![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/0/323830343a343531383a3a2f33322d3438203d3e20323637363732.roa
File: 323830343a343531383a3a2f33322d3438203d3e20323637363732.roa (raw, json)
Hash identifier: KHYMO9Mgv9cYYJWfFZzenfPo9d55BtJb+qISk2q19us=
Subject key identifier: 68:EC:EC:0A:14:2A:F7:EC:00:31:8A:C9:78:6D:4C:4A:94:88:23:A8
Certificate issuer: /CN=DA1F477B3B82C1A260C1D7857E482F0D8596E756
Certificate serial: 054F660F1D78D236AF6D6AEDF7BB3FC8770B6897
Authority key identifier: DA:1F:47:7B:3B:82:C1:A2:60:C1:D7:85:7E:48:2F:0D:85:96:E7:56
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA1F477B3B82C1A260C1D7857E482F0D8596E756.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/0/323830343a343531383a3a2f33322d3438203d3e20323637363732.roa
Signing time: Wed 10 Apr 2024 13:17:54 +0000
ROA not before: Wed 10 Apr 2024 13:12:54 +0000
ROA not after: Wed 09 Apr 2025 13:17:54 +0000
asID: 267672
IP address blocks: 2804:4518::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:4f:66:0f:1d:78:d2:36:af:6d:6a:ed:f7:bb:3f:c8:77:0b:68:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA1F477B3B82C1A260C1D7857E482F0D8596E756
Validity
Not Before: Apr 10 13:12:54 2024 GMT
Not After : Apr 9 13:17:54 2025 GMT
Subject: CN=68ECEC0A142AF7EC00318AC9786D4C4A948823A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3f:b4:e1:48:08:f4:21:51:ba:c9:82:1e:9a:
71:5e:25:5c:c9:13:18:25:94:8b:99:0e:5a:45:cc:
29:11:17:fe:eb:29:7e:a8:71:11:03:ea:58:51:60:
cd:d4:27:97:59:8a:54:0a:1b:57:03:d4:ac:27:0f:
15:45:5d:68:ff:a3:b5:cd:e8:2d:87:7b:77:1d:3a:
80:80:b1:d1:d3:e7:ec:cd:d3:79:6e:1b:e8:87:45:
fd:9f:a6:e3:57:24:ec:dc:b1:5d:e0:5a:05:f9:61:
7a:84:1e:e4:52:c9:d6:6a:09:24:95:81:bd:a2:f3:
73:37:ad:00:2f:f1:54:5d:04:41:4a:af:76:a6:d9:
52:5e:9a:5c:14:63:49:02:75:76:93:fd:12:2d:17:
61:62:f3:81:fe:12:b2:7e:d4:b0:73:23:c9:1f:68:
a4:2f:0a:a3:9e:8b:9d:67:cc:15:aa:58:f2:7c:ec:
97:a9:a7:e5:61:a5:9b:9e:0a:10:2c:36:b1:8d:b1:
b7:c7:63:55:9f:c4:d0:36:cf:c2:15:97:b1:86:e2:
a9:24:c9:c4:7c:ef:a9:f0:56:81:c2:3a:b7:5d:a7:
10:c3:84:90:69:0d:52:cd:b8:57:78:da:14:d9:6e:
6b:59:a4:c8:a0:6a:a0:fc:9b:21:74:ac:49:fd:6f:
eb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:EC:EC:0A:14:2A:F7:EC:00:31:8A:C9:78:6D:4C:4A:94:88:23:A8
X509v3 Authority Key Identifier:
keyid:DA:1F:47:7B:3B:82:C1:A2:60:C1:D7:85:7E:48:2F:0D:85:96:E7:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/0/DA1F477B3B82C1A260C1D7857E482F0D8596E756.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA1F477B3B82C1A260C1D7857E482F0D8596E756.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/0/323830343a343531383a3a2f33322d3438203d3e20323637363732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4518::/32
Signature Algorithm: sha256WithRSAEncryption
02:30:f5:a5:cb:a8:50:c3:c0:a2:b0:f5:81:63:89:b6:d9:87:
a8:72:61:c4:ac:c4:bf:17:9d:6e:6f:30:f5:98:93:2e:da:ad:
6d:51:cd:8c:5f:92:77:24:67:14:60:2e:ff:ac:99:fd:58:4e:
bf:32:47:0f:eb:d8:6e:02:93:99:14:ca:1b:cc:1d:1c:5b:ab:
4c:1b:7a:57:34:3d:5a:be:a9:df:2e:a0:a1:23:c4:47:c5:45:
a2:d3:61:e4:b5:fa:11:7c:e5:0e:2d:53:a5:a3:85:d6:dd:e3:
04:61:c0:d6:de:0d:e6:9b:22:cf:62:40:76:24:3f:23:dc:ce:
46:8a:c9:d3:aa:34:e9:df:b0:37:4c:a7:bc:c7:54:43:68:06:
db:b5:95:3b:4f:64:b3:b3:ff:76:cd:ce:7b:26:7e:7e:e5:ee:
7b:49:c1:b9:60:38:dc:8d:ac:96:1e:02:05:6d:3c:2b:0f:0a:
8b:e3:36:c7:d8:02:bb:21:6b:42:56:35:33:b8:a7:f6:ca:0e:
f5:9b:32:9e:e7:6d:28:6d:d5:82:41:47:8c:e3:03:9c:3c:7d:
7b:23:a7:51:3d:af:18:aa:fa:61:f9:e8:23:93:87:0b:62:dd:
d9:d9:2e:9d:a3:d4:a7:1d:e0:57:3a:0d:6b:db:b0:23:df:5c:
47:6e:2c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:04 2025 by rpki-client