:90:e2:a5:
b8:8d:4b:f3:c2:61:da:85:ed:4e:22:20:92:01:10:b7:6a:bd:
df:ee:4c:8c:84:31:bf:18:c5:2b:b7:11:b7:3e:2d:e9:3d:a4:
18:25:d3:9b:4a:4f:01:4b:40:5c:7d:2a:60:af:f9:74:f9:18:
7e:75:36:d3:6b:8f:ff:e6:71:68:10:89:e4:b2:b1:82:53:a3:
43:fe:bd:8d:15:62:7b:60:5b:c5:cf:f3:5c:eb:2d:e8:1c:35:
2d:c5:fb:91:38:fd:61:97:8b:7b:cb:d2:0f:60:5c:be:1d:6a:
c7:5f:c3:60:e2:02:c2:02:8a:2b:ee:a1:3b:cf:6f:77:22:49:
18:64:be:2e:0d:8f:40:0d:ac:4a:75:a0:f7:7a:c7:af:09:6c:
5c:d5:06:68:5f:be:df:9d:22:7a:87:1d:02:d9:85:ea:55:76:
aa:0c:ad:74:3b:a6:d9:6b:ce:75:69:6a:44:54:84:cb:ed:84:
7a:9a:61:59:40:f0:2a:9b:bf:11:e3:52:38:24:e0:70:b0:a6:
11:56:c3:12:c6:89:fe:7b:e3:af:3e:1f:ee:21:cc:55:45:d3:
c6:fe:fc:79
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIULVpYQ1bFw4wz73yvmgRCJjNDenAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkUzNDNFM0QzMkJBNjdFNTE0QUQyMDEwMzkyMzY3QTZE
RjFGMDAzRTAeFw0yMjExMTcxODIwMDlaFw0yMzExMTYxODI1MDlaMDMxMTAvBgNV
BAMTKDA0NTAwNDA5NjcxQjFDMkE0QzhDMTM2MjUzRTU0RURDNDZDNTA5MzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+CfRUB0q5GlrsAgEa8mB63g2a
LfLGBNvHbPyENOBDZrnf51uFbVgMB8mgpoqsAbRCkZfDD8c+AQbKHoPWpm5uc3ge
Jc1y9KvcDf3xcY6q7HJMuhFnD8z1KIuhAksk4SdugNe9QBmTXQUHSf4AaMyBiwDJ
OHFbk3tZqfCT+j/Rw+wk1zTNaWWFpAzGLuzMiu5rGhrNETkePRh7jPzMbMXG7NMN
vWNs242HwPGuEWiOyTWzEaYf9ubbFymRoF1niezZ6veUfN00yF18d2dyk4lJDksY
/TlssuiroE8yQL97TvzgO7oF7JVRkdTbDYiIrD6u3leDVCXcs6HWGL1TsgVvAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUBFAECWcbHCpMjBNiU+VO3EbFCTgwHwYDVR0j
BBgwFoAUvjQ+PTK6Z+UUrSAQOSNnpt8fAD4wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9hZlhGTWtReXBKamFTYVV6dDNFUVFvSk5jVnV6aGhtZEJOdTFXNFhFbzNp
LzAvQkUzNDNFM0QzMkJBNjdFNTE0QUQyMDEwMzkyMzY3QTZERjFGMDAzRS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9CRTM0M0UzRDMyQkE2N0U1MTRB
RDIwMTAzOTIzNjdBNkRGMUYwMDNFLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9h
ZlhGTWtReXBKamFTYVV6dDNFUVFvSk5jVnV6aGhtZEJOdTFXNFhFbzNpLzAvMzEz
NzM5MmUzMTMwMzgyZTM0MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzQz
ODM4MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAKzbCwwDQYJKoZIhvcNAQELBQADggEBAE5DxqjAMNE8
/+IiIm9LTvbNcd+YZz+TuL9hgLEs99Xe+pDipbiNS/PCYdqF7U4iIJIBELdqvd/u
TIyEMb8YxSu3Ebc+Lek9pBgl05tKTwFLQFx9KmCv+XT5GH51NtNrj//mcWgQieSy
sYJTo0P+vY0VYntgW8XP81zrLegcNS3F+5E4/WGXi3vL0g9gXL4dasdfw2DiAsIC
iivuoTvPb3ciSRhkvi4Nj0ANrEp1oPd6x68JbFzVBmhfvt+dInqHHQLZhepVdqoM
rXQ7ptlrznVpakRUhMvthHqaYVlA8CqbvxHjUjgk4HCwphFWwxLGif57468+H+4h
zFVF08b+/Hk=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:40:18 2025 by rpki-client