![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/1/323830343a3265383a383031303a3a2f34352d3435203d3e20323632383437.roa
File: 323830343a3265383a383031303a3a2f34352d3435203d3e20323632383437.roa (raw, json)
Hash identifier: xdQNu7y36lfbtQrqoPNmueHI4ffpdshCo3Zb909q/Xs=
Subject key identifier: 3B:1A:7B:F8:32:74:01:70:4B:DF:81:39:A2:2C:63:15:DA:03:A2:F9
Certificate issuer: /CN=7E89C742D551BF248E147A7AC13D94D12B15C8F6
Certificate serial: 321DF459043260B6BB50413E9D2A03E5D9E41803
Authority key identifier: 7E:89:C7:42:D5:51:BF:24:8E:14:7A:7A:C1:3D:94:D1:2B:15:C8:F6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E89C742D551BF248E147A7AC13D94D12B15C8F6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/1/323830343a3265383a383031303a3a2f34352d3435203d3e20323632383437.roa
Signing time: Fri 29 Dec 2023 18:38:37 +0000
ROA not before: Fri 29 Dec 2023 18:33:37 +0000
ROA not after: Fri 27 Dec 2024 18:38:37 +0000
asID: 262847
IP address blocks: 2804:2e8:8010::/45 maxlen: 45
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:1d:f4:59:04:32:60:b6:bb:50:41:3e:9d:2a:03:e5:d9:e4:18:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E89C742D551BF248E147A7AC13D94D12B15C8F6
Validity
Not Before: Dec 29 18:33:37 2023 GMT
Not After : Dec 27 18:38:37 2024 GMT
Subject: CN=3B1A7BF8327401704BDF8139A22C6315DA03A2F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b3:47:35:e8:a5:e2:cc:70:38:74:2a:36:42:
3c:e4:ef:f6:8a:51:02:1b:cd:17:cc:ce:4e:85:76:
1b:af:46:09:8f:c7:1f:67:cc:b2:97:3c:56:74:1b:
68:6f:2d:6f:4e:a7:ca:64:5f:ca:4b:f9:98:e1:a2:
e0:61:2f:e5:88:7b:71:c5:0b:8c:fc:d7:38:d6:d2:
05:df:4f:12:6e:0a:ae:c4:19:7c:94:c5:72:f7:8c:
4f:bb:8c:aa:8b:75:51:14:73:bb:d9:2a:ec:ec:d0:
b5:b8:97:24:ae:f6:65:7d:53:36:c7:22:be:57:76:
6e:ac:7e:4a:34:93:04:5c:a9:aa:79:d3:01:c2:79:
6f:f8:7a:a8:0b:fd:00:0b:d6:8c:31:64:fc:2d:fe:
a4:19:a9:f5:8f:fa:1f:ce:ef:55:31:62:ec:46:06:
51:1e:4e:24:4b:34:7c:96:9e:8c:3d:5e:80:08:97:
e9:41:08:49:aa:61:95:30:c2:37:03:e1:d0:fc:5e:
90:e0:08:2b:a9:1c:db:2d:25:80:fc:1b:12:db:55:
6b:8c:1d:07:2d:74:ac:e9:33:d9:73:c5:7b:e3:53:
24:4b:5a:dd:ec:cc:20:c0:ac:03:be:b3:ad:b4:f1:
24:b9:a2:e9:3b:ce:91:e4:04:ef:34:33:a9:ad:6e:
f6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1A:7B:F8:32:74:01:70:4B:DF:81:39:A2:2C:63:15:DA:03:A2:F9
X509v3 Authority Key Identifier:
keyid:7E:89:C7:42:D5:51:BF:24:8E:14:7A:7A:C1:3D:94:D1:2B:15:C8:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/1/7E89C742D551BF248E147A7AC13D94D12B15C8F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E89C742D551BF248E147A7AC13D94D12B15C8F6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/1/323830343a3265383a383031303a3a2f34352d3435203d3e20323632383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2e8:8010::/45
Signature Algorithm: sha256WithRSAEncryption
19:77:ea:28:bb:b0:48:be:5a:1f:c4:fb:95:bc:40:fd:3f:33:
41:07:a6:60:9e:cb:3d:05:50:e1:6e:25:60:1d:65:2d:e2:a9:
24:14:2c:d8:7f:0b:d8:dc:bd:31:6a:c0:83:61:99:6e:0d:8a:
45:b6:6d:4c:9d:8d:48:a2:90:2a:f5:bb:a6:86:c8:e7:00:93:
b7:16:09:e9:74:02:a8:24:75:8f:b5:94:bb:dd:a9:63:75:0e:
42:16:62:7a:e8:2a:aa:c0:df:cd:c6:7f:f0:b6:b5:8a:db:48:
9c:32:6a:67:98:93:59:74:d8:72:03:34:1d:d7:37:1f:08:7a:
de:bf:29:84:14:47:f3:e8:42:ee:58:42:d5:97:f6:70:bc:8b:
42:fe:77:e4:dd:ec:64:0d:9b:45:78:a4:17:73:e6:db:e6:a5:
80:25:f1:db:11:d3:38:f2:a3:e0:91:ca:fd:ea:bb:1d:3d:45:
de:96:50:c4:6a:b3:9a:83:77:29:f0:43:6a:45:61:e9:b8:c0:
ba:18:0e:b6:d0:32:0c:44:15:42:4e:a5:8b:11:c9:bf:e4:48:
9e:93:91:87:4b:77:02:eb:ec:ab:77:6a:e4:a6:35:48:9a:13:
ac:19:24:b3:ed:72:6e:63:b3:b9:b6:11:bf:97:c2:07:81:01:
a8:51:2d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:36 2025 by rpki-client