![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3133382e3132312e3235332e302f32342d3234203d3e20323632373635.roa
File: 3133382e3132312e3235332e302f32342d3234203d3e20323632373635.roa (raw, json)
Hash identifier: Gdn8s7PvLKNtN8D4+0H+oONOmS5fptpgZbgIgq2mQSk=
Subject key identifier: 80:F5:94:8E:0F:32:B8:24:BD:E1:68:C5:4A:31:D8:49:D5:6D:8E:87
Certificate issuer: /CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
Certificate serial: 188471EE488B49F9C10484DE028F8FA01C159AE2
Authority key identifier: 5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3133382e3132312e3235332e302f32342d3234203d3e20323632373635.roa
Signing time: Tue 20 Jun 2023 13:53:20 +0000
ROA not before: Tue 20 Jun 2023 13:48:20 +0000
ROA not after: Tue 18 Jun 2024 13:53:20 +0000
asID: 262765
IP address blocks: 138.121.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:84:71:ee:48:8b:49:f9:c1:04:84:de:02:8f:8f:a0:1c:15:9a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
Validity
Not Before: Jun 20 13:48:20 2023 GMT
Not After : Jun 18 13:53:20 2024 GMT
Subject: CN=80F5948E0F32B824BDE168C54A31D849D56D8E87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ad:6f:2f:e8:6c:ff:c6:06:2a:24:b0:bc:2c:
60:64:49:ac:4a:63:b0:9a:ed:2e:ce:38:01:4e:85:
6c:2b:e7:5b:bc:4a:fd:3e:78:10:5e:ea:fc:d5:f0:
8f:42:d6:99:3a:6c:88:c9:27:41:f3:a1:ae:20:9b:
96:77:64:92:b4:e7:5f:04:66:ab:fc:8c:d2:1b:3a:
b3:17:a0:1d:0c:02:bc:e0:68:79:b0:c1:97:a6:d2:
e2:45:59:e2:a3:9f:be:e4:f9:00:fb:b3:7d:91:0b:
fb:3f:6b:8f:8e:89:c6:de:f4:ce:4d:e5:d1:f6:51:
18:16:50:f8:0a:9a:22:a5:dd:89:42:08:7c:68:6c:
82:e8:bb:fb:bf:88:9c:f2:33:a0:e8:ad:47:e6:6b:
14:df:00:d5:4a:2b:0f:ea:f4:af:f5:43:c6:b8:34:
d6:d1:11:96:0b:42:a1:a2:06:49:5d:a0:2d:db:2f:
2e:a3:9e:d9:fa:b7:a9:a0:a3:b4:a3:da:73:9c:16:
eb:d4:b8:08:fd:b4:d0:6f:75:62:9f:06:1c:be:f7:
d0:df:f6:94:57:5e:e6:f6:43:a5:03:c5:84:8d:0e:
c6:c0:65:36:28:69:ed:ed:92:d5:32:fd:a9:4f:98:
ab:18:31:33:66:ba:43:34:7e:e9:9e:1a:90:46:b1:
8b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F5:94:8E:0F:32:B8:24:BD:E1:68:C5:4A:31:D8:49:D5:6D:8E:87
X509v3 Authority Key Identifier:
keyid:5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3133382e3132312e3235332e302f32342d3234203d3e20323632373635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.253.0/24
Signature Algorithm: sha256WithRSAEncryption
77:a8:89:82:01:c7:c8:ba:32:6a:ef:cf:5b:50:89:73:dd:4d:
bd:f1:4c:04:1d:89:db:3a:e3:73:07:c7:1f:d9:2b:2d:1b:e0:
15:9a:20:da:86:ed:a9:21:88:cd:48:d7:f5:07:21:7a:1d:f3:
0a:b7:9b:97:51:cf:8d:46:14:f4:08:4b:a5:a6:b5:6c:fe:7c:
44:55:36:de:1c:ff:4f:c9:14:82:1c:a8:55:ae:10:75:36:90:
42:be:05:2b:40:34:6a:9f:0b:73:7b:f2:66:42:fd:92:05:ca:
a9:3a:8c:3e:af:fe:66:c2:0e:d4:b1:05:3d:ff:7c:9b:68:88:
4b:fe:54:0d:47:cc:bb:ee:21:2f:af:69:b3:56:85:24:fc:b1:
fc:89:f1:4d:aa:7f:f4:4d:9e:b2:15:02:ca:06:65:c4:ec:78:
85:68:48:93:84:04:45:a1:4f:c4:1f:60:da:b7:db:2c:c1:e5:
e8:a8:ce:85:1d:a9:1b:58:73:94:61:27:c6:05:3b:49:97:bf:
8c:4a:e1:bb:ff:d2:96:be:51:a9:c9:fd:1a:6a:5d:26:e0:b2:
7a:3d:75:db:aa:8f:36:a5:52:5b:56:ce:cd:03:1a:ff:58:b7:
1a:72:20:51:45:56:eb:27:53:1e:e7:eb:95:dd:71:16:7b:d7:
c7:e5:5c:c3
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUGIRx7kiLSfnBBITeAo+PoBwVmuIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUNFMUEzODA1MjIyNTc5OEE3QzVBMjU5MjY5MDMzRkM2
RDhCNTNBNDAeFw0yMzA2MjAxMzQ4MjBaFw0yNDA2MTgxMzUzMjBaMDMxMTAvBgNV
BAMTKDgwRjU5NDhFMEYzMkI4MjRCREUxNjhDNTRBMzFEODQ5RDU2RDhFODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKrW8v6Gz/xgYqJLC8LGBkSaxK
Y7Ca7S7OOAFOhWwr51u8Sv0+eBBe6vzV8I9C1pk6bIjJJ0Hzoa4gm5Z3ZJK0518E
Zqv8jNIbOrMXoB0MArzgaHmwwZem0uJFWeKjn77k+QD7s32RC/s/a4+Oicbe9M5N
5dH2URgWUPgKmiKl3YlCCHxobILou/u/iJzyM6DorUfmaxTfANVKKw/q9K/1Q8a4
NNbREZYLQqGiBkldoC3bLy6jntn6t6mgo7Sj2nOcFuvUuAj9tNBvdWKfBhy+99Df
9pRXXub2Q6UDxYSNDsbAZTYoae3tktUy/alPmKsYMTNmukM0fumeGpBGsYu9AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUgPWUjg8yuCS94WjFSjHYSdVtjocwHwYDVR0j
BBgwFoAUXOGjgFIiV5inxaJZJpAz/G2LU6QwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9qcHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdualV0ODNMSzlY
LzAvNUNFMUEzODA1MjIyNTc5OEE3QzVBMjU5MjY5MDMzRkM2RDhCNTNBNC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC81Q0UxQTM4MDUyMjI1Nzk4QTdD
NUEyNTkyNjkwMzNGQzZEOEI1M0E0LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9q
cHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdualV0ODNMSzlYLzAvMzEz
MzM4MmUzMTMyMzEyZTMyMzUzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYz
MjM3MzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAIp5/TANBgkqhkiG9w0BAQsFAAOCAQEAd6iJggHH
yLoyau/PW1CJc91NvfFMBB2J2zrjcwfHH9krLRvgFZog2obtqSGIzUjX9Qcheh3z
Crebl1HPjUYU9AhLpaa1bP58RFU23hz/T8kUghyoVa4QdTaQQr4FK0A0ap8Lc3vy
ZkL9kgXKqTqMPq/+ZsIO1LEFPf98m2iIS/5UDUfMu+4hL69ps1aFJPyx/InxTap/
9E2eshUCygZlxOx4hWhIk4QERaFPxB9g2rfbLMHl6KjOhR2pG1hzlGEnxgU7SZe/
jErhu//Slr5Rqcn9GmpdJuCyej1126qPNqVSW1bOzQMa/1i3GnIgUUVW6ydTHufr
ld1xFnvXx+Vcww==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:37:24 2025 by rpki-client