![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633033303a3a2f34382d3438203d3e203631353932.roa
File: 323830343a346333343a633033303a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier: TEMpTnzXObQGnRvDpzwVpyIeRRl6UFwjrN17bPTiq9Q=
Subject key identifier: 5B:E0:4C:E2:12:A0:BD:9D:33:B8:A8:97:64:2B:A9:A1:AC:5D:97:3A
Certificate issuer: /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial: 53171B86DA7298E1CA48D65402191C6215E009CF
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633033303a3a2f34382d3438203d3e203631353932.roa
Signing time: Thu 24 Aug 2023 18:53:02 +0000
ROA not before: Thu 24 Aug 2023 18:48:02 +0000
ROA not after: Thu 22 Aug 2024 18:53:02 +0000
asID: 61592
IP address blocks: 2804:4c34:c030::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:17:1b:86:da:72:98:e1:ca:48:d6:54:02:19:1c:62:15:e0:09:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Validity
Not Before: Aug 24 18:48:02 2023 GMT
Not After : Aug 22 18:53:02 2024 GMT
Subject: CN=5BE04CE212A0BD9D33B8A897642BA9A1AC5D973A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4e:a6:52:e4:8c:63:bb:1b:d4:ae:ef:34:04:
eb:89:a0:25:ac:88:01:79:8b:a3:23:1c:fe:c7:15:
5d:57:63:25:28:b6:dd:8d:18:be:95:7e:85:39:2e:
00:cd:b9:ce:75:3d:22:d3:be:00:2a:4d:62:47:b8:
a3:f6:07:00:1f:27:b4:33:05:06:4d:18:85:ae:5a:
74:40:b5:71:25:02:a2:3b:1a:dd:87:28:46:46:88:
3e:39:8c:da:91:4c:31:d7:b0:8c:38:a6:49:ad:dc:
b7:30:d6:32:de:89:84:36:f5:f8:1e:e7:27:84:fd:
9d:20:54:f4:d9:33:30:d1:d4:19:d5:69:f9:00:d1:
33:a7:d5:14:fd:93:37:48:16:c4:33:3d:f5:72:f8:
4f:fe:b8:27:1b:30:41:73:78:e9:28:05:9c:c1:d8:
82:68:0d:a7:ff:4f:10:13:0b:c7:30:65:81:ce:d5:
c3:9d:b9:93:a1:56:99:35:31:33:66:d6:d4:35:bc:
05:bc:7c:78:dd:55:67:cc:d3:4e:80:f1:a2:c6:1c:
d1:18:46:bd:13:2e:45:9f:67:af:1a:97:46:ce:8e:
53:92:c7:40:58:1f:76:a4:d2:e7:74:35:84:ca:73:
d5:2e:4c:58:0a:a1:27:6a:cc:a3:63:0c:cd:0c:c1:
70:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E0:4C:E2:12:A0:BD:9D:33:B8:A8:97:64:2B:A9:A1:AC:5D:97:3A
X509v3 Authority Key Identifier:
keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633033303a3a2f34382d3438203d3e203631353932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4c34:c030::/48
Signature Algorithm: sha256WithRSAEncryption
6f:b1:22:e2:88:f4:ce:12:54:eb:66:b1:2c:5a:9d:7b:80:2d:
36:79:c3:30:98:80:ee:8a:ea:b9:e3:6c:55:c8:db:7e:a9:53:
95:6c:5d:df:9c:88:e4:ed:2e:9a:3b:40:3f:b9:49:5a:69:6a:
b7:eb:af:c2:cf:68:e2:62:a7:37:7b:99:4f:1d:ef:b5:cd:57:
46:f7:76:bf:f4:24:7a:23:3f:02:32:58:77:05:82:f4:12:06:
e4:f1:92:a7:27:ee:ae:7a:c9:dc:db:ba:60:39:d6:2c:d1:5a:
c0:94:d6:5c:d9:55:6a:46:04:ce:0d:c0:4d:ce:8e:f3:38:dd:
fb:81:39:53:99:0e:ff:42:50:a1:26:5e:02:d4:3d:b4:47:3f:
f5:d2:2b:6b:55:14:e1:f6:f9:e1:ea:1e:92:e7:67:ae:06:12:
df:f3:2e:af:b7:c0:65:a6:aa:93:e1:8c:f0:a8:ef:2f:e0:97:
14:3e:2a:62:87:61:dc:96:e2:f4:3a:de:f1:8b:44:e0:82:5c:
2b:cc:01:b3:b3:0d:40:b6:4b:d0:0b:4a:0a:03:eb:b3:de:b4:
e5:4f:87:b3:2b:98:e6:36:78:6b:61:50:96:76:46:ce:e1:42:
44:8e:ec:34:4f:84:05:e9:05:15:a3:a8:ed:80:1a:ec:e1:37:
77:64:d9:69
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUUxcbhtpymOHKSNZUAhkcYhXgCc8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM0REFBOTYwMEU0QkQ3ODg1Njc2QzU4M0RFNEI5Q0Ex
QUM3RDI3MzAeFw0yMzA4MjQxODQ4MDJaFw0yNDA4MjIxODUzMDJaMDMxMTAvBgNV
BAMTKDVCRTA0Q0UyMTJBMEJEOUQzM0I4QTg5NzY0MkJBOUExQUM1RDk3M0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmTqZS5IxjuxvUru80BOuJoCWs
iAF5i6MjHP7HFV1XYyUott2NGL6VfoU5LgDNuc51PSLTvgAqTWJHuKP2BwAfJ7Qz
BQZNGIWuWnRAtXElAqI7Gt2HKEZGiD45jNqRTDHXsIw4pkmt3Lcw1jLeiYQ29fge
5yeE/Z0gVPTZMzDR1BnVafkA0TOn1RT9kzdIFsQzPfVy+E/+uCcbMEFzeOkoBZzB
2IJoDaf/TxATC8cwZYHO1cOduZOhVpk1MTNm1tQ1vAW8fHjdVWfM006A8aLGHNEY
Rr0TLkWfZ68al0bOjlOSx0BYH3ak0ud0NYTKc9UuTFgKoSdqzKNjDM0MwXDrAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUW+BM4hKgvZ0zuKiXZCupoaxdlzowHwYDVR0j
BBgwFoAUw02qlgDkvXiFZ2xYPeS5yhrH0nMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkVMOW1ydlBYZ2NwTGJDUTFNbnFhSlVnUkx2YXhhWUp4QThzMzdHUG84
bXAvMC9DMzREQUE5NjAwRTRCRDc4ODU2NzZDNTgzREU0QjlDQTFBQzdEMjczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MzNERBQTk2MDBFNEJENzg4
NTY3NkM1ODNERTRCOUNBMUFDN0QyNzMuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJFTDltcnZQWGdjcExiQ1ExTW5xYUpVZ1JMdmF4YVlKeEE4czM3R1BvOG1wLzAv
MzIzODMwMzQzYTM0NjMzMzM0M2E2MzMwMzMzMDNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDM2MzEzNTM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBEw0wDAwDQYJKoZIhvcNAQELBQAD
ggEBAG+xIuKI9M4SVOtmsSxanXuALTZ5wzCYgO6K6rnjbFXI236pU5VsXd+ciOTt
Lpo7QD+5SVpparfrr8LPaOJipzd7mU8d77XNV0b3dr/0JHojPwIyWHcFgvQSBuTx
kqcn7q56ydzbumA51izRWsCU1lzZVWpGBM4NwE3OjvM43fuBOVOZDv9CUKEmXgLU
PbRHP/XSK2tVFOH2+eHqHpLnZ64GEt/zLq+3wGWmqpPhjPCo7y/glxQ+KmKHYdyW
4vQ63vGLROCCXCvMAbOzDUC2S9ALSgoD67PetOVPh7MrmOY2eGthUJZ2Rs7hQkSO
7DRPhAXpBRWjqO2AGuzhN3dk2Wk=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:24 2025 by rpki-client