![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/0/34352e3137312e3231362e302f32342d3234203d3e20323638373332.roa
File: 34352e3137312e3231362e302f32342d3234203d3e20323638373332.roa (raw, json)
Hash identifier: 9dH2Sw2CwySWvqUoxxLAp49pNG8bEZ0xjr0WjeYSzM0=
Subject key identifier: 6C:1A:F2:CC:D0:9A:02:33:51:27:F2:3D:50:D6:85:FD:5D:07:E8:C9
Certificate issuer: /CN=44F1E4B94FF224CCCBA4BB09DE960E59459274F5
Certificate serial: 1AF9A5788B629DFD5764564BC305A6BFA37E6A2D
Authority key identifier: 44:F1:E4:B9:4F:F2:24:CC:CB:A4:BB:09:DE:96:0E:59:45:92:74:F5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44F1E4B94FF224CCCBA4BB09DE960E59459274F5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/0/34352e3137312e3231362e302f32342d3234203d3e20323638373332.roa
Signing time: Thu 18 Jan 2024 19:00:00 +0000
ROA not before: Thu 18 Jan 2024 18:55:00 +0000
ROA not after: Thu 16 Jan 2025 19:00:00 +0000
asID: 268732
IP address blocks: 45.171.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:f9:a5:78:8b:62:9d:fd:57:64:56:4b:c3:05:a6:bf:a3:7e:6a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44F1E4B94FF224CCCBA4BB09DE960E59459274F5
Validity
Not Before: Jan 18 18:55:00 2024 GMT
Not After : Jan 16 19:00:00 2025 GMT
Subject: CN=6C1AF2CCD09A02335127F23D50D685FD5D07E8C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:18:8b:39:e4:71:cd:61:5a:44:cf:cc:57:f3:
45:15:1a:c0:d2:61:35:e3:7f:f0:3e:81:c5:28:ca:
e2:26:7e:af:2c:67:31:61:58:2a:b2:19:4b:93:56:
72:e1:56:b4:5d:be:4b:3d:a2:64:23:80:a6:d5:40:
d3:de:4b:62:bb:23:d3:58:de:66:b2:c1:f6:ff:db:
e0:fe:2d:da:8f:e9:66:01:97:41:96:8f:68:42:67:
eb:cf:9f:d1:06:26:ad:16:78:2d:d9:72:d6:41:05:
47:6c:a8:5b:45:80:97:2a:58:2b:31:a6:55:70:97:
51:e1:f8:36:63:07:fb:ff:b4:16:6f:7e:07:e3:d3:
87:ea:d0:fd:2a:b2:a7:36:0a:be:9a:76:9c:8c:d3:
f4:e9:83:17:fb:ee:74:a1:04:97:e4:a9:97:04:d7:
d3:63:95:4f:ca:2d:05:cd:fd:4d:c0:a6:b9:07:48:
05:cb:f9:b3:b1:08:c0:a5:59:05:c9:d6:8f:38:a0:
4d:a0:31:1d:54:b4:6f:da:b8:02:7f:1f:d6:9d:f5:
42:eb:3b:4f:16:c4:de:66:f9:0e:d2:a2:f6:e6:93:
87:42:60:a0:d1:91:80:d8:9d:78:05:19:e5:c3:c1:
ea:3e:87:4f:40:9e:5a:c5:60:00:11:1e:d7:91:0d:
f6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:1A:F2:CC:D0:9A:02:33:51:27:F2:3D:50:D6:85:FD:5D:07:E8:C9
X509v3 Authority Key Identifier:
keyid:44:F1:E4:B9:4F:F2:24:CC:CB:A4:BB:09:DE:96:0E:59:45:92:74:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/0/44F1E4B94FF224CCCBA4BB09DE960E59459274F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44F1E4B94FF224CCCBA4BB09DE960E59459274F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/0/34352e3137312e3231362e302f32342d3234203d3e20323638373332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.216.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:b7:a0:e4:c5:57:33:22:ea:97:01:72:47:38:07:76:12:ad:
0d:f2:dc:be:2e:bf:41:eb:1d:ba:86:7a:e8:14:0f:ca:34:cb:
84:6c:5f:8f:cb:27:19:7b:02:fb:31:0c:c3:75:39:ea:92:2f:
ff:40:92:e4:ba:65:1f:b7:7e:3f:06:94:23:bb:73:ff:00:8c:
d6:7a:c1:ef:33:12:8b:f1:d4:e4:08:c7:f6:21:bf:6b:0f:3f:
fc:d5:aa:46:a0:5d:fb:4d:3c:e6:e4:6e:3d:e0:6f:ec:99:f6:
9f:84:2b:0a:4f:da:a8:42:71:88:4a:71:a7:97:9d:f7:a5:bc:
17:1d:2f:06:d9:0d:90:fc:a3:c8:42:4a:de:00:26:1d:60:b3:
e4:4a:ee:3c:ce:be:19:ee:bd:a5:48:03:62:8d:b7:7a:ac:40:
32:22:2d:c8:fe:d6:2d:b6:7d:32:a5:59:bc:82:07:04:e9:e3:
ca:23:73:4f:9b:97:57:80:18:90:79:ce:25:73:92:3e:cf:51:
96:1b:e7:bf:e6:4a:cf:91:3f:bb:71:00:69:b1:3d:d4:f3:20:
28:c8:32:98:ba:d6:82:45:ea:a2:d6:d1:cd:b1:fc:77:bb:8b:
10:33:2f:dc:c8:f5:37:c2:47:99:c1:77:42:9a:dc:ee:bf:77:
5d:b8:58:c7
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUGvmleItinf1XZFZLwwWmv6N+ai0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDRGMUU0Qjk0RkYyMjRDQ0NCQTRCQjA5REU5NjBFNTk0
NTkyNzRGNTAeFw0yNDAxMTgxODU1MDBaFw0yNTAxMTYxOTAwMDBaMDMxMTAvBgNV
BAMTKDZDMUFGMkNDRDA5QTAyMzM1MTI3RjIzRDUwRDY4NUZENUQwN0U4QzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsGIs55HHNYVpEz8xX80UVGsDS
YTXjf/A+gcUoyuImfq8sZzFhWCqyGUuTVnLhVrRdvks9omQjgKbVQNPeS2K7I9NY
3maywfb/2+D+LdqP6WYBl0GWj2hCZ+vPn9EGJq0WeC3ZctZBBUdsqFtFgJcqWCsx
plVwl1Hh+DZjB/v/tBZvfgfj04fq0P0qsqc2Cr6adpyM0/Tpgxf77nShBJfkqZcE
19NjlU/KLQXN/U3AprkHSAXL+bOxCMClWQXJ1o84oE2gMR1UtG/auAJ/H9ad9ULr
O08WxN5m+Q7Sovbmk4dCYKDRkYDYnXgFGeXDweo+h09AnlrFYAARHteRDfZXAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUbBryzNCaAjNRJ/I9UNaF/V0H6MkwHwYDVR0j
BBgwFoAURPHkuU/yJMzLpLsJ3pYOWUWSdPUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9uMTZ5MUxVTFlrS3lYem1ObVlnUXNDZTlzdjl2d2k0M1BRTHpyUXBLalNN
LzAvNDRGMUU0Qjk0RkYyMjRDQ0NCQTRCQjA5REU5NjBFNTk0NTkyNzRGNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC80NEYxRTRCOTRGRjIyNENDQ0JB
NEJCMDlERTk2MEU1OTQ1OTI3NEY1LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9u
MTZ5MUxVTFlrS3lYem1ObVlnUXNDZTlzdjl2d2k0M1BRTHpyUXBLalNNLzAvMzQz
NTJlMzEzNzMxMmUzMjMxMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2Mzgz
NzMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAAtq9gwDQYJKoZIhvcNAQELBQADggEBALC3oOTFVzMi
6pcBckc4B3YSrQ3y3L4uv0HrHbqGeugUD8o0y4RsX4/LJxl7AvsxDMN1OeqSL/9A
kuS6ZR+3fj8GlCO7c/8AjNZ6we8zEovx1OQIx/Yhv2sPP/zVqkagXftNPObkbj3g
b+yZ9p+EKwpP2qhCcYhKcaeXnfelvBcdLwbZDZD8o8hCSt4AJh1gs+RK7jzOvhnu
vaVIA2KNt3qsQDIiLcj+1i22fTKlWbyCBwTp48ojc0+bl1eAGJB5ziVzkj7PUZYb
57/mSs+RP7txAGmxPdTzICjIMpi61oJF6qLW0c2x/He7ixAzL9zI9TfCR5nBd0Ka
3O6/d124WMc=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:31 2025 by rpki-client