![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a343030623a3a2f34382d3438203d3e203631353932.roa
File: 323830343a346333343a343030623a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier: OhKAee1MniiqINaVqbV+kH/bB7i4AqxwRFfH6YSqH/8=
Subject key identifier: 48:32:78:76:EA:07:4D:32:41:F1:3D:B3:BA:50:F3:95:BA:13:A8:DF
Certificate issuer: /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial: 62F248FB27EE8CBAEFF8A9DAE080382F007F1F78
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a343030623a3a2f34382d3438203d3e203631353932.roa
Signing time: Thu 24 Aug 2023 18:53:06 +0000
ROA not before: Thu 24 Aug 2023 18:48:06 +0000
ROA not after: Thu 22 Aug 2024 18:53:06 +0000
asID: 61592
IP address blocks: 2804:4c34:400b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:f2:48:fb:27:ee:8c:ba:ef:f8:a9:da:e0:80:38:2f:00:7f:1f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Validity
Not Before: Aug 24 18:48:06 2023 GMT
Not After : Aug 22 18:53:06 2024 GMT
Subject: CN=48327876EA074D3241F13DB3BA50F395BA13A8DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:de:a5:0f:90:cc:b1:94:53:de:05:4d:d9:67:
9a:77:13:63:aa:ac:d0:78:4d:06:c6:d0:8f:8c:51:
ac:91:70:d1:27:45:74:1c:3b:4b:ba:8b:5a:08:32:
44:b2:57:2d:6d:fd:8b:da:b0:71:0b:01:0b:c9:04:
e9:af:79:ad:e7:9b:ca:ed:d3:cf:c6:1f:87:5a:b3:
50:3d:5d:7d:ee:86:81:ce:80:72:9b:b8:d0:f2:ee:
0d:c1:d0:fc:fa:e2:18:21:7c:32:0c:3d:8e:02:00:
45:05:57:3b:af:cb:bb:9f:3b:e7:b6:df:3e:4f:fd:
65:e8:05:02:10:8f:8a:c1:cd:52:3d:85:e5:67:e7:
8f:35:9d:66:eb:2a:00:5c:17:7b:8c:96:70:38:3d:
23:b0:03:07:9c:d0:e3:30:31:33:d6:08:ad:f4:c3:
ec:2e:b7:63:11:43:39:09:1f:a7:bd:90:12:87:21:
49:82:df:30:6b:82:61:fb:d5:7a:7e:91:19:85:ef:
6f:17:a9:24:08:38:db:b5:3a:fc:3e:b6:78:2d:b4:
be:f8:e7:4e:82:f7:de:18:34:f0:54:6b:7a:9d:b4:
5b:6e:ff:4d:b9:c6:15:85:e0:95:a7:d5:27:dc:c9:
0d:92:e7:f6:5a:de:e1:65:32:dd:8c:8a:a0:e3:47:
fa:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:32:78:76:EA:07:4D:32:41:F1:3D:B3:BA:50:F3:95:BA:13:A8:DF
X509v3 Authority Key Identifier:
keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a343030623a3a2f34382d3438203d3e203631353932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4c34:400b::/48
Signature Algorithm: sha256WithRSAEncryption
85:37:f7:ee:3c:30:5d:2a:ff:c3:bf:05:dd:d0:6e:a2:77:79:
41:69:24:ca:2a:58:48:59:3f:cf:cc:65:ea:d5:f6:7a:ab:6d:
6f:48:13:fe:65:9e:72:01:27:0c:37:af:f5:f0:09:88:8c:60:
55:11:ac:05:02:02:72:2e:3e:41:59:bc:47:47:e2:89:f8:1f:
