![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/0/323830343a343031633a383030303a3a2f33342d3334203d3e20323635393335.roa
File: 323830343a343031633a383030303a3a2f33342d3334203d3e20323635393335.roa (raw, json)
Hash identifier: tN6elFyZQZpMJBpECaxYc+hmjC9WCzQE+Lex7Fv8WmQ=
Subject key identifier: BA:E0:14:4D:8E:FC:71:A6:70:FF:EE:03:FB:B3:43:E3:D1:13:FD:E1
Certificate issuer: /CN=78151C7AED024C90945657A6AA5EC78F610B0D64
Certificate serial: 02B593D7D87FD77492F8AEF8168C520D6C884C81
Authority key identifier: 78:15:1C:7A:ED:02:4C:90:94:56:57:A6:AA:5E:C7:8F:61:0B:0D:64
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78151C7AED024C90945657A6AA5EC78F610B0D64.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/0/323830343a343031633a383030303a3a2f33342d3334203d3e20323635393335.roa
Signing time: Thu 05 Oct 2023 19:21:53 +0000
ROA not before: Thu 05 Oct 2023 19:16:53 +0000
ROA not after: Thu 03 Oct 2024 19:21:53 +0000
asID: 265935
IP address blocks: 2804:401c:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:b5:93:d7:d8:7f:d7:74:92:f8:ae:f8:16:8c:52:0d:6c:88:4c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78151C7AED024C90945657A6AA5EC78F610B0D64
Validity
Not Before: Oct 5 19:16:53 2023 GMT
Not After : Oct 3 19:21:53 2024 GMT
Subject: CN=BAE0144D8EFC71A670FFEE03FBB343E3D113FDE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1b:89:4a:0d:b2:7c:0c:44:e9:db:7b:0d:87:
0b:3c:75:bd:76:f9:f6:12:9b:90:19:f3:06:81:aa:
29:ae:01:69:92:18:08:c0:41:f1:f0:c3:e8:79:80:
11:91:24:cc:5e:a7:0b:9f:5a:16:81:4e:db:69:df:
dd:96:14:b2:1e:89:11:4d:fc:fb:cb:17:dd:b3:2f:
29:a6:5f:b6:a1:2e:d9:84:a9:70:59:e0:59:69:d3:
3b:b5:87:61:3e:be:c8:e8:4e:0a:f9:74:76:fa:25:
0b:4d:5c:6b:95:d3:33:98:8e:71:32:10:94:01:69:
2f:27:ba:cc:0d:65:da:a6:6c:09:49:ec:76:4b:58:
ed:92:f0:92:ca:2c:15:0a:72:57:fb:1a:13:42:54:
da:98:11:74:38:a8:93:c5:74:c5:f7:83:2b:38:04:
f3:f8:12:a5:50:36:c2:bc:8e:8f:8b:88:ed:ac:8d:
7d:6a:88:7b:b3:7d:ee:e9:4d:43:c3:1f:4d:aa:b5:
8b:1b:01:69:86:9e:f4:e3:a9:bb:db:f0:3c:c4:dc:
53:5a:98:70:5c:0c:b6:ef:d8:e3:fa:3e:26:3e:a2:
1a:bf:4c:21:01:1e:dd:8f:86:a6:ef:a7:7c:2e:b9:
bc:6f:c8:ca:37:cc:e2:a4:4b:04:78:c4:16:69:f0:
d0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E0:14:4D:8E:FC:71:A6:70:FF:EE:03:FB:B3:43:E3:D1:13:FD:E1
X509v3 Authority Key Identifier:
keyid:78:15:1C:7A:ED:02:4C:90:94:56:57:A6:AA:5E:C7:8F:61:0B:0D:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/0/78151C7AED024C90945657A6AA5EC78F610B0D64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78151C7AED024C90945657A6AA5EC78F610B0D64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/0/323830343a343031633a383030303a3a2f33342d3334203d3e20323635393335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:401c:8000::/34
Signature Algorithm: sha256WithRSAEncryption
c3:e5:59:f3:66:6d:04:18:d5:33:48:f7:da:e2:c3:1a:53:0f:
86:3a:84:9c:ea:55:dd:c3:a8:96:bf:18:d8:a3:ff:0e:b9:1f:
8c:6b:69:1d:29:24:66:50:b6:fa:f3:a3:32:ec:c9:b0:40:e8:
3b:cb:bc:6f:df:ff:b8:5a:c6:78:99:44:df:c2:f9:c1:05:34:
f2:0a:c6:56:48:e3:75:e6:49:c7:da:f3:0d:16:79:94:a2:2a:
93:43:90:ce:db:f2:a9:a6:c8:ac:8a:99:52:55:37:e2:90:df:
94:7d:6d:0f:ba:f9:79:ed:93:32:03:d7:10:1a:f2:84:3d:f5:
9f:3e:d4:22:a3:c0:32:f4:b7:26:de:43:04:ae:4d:30:7f:89:
90:3d:54:08:ca:81:9a:61:04:c7:46:4e:79:fa:4e:02:e9:f3:
d0:57:95:94:7f:0e:3f:83:01:12:b1:2d:e3:7a:8c:4c:01:a8:
a3:09:c5:3a:3d:36:8d:05:09:18:4d:b7:bf:f5:54:b3:02:87:
c1:c3:37:ab:1f:ea:e7:af:04:48:e9:58:b2:39:4c:e2:30:71:
0e:cb:86:21:2b:9e:28:ff:13:55:34:1f:42:5c:61:a8:d6:66:
22:fb:ea:0a:f0:ae:3a:03:b6:9f:2e:0f:2d:50:30:9f:d1:01:
ac:8f:34:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:42 2025 by rpki-client