![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2hEGyP8k4orCvxZe1Je9834aisNAp9zRkm5pmvYorZ1r/0/323830343a346237633a3a2f33322d3431203d3e203238323237.roa
File: 323830343a346237633a3a2f33322d3431203d3e203238323237.roa (raw, json)
Hash identifier: lqVD/KNr4kVqrB/dnzynq1IKdyhgOIHk52JJK296LsM=
Subject key identifier: DC:4B:56:F2:41:9B:D8:67:1A:D8:38:9B:9A:0A:EC:63:34:B1:0F:88
Certificate issuer: /CN=A5F0198F56570C4D8BDFBDA7B75D197CC3A775A4
Certificate serial: 37E7779AFE608C2BB0AD7EC695CE37C2B843A9ED
Authority key identifier: A5:F0:19:8F:56:57:0C:4D:8B:DF:BD:A7:B7:5D:19:7C:C3:A7:75:A4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5F0198F56570C4D8BDFBDA7B75D197CC3A775A4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2hEGyP8k4orCvxZe1Je9834aisNAp9zRkm5pmvYorZ1r/0/323830343a346237633a3a2f33322d3431203d3e203238323237.roa
Signing time: Mon 13 Jun 2022 20:57:07 +0000
ROA not before: Mon 13 Jun 2022 20:52:07 +0000
ROA not after: Mon 12 Jun 2023 20:57:07 +0000
asID: 28227
IP address blocks: 2804:4b7c::/32 maxlen: 41
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:e7:77:9a:fe:60:8c:2b:b0:ad:7e:c6:95:ce:37:c2:b8:43:a9:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5F0198F56570C4D8BDFBDA7B75D197CC3A775A4
Validity
Not Before: Jun 13 20:52:07 2022 GMT
Not After : Jun 12 20:57:07 2023 GMT
Subject: CN=DC4B56F2419BD8671AD8389B9A0AEC6334B10F88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7a:45:10:e0:6f:b8:27:f9:58:7b:0e:97:81:
37:a9:cc:7c:64:b0:88:f4:97:0b:c9:22:f4:3f:1b:
e4:23:b0:2b:62:26:6d:05:ec:78:ac:86:aa:3d:4c:
60:6c:bb:75:d5:bc:50:4c:09:f1:13:66:ca:38:6d:
ef:75:71:b0:91:13:2d:3b:5a:34:74:58:71:aa:38:
37:63:75:2f:96:d0:45:02:bd:e4:06:d2:dc:37:38:
99:2f:99:9e:23:1f:76:79:3e:2a:74:94:ce:7e:e4:
0f:96:94:f1:7a:c0:01:b1:67:bc:b2:06:5b:a1:38:
ee:f0:d8:0a:e9:f2:52:70:7f:b8:df:cd:0b:21:10:
0f:8a:97:da:3c:8f:4f:a8:45:a5:54:15:2c:ac:c7:
17:20:37:e9:03:32:07:a2:76:dd:20:17:ed:e0:cc:
b9:a7:dd:b4:61:3c:0f:b7:b3:6f:54:09:6d:b3:29:
8f:18:94:1a:3e:f0:ec:cc:d6:67:75:2a:52:7b:2b:
67:fb:a4:dc:a4:ea:32:5d:2e:f3:9c:a4:0d:7e:75:
5a:dd:a0:bc:5f:3e:eb:6f:a9:da:f6:76:27:ed:44:
09:d2:b9:ec:70:a5:2a:59:c6:48:c6:4e:b7:c4:05:
83:e7:72:ee:0e:63:d6:af:d6:33:60:d9:5d:ae:e4:
49:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4B:56:F2:41:9B:D8:67:1A:D8:38:9B:9A:0A:EC:63:34:B1:0F:88
X509v3 Authority Key Identifier:
keyid:A5:F0:19:8F:56:57:0C:4D:8B:DF:BD:A7:B7:5D:19:7C:C3:A7:75:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2hEGyP8k4orCvxZe1Je9834aisNAp9zRkm5pmvYorZ1r/0/A5F0198F56570C4D8BDFBDA7B75D197CC3A775A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5F0198F56570C4D8BDFBDA7B75D197CC3A775A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hEGyP8k4orCvxZe1Je9834aisNAp9zRkm5pmvYorZ1r/0/323830343a346237633a3a2f33322d3431203d3e203238323237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4b7c::/32
Signature Algorithm: sha256WithRSAEncryption
22:46:c4:74:ba:12:3d:7a:df:7e:f9:8b:20:c5:1d:2e:cf:ac:
c4:da:4a:0e:36:13:b5:e0:24:55:fc:bb:87:05:26:9e:4d:5c:
f6:0b:74:50:83:51:ce:b4:36:8f:cd:82:82:06:ee:a5:fc:8c:
b6:0e:1d:76:07:d5:89:45:fc:3d:06:1b:2e:86:b4:9b:3a:2a:
10:3e:e7:f7:7a:bf:84:e8:38:f8:5b:74:5e:43:41:b0:73:8a:
d8:6e:fb:fd:ba:bf:e0:23:73:f9:f2:2c:d7:25:2f:67:dd:25:
55:f5:3b:20:62:f5:8e:86:94:6a:e8:96:8f:2d:45:91:ed:06:
fd:81:cb:4e:5c:5b:5a:22:43:4e:ff:bd:c8:ea:d8:c9:f5:b3:
f4:4d:d1:b2:65:d2:cb:ca:ef:17:c3:67:96:a9:dd:8d:61:6f:
a2:fc:69:1c:6c:7c:34:7c:ac:21:02:1b:20:de:f3:28:fe:cd:
bc:9b:fa:bc:46:00:ca:df:38:17:36:68:78:6f:44:1e:2e:03:
ec:4e:be:da:a3:3a:18:ca:cb:b7:72:39:7e:12:12:34:8d:b2:
62:88:91:6e:91:1e:e6:1d:7e:8a:b4:c8:05:dc:c6:18:15:97:
95:44:8d:8f:8c:cc:60:98:95:bf:04:ae:44:5e:31:55:76:56:
b8:d7:b7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:15:18 2025 by rpki-client