![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/323830343a316539343a3a2f33322d3334203d3e20323634343337.roa
File: 323830343a316539343a3a2f33322d3334203d3e20323634343337.roa (raw, json)
Hash identifier: JvwThHZkLONLOvmjoit+n8f+EyO15AL8FrLD1wRM668=
Subject key identifier: 1A:48:BC:9C:2A:0B:FC:58:06:02:E7:E0:A5:EA:4F:86:B2:C1:A4:C6
Certificate issuer: /CN=4AA55836E6525963A361EEE07C0C7F8FA6B8CB14
Certificate serial: 4AFA20DC7B393B9B80DE73AC8336C686A378D62A
Authority key identifier: 4A:A5:58:36:E6:52:59:63:A3:61:EE:E0:7C:0C:7F:8F:A6:B8:CB:14
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AA55836E6525963A361EEE07C0C7F8FA6B8CB14.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/323830343a316539343a3a2f33322d3334203d3e20323634343337.roa
Signing time: Thu 05 Jan 2023 17:20:18 +0000
ROA not before: Thu 05 Jan 2023 17:15:18 +0000
ROA not after: Thu 04 Jan 2024 17:20:18 +0000
asID: 264437
IP address blocks: 2804:1e94::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:fa:20:dc:7b:39:3b:9b:80:de:73:ac:83:36:c6:86:a3:78:d6:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AA55836E6525963A361EEE07C0C7F8FA6B8CB14
Validity
Not Before: Jan 5 17:15:18 2023 GMT
Not After : Jan 4 17:20:18 2024 GMT
Subject: CN=1A48BC9C2A0BFC580602E7E0A5EA4F86B2C1A4C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6b:e2:66:8b:52:71:dd:05:06:4c:ee:f2:d7:
39:89:ec:f7:64:08:2b:12:1e:b2:ed:be:03:be:df:
a2:25:e4:58:65:e5:1f:83:d4:46:e4:00:8d:e8:27:
95:ce:b2:d5:8b:52:9c:5d:58:29:e9:b5:ac:d5:06:
7a:19:d0:11:e0:65:af:52:61:3b:87:71:24:bd:6e:
b9:a1:99:0d:94:d0:0b:0c:f8:b1:82:e0:4d:f5:ff:
d0:7f:96:91:23:50:8c:91:72:a6:78:37:39:ef:a1:
49:86:f1:87:52:09:cc:c7:10:50:78:53:f0:4e:fc:
d6:f6:e2:eb:7d:39:1f:47:c0:b9:e0:1c:48:5d:c5:
0a:79:08:e7:4b:ce:a9:41:be:1f:4a:f3:7a:a3:0d:
0a:98:0a:1f:1d:13:c5:0e:4a:3b:38:99:3e:7e:e5:
61:7a:0b:5a:da:26:af:35:ce:8d:6e:c1:13:77:26:
b3:75:eb:fb:6e:c4:5f:5c:a8:25:87:cf:95:78:fc:
1b:02:3e:b0:bd:06:6d:88:96:46:6f:02:75:0a:ee:
b4:1a:56:17:a0:3f:da:b7:2c:0c:42:09:33:42:66:
84:22:19:a3:86:eb:86:04:a0:09:83:21:9b:05:3b:
40:81:ff:1c:f6:f4:62:ff:ac:39:bc:79:8f:8c:4e:
e9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:48:BC:9C:2A:0B:FC:58:06:02:E7:E0:A5:EA:4F:86:B2:C1:A4:C6
X509v3 Authority Key Identifier:
keyid:4A:A5:58:36:E6:52:59:63:A3:61:EE:E0:7C:0C:7F:8F:A6:B8:CB:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/4AA55836E6525963A361EEE07C0C7F8FA6B8CB14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AA55836E6525963A361EEE07C0C7F8FA6B8CB14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/323830343a316539343a3a2f33322d3334203d3e20323634343337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1e94::/32
Signature Algorithm: sha256WithRSAEncryption
67:cf:ca:a5:09:36:9d:31:6a:01:d2:9d:5d:61:a9:91:c3:5f:
30:dd:af:f5:24:17:91:6e:d0:31:4f:e1:9a:fc:2d:42:59:8e:
e6:0b:0c:f1:01:1a:70:5b:8d:e7:be:c8:9e:45:23:66:54:87:
71:7a:3c:a3:9f:7d:a6:bd:10:ad:6d:e7:6e:71:8b:d8:ef:c4:
fb:4d:5e:af:39:84:02:26:ac:3d:6f:f2:40:49:8b:4a:6a:71:
ef:f5:42:46:03:4f:d7:ad:93:70:bc:11:e9:7e:6f:3d:bb:b2:
8c:d4:b7:7c:5a:cf:78:ce:fb:cb:ad:72:01:19:23:82:a9:be:
b1:95:03:7f:53:23:b5:aa:61:53:32:d3:31:57:46:5e:8e:70:
9e:4d:2c:d1:7a:dc:81:48:30:1f:f7:c7:a6:b5:7c:50:54:e8:
f4:74:dd:23:b2:5d:a5:a2:ec:99:d8:36:8a:87:39:6e:df:cc:
6a:38:91:14:bf:1c:0e:26:01:c0:5d:78:2f:08:ad:9d:2f:83:
2e:b5:3e:2e:bf:26:d1:7c:ed:88:2c:ba:f0:be:5e:e9:c3:83:
62:33:6e:35:6a:4a:16:49:cd:d0:e3:51:5e:bb:8b:37:67:e6:
f2:3c:ab:92:1e:92:c4:35:43:f0:71:72:ed:f1:e9:87:93:41:
d7:ae:58:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:50:37 2025 by rpki-client