![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633033363a3a2f34382d3438203d3e203631353932.roa
File: 323830343a346333343a633033363a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier: yKer9l00T/jr6u38QCAwZVRcvuEMBZ2qXIy5BXBas28=
Subject key identifier: AF:D0:7C:BD:A3:F1:8C:9A:69:B0:77:15:65:6B:C0:7C:3A:63:5B:D0
Certificate issuer: /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial: 1690755D34BE0F5C047DB319D6C4CBF3A0B34E74
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633033363a3a2f34382d3438203d3e203631353932.roa
Signing time: Thu 24 Aug 2023 18:53:00 +0000
ROA not before: Thu 24 Aug 2023 18:48:00 +0000
ROA not after: Thu 22 Aug 2024 18:53:00 +0000
asID: 61592
IP address blocks: 2804:4c34:c036::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:90:75:5d:34:be:0f:5c:04:7d:b3:19:d6:c4:cb:f3:a0:b3:4e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Validity
Not Before: Aug 24 18:48:00 2023 GMT
Not After : Aug 22 18:53:00 2024 GMT
Subject: CN=AFD07CBDA3F18C9A69B07715656BC07C3A635BD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e0:e5:e4:87:de:2e:2e:ac:9a:39:75:f2:3d:
6e:61:12:c5:41:dc:ba:28:e5:c9:ad:1f:e5:aa:79:
62:13:1d:4f:ff:6a:bb:93:7f:33:64:58:1d:fa:e0:
f5:cb:40:94:10:b1:85:79:30:13:c4:47:6a:ee:83:
9b:db:23:bf:5d:b0:21:a3:5b:33:36:fd:39:11:7d:
b3:66:f7:72:24:cf:eb:1b:59:77:75:67:5d:28:f0:
f6:1a:99:eb:e6:08:f3:f6:30:70:03:7d:39:8d:fd:
66:66:15:4a:11:68:43:0f:9b:d1:fd:b3:da:81:3f:
9d:31:0a:30:0c:62:c9:bf:81:f8:3c:48:b0:b6:99:
5f:d6:71:a0:80:79:90:52:b0:6d:cf:9f:f7:48:65:
65:88:f6:5f:50:62:e9:fe:4a:4d:0e:a8:4f:b3:41:
83:59:c3:f0:84:6e:3a:35:4f:25:af:8c:e2:18:f8:
5d:93:3e:6d:2b:4b:5a:a1:34:f0:89:7d:3a:1c:4c:
03:3c:6e:bc:e7:c9:98:38:38:0c:89:c6:4a:f0:77:
14:34:c5:f9:4e:1f:91:6e:6e:9e:01:82:58:f9:1a:
1c:79:df:6a:4d:ef:15:c1:a7:6a:1f:13:ee:ae:70:
cc:6d:5b:1d:62:53:de:00:fb:8c:7b:1e:c2:da:9b:
b5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D0:7C:BD:A3:F1:8C:9A:69:B0:77:15:65:6B:C0:7C:3A:63:5B:D0
X509v3 Authority Key Identifier:
keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633033363a3a2f34382d3438203d3e203631353932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4c34:c036::/48
Signature Algorithm: sha256WithRSAEncryption
74:0a:a5:a1:db:1c:66:eb:cc:84:51:49:6d:ef:d7:2c:87:34:
8e:b2:26:d9:4f:65:b4:d2:a7:87:ff:08:9e:94:c9:7a:e9:90:
b1:38:68:b1:86:a8:0d:f7:8e:db:fa:81:c6:35:65:8e:8c:77:
a1:0d:72:07:d0:c8:3c:62:aa:86:50:89:1f:17:59:d9:70:97:
