![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/323830343a333562633a3a2f33322d3332203d3e20323636333033.roa
File: 323830343a333562633a3a2f33322d3332203d3e20323636333033.roa (raw, json)
Hash identifier: ClI5sD9s9CwkGtwCR4JyrFKOOb39kdsT0KYjMvNA86A=
Subject key identifier: 74:ED:7E:B1:FF:55:D3:27:3E:C0:2C:CF:9A:C1:29:42:73:B0:72:92
Certificate issuer: /CN=DE93C72F22244480C517BC4501B196642FEC83A3
Certificate serial: 67F5883CA15AA7F9C9805450E3755D0AD2725F4D
Authority key identifier: DE:93:C7:2F:22:24:44:80:C5:17:BC:45:01:B1:96:64:2F:EC:83:A3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE93C72F22244480C517BC4501B196642FEC83A3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/323830343a333562633a3a2f33322d3332203d3e20323636333033.roa
Signing time: Fri 19 Jan 2024 19:55:15 +0000
ROA not before: Fri 19 Jan 2024 19:50:15 +0000
ROA not after: Fri 17 Jan 2025 19:55:15 +0000
asID: 266303
IP address blocks: 2804:35bc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:f5:88:3c:a1:5a:a7:f9:c9:80:54:50:e3:75:5d:0a:d2:72:5f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE93C72F22244480C517BC4501B196642FEC83A3
Validity
Not Before: Jan 19 19:50:15 2024 GMT
Not After : Jan 17 19:55:15 2025 GMT
Subject: CN=74ED7EB1FF55D3273EC02CCF9AC1294273B07292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8a:7d:ab:6d:54:10:6a:64:89:b3:92:8c:0c:
36:12:89:3f:9c:b8:09:09:72:0e:c4:0e:ca:20:fa:
c1:17:76:76:11:ed:99:60:32:ea:ff:bb:bb:33:33:
a5:4c:b2:e6:69:79:24:59:19:23:e9:bc:83:c5:4b:
8c:87:0b:9c:96:74:e3:38:ba:b7:ab:33:35:f9:a9:
9e:1f:c4:75:3d:1b:2b:eb:40:74:0d:fe:8d:3e:8a:
96:7e:77:60:6e:40:a1:04:16:a6:b5:95:bf:f4:f1:
f7:6e:a5:c1:c0:7e:99:56:d7:bc:3d:df:72:47:33:
0a:43:84:67:a6:62:22:0e:23:46:fa:8c:cf:de:b7:
d7:b0:e4:c2:5f:08:da:3e:d4:6a:4e:67:13:08:0a:
33:d8:3b:c0:14:8a:8e:88:f2:16:5e:bb:2b:7b:c1:
a1:17:f9:14:ed:0e:36:1e:00:50:9c:62:5c:b1:8b:
d5:ef:d5:6c:35:81:07:9b:07:2e:55:20:6e:66:0a:
f5:55:33:8d:ba:00:b9:a6:34:b7:3a:2e:e6:88:97:
10:fc:f3:cf:7c:48:c1:4e:c6:b2:9f:22:eb:c2:4e:
55:5e:b6:79:17:5c:fd:19:0f:2b:d6:3b:f1:4b:f3:
05:67:79:6f:ab:48:9f:25:a7:43:6c:6b:c7:34:08:
12:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:ED:7E:B1:FF:55:D3:27:3E:C0:2C:CF:9A:C1:29:42:73:B0:72:92
X509v3 Authority Key Identifier:
keyid:DE:93:C7:2F:22:24:44:80:C5:17:BC:45:01:B1:96:64:2F:EC:83:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/DE93C72F22244480C517BC4501B196642FEC83A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE93C72F22244480C517BC4501B196642FEC83A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/323830343a333562633a3a2f33322d3332203d3e20323636333033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:35bc::/32
Signature Algorithm: sha256WithRSAEncryption
94:66:fb:c8:3a:c6:b4:c9:6f:1d:9a:bc:3f:6b:55:e3:bc:e6:
5a:0c:5e:bb:a8:4c:61:ef:a8:43:a0:98:04:67:28:b0:fd:f8:
b9:54:e2:cb:f6:ca:cf:dd:d9:18:8a:df:c6:56:8c:e7:5c:de:
78:a9:06:1a:c9:0f:7d:32:92:24:31:8d:a5:60:d6:d0:03:78:
5b:c9:81:b1:a0:98:1d:43:aa:67:61:1e:1e:61:9a:b4:2b:ed:
cb:e4:ea:51:25:ea:c6:d8:d4:35:82:e3:22:e8:3f:e9:0f:45:
00:37:0d:7a:e2:59:22:a7:46:04:8c:1b:a3:10:7c:86:17:02:
f2:dc:28:e5:15:38:10:1d:9b:52:51:ca:82:d3:83:ea:c0:a1:
37:df:8f:79:5d:07:55:89:f3:22:5d:ee:ab:d8:49:b9:19:e1:
b0:6e:d1:9e:5a:ba:5e:1e:44:9c:46:ff:08:7f:be:e4:4d:c9:
a7:a3:8f:9b:86:48:84:59:4b:71:44:79:fc:bb:6a:41:fa:11:
42:21:29:fb:f1:6a:23:3d:d7:3d:ae:68:0e:6c:be:7f:21:02:
f4:65:3b:74:05:51:3c:90:9f:07:da:7e:de:18:94:67:7e:d3:
91:3e:1a:c3:7e:37:1d:0f:22:3c:d1:5e:41:da:9c:00:61:37:
56:32:db:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:18 2025 by rpki-client