![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/323830343a343533343a3a2f33342d3334203d3e20323636393131.roa
File: 323830343a343533343a3a2f33342d3334203d3e20323636393131.roa (raw, json)
Hash identifier: bR4aZhMS6KnQP44ccJhKSbD3ExohYgb1IGG8TY5hV0w=
Subject key identifier: BD:9F:85:C5:8E:E2:08:8A:C2:B7:96:AE:A7:54:B5:F3:D3:EB:D2:3B
Certificate issuer: /CN=2970A36B0D430502A569554FE4F85E73508EA7CF
Certificate serial: 3EC7F815C9B461724680319911A4C6D720F18A2C
Authority key identifier: 29:70:A3:6B:0D:43:05:02:A5:69:55:4F:E4:F8:5E:73:50:8E:A7:CF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2970A36B0D430502A569554FE4F85E73508EA7CF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/323830343a343533343a3a2f33342d3334203d3e20323636393131.roa
Signing time: Wed 16 Aug 2023 13:50:29 +0000
ROA not before: Wed 16 Aug 2023 13:45:29 +0000
ROA not after: Wed 14 Aug 2024 13:50:29 +0000
asID: 266911
IP address blocks: 2804:4534::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:c7:f8:15:c9:b4:61:72:46:80:31:99:11:a4:c6:d7:20:f1:8a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2970A36B0D430502A569554FE4F85E73508EA7CF
Validity
Not Before: Aug 16 13:45:29 2023 GMT
Not After : Aug 14 13:50:29 2024 GMT
Subject: CN=BD9F85C58EE2088AC2B796AEA754B5F3D3EBD23B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6e:bd:4e:f1:62:a5:19:80:80:af:09:5a:da:
00:ee:61:3f:8f:90:43:39:f3:cc:6b:01:25:39:ef:
28:ed:63:51:d6:c1:d0:7a:c2:ea:ec:cf:a9:a4:bd:
01:11:8b:5e:59:d8:cf:30:fb:37:80:ad:3d:85:fe:
76:92:fa:7c:11:16:ec:b4:da:61:4a:2e:13:76:9f:
50:0d:11:6f:e4:d9:71:43:01:fa:91:ac:bc:9e:bd:
9f:3f:e6:a7:1b:12:c0:99:0a:a7:92:de:4f:08:19:
17:03:a7:a3:2c:9d:ad:9f:a2:b1:d1:d3:3d:02:ba:
f0:8e:a2:a4:73:9e:bd:98:2c:68:c1:4d:5b:d0:0f:
35:2a:74:a4:c3:