4d:e0:42:3f:55:e0:6b:1f:7c:b9:e3:3b:bf:69:1a:77:02:4d:
68:ce:ea:f0:db:cb:fb:63:4a:cf:e6:b8:c5:c3:ac:d9:53:bc:
32:dc:f8:0b:7a:ec:88:f7:04:23:e4:68:37:22:43:f2:d0:09:
b6:c1:ac:bf:d3:8d:34:db:38:d7:bf:07:9d:98:8d:34:fe:c4:
4e:15:69:3e:7b:2e:de:27:03:1f:33:80:75:68:46:21:ac:c3:
68:55:63:4a:b5:3e:49:65:54:19:91:11:45:5d:5d:23:87:8a:
5a:dd:46:5e:de:eb:bc:f8:fe:f9:56:14:be:3f:dd:bf:96:b4:
1c:06:43:40:9a:20:d3:b1:59:ce:14:b6:b0:0e:98:d9:a8:3f:
ca:e4:b2:af:75:0a:68:fd:f3:00:56:72:e2:75:c1:0a:39:00:
8f:8e:d5:f3:e3:82:2c:65:f1:5b:51:27:06:78:f2:c9:7f:6f:
4e:0f:26:da
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUFpB1XTS+D1wEfbMZ1sTL86CzTnQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM0REFBOTYwMEU0QkQ3ODg1Njc2QzU4M0RFNEI5Q0Ex
QUM3RDI3MzAeFw0yMzA4MjQxODQ4MDBaFw0yNDA4MjIxODUzMDBaMDMxMTAvBgNV
BAMTKEFGRDA3Q0JEQTNGMThDOUE2OUIwNzcxNTY1NkJDMDdDM0E2MzVCRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK4OXkh94uLqyaOXXyPW5hEsVB
3Loo5cmtH+WqeWITHU//aruTfzNkWB364PXLQJQQsYV5MBPER2rug5vbI79dsCGj
WzM2/TkRfbNm93Ikz+sbWXd1Z10o8PYamevmCPP2MHADfTmN/WZmFUoRaEMPm9H9
s9qBP50xCjAMYsm/gfg8SLC2mV/WcaCAeZBSsG3Pn/dIZWWI9l9QYun+Sk0OqE+z
QYNZw/CEbjo1TyWvjOIY+F2TPm0rS1qhNPCJfTocTAM8brznyZg4OAyJxkrwdxQ0
xflOH5Fubp4Bglj5Ghx532pN7xXBp2ofE+6ucMxtWx1iU94A+4x7HsLam7UjAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUr9B8vaPxjJppsHcVZWvAfDpjW9AwHwYDVR0j
BBgwFoAUw02qlgDkvXiFZ2xYPeS5yhrH0nMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkVMOW1ydlBYZ2NwTGJDUTFNbnFhSlVnUkx2YXhhWUp4QThzMzdHUG84
bXAvMC9DMzREQUE5NjAwRTRCRDc4ODU2NzZDNTgzREU0QjlDQTFBQzdEMjczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MzNERBQTk2MDBFNEJENzg4
NTY3NkM1ODNERTRCOUNBMUFDN0QyNzMuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJFTDltcnZQWGdjcExiQ1ExTW5xYUpVZ1JMdmF4YVlKeEE4czM3R1BvOG1wLzAv
MzIzODMwMzQzYTM0NjMzMzM0M2E2MzMwMzMzNjNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDM2MzEzNTM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBEw0wDYwDQYJKoZIhvcNAQELBQAD
ggEBAHQKpaHbHGbrzIRRSW3v1yyHNI6yJtlPZbTSp4f/CJ6UyXrpkLE4aLGGqA33
jtv6gcY1ZY6Md6ENcgfQyDxiqoZQiR8XWdlwl03gQj9V4GsffLnjO79pGncCTWjO
6vDby/tjSs/muMXDrNlTvDLc+At67Ij3BCPkaDciQ/LQCbbBrL/TjTTbONe/B52Y
jTT+xE4VaT57Lt4nAx8zgHVoRiGsw2hVY0q1PkllVBmREUVdXSOHilrdRl7e67z4
/vlWFL4/3b+WtBwGQ0CaINOxWc4UtrAOmNmoP8rksq91Cmj98wBWcuJ1wQo5AI+O
1fPjgixl8VtRJwZ48sl/b04PJto=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:46 2025 by rpki-client