f7:c8:6e:b5:e0:94:a7:c7:b9:f2:90:69:f3:84:f7:f1:ae:21:
db:15:6a:35:3f:72:01:78:8b:be:c0:19:eb:db:76:44:01:5c:
6d:e6:81:f8:37:f2:7f:8d:f0:c4:4e:61:f5:83:6f:ee:31:d9:
c9:5a:2a:80:7a:ba:30:a2:0e:c7:f3:1d:6f:c9:e9:9c:63:9e:
38:90:e1:60:25:2d:4c:f8:16:bd:46:8c:6f:51:0a:92:0b:7a:
32:ef:65:64:20:9c:6c:7f:18:31:27:62:1a:e3:9d:06:d4:e4:
07:ae:62:29:70:b1:fa:5f:56:db:48:a2:7a:d2:c4:22:6e:99:
bf:66:40:1b:a5:1c:dd:16:ab:88:06:4b:d5:5b:7d:1e:d4:fc:
5d:51:8d:ca:b0:89:f3:65:ed:b7:73:09:2d:f1:0b:74:d2:c8:
f9:02:e7:41:56:d7:b0:02:cd:c9:24:91:da:54:7b:d4:3e:ac:
96:0c:62:6b
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUYvJI+yfujLrv+Kna4IA4LwB/H3gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM0REFBOTYwMEU0QkQ3ODg1Njc2QzU4M0RFNEI5Q0Ex
QUM3RDI3MzAeFw0yMzA4MjQxODQ4MDZaFw0yNDA4MjIxODUzMDZaMDMxMTAvBgNV
BAMTKDQ4MzI3ODc2RUEwNzREMzI0MUYxM0RCM0JBNTBGMzk1QkExM0E4REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC23qUPkMyxlFPeBU3ZZ5p3E2Oq
rNB4TQbG0I+MUayRcNEnRXQcO0u6i1oIMkSyVy1t/YvasHELAQvJBOmvea3nm8rt
08/GH4das1A9XX3uhoHOgHKbuNDy7g3B0Pz64hghfDIMPY4CAEUFVzuvy7ufO+e2
3z5P/WXoBQIQj4rBzVI9heVn5481nWbrKgBcF3uMlnA4PSOwAwec0OMwMTPWCK30
w+wut2MRQzkJH6e9kBKHIUmC3zBrgmH71Xp+kRmF728XqSQIONu1Ovw+tngttL74
506C994YNPBUa3qdtFtu/025xhWF4JWn1SfcyQ2S5/Za3uFlMt2MiqDjR/opAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUSDJ4duoHTTJB8T2zulDzlboTqN8wHwYDVR0j
BBgwFoAUw02qlgDkvXiFZ2xYPeS5yhrH0nMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkVMOW1ydlBYZ2NwTGJDUTFNbnFhSlVnUkx2YXhhWUp4QThzMzdHUG84
bXAvMC9DMzREQUE5NjAwRTRCRDc4ODU2NzZDNTgzREU0QjlDQTFBQzdEMjczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MzNERBQTk2MDBFNEJENzg4
NTY3NkM1ODNERTRCOUNBMUFDN0QyNzMuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJFTDltcnZQWGdjcExiQ1ExTW5xYUpVZ1JMdmF4YVlKeEE4czM3R1BvOG1wLzAv
MzIzODMwMzQzYTM0NjMzMzM0M2EzNDMwMzA2MjNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDM2MzEzNTM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBEw0QAswDQYJKoZIhvcNAQELBQAD
ggEBAIU39+48MF0q/8O/Bd3QbqJ3eUFpJMoqWEhZP8/MZerV9nqrbW9IE/5lnnIB
Jww3r/XwCYiMYFURrAUCAnIuPkFZvEdH4on4H/fIbrXglKfHufKQafOE9/GuIdsV
ajU/cgF4i77AGevbdkQBXG3mgfg38n+N8MROYfWDb+4x2claKoB6ujCiDsfzHW/J
6ZxjnjiQ4WAlLUz4Fr1GjG9RCpILejLvZWQgnGx/GDEnYhrjnQbU5AeuYilwsfpf
VttIonrSxCJumb9mQBulHN0Wq4gGS9VbfR7U/F1RjcqwifNl7bdzCS3xC3TSyPkC
50FW17ACzckkkdpUe9Q+rJYMYms=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:47 2025 by rpki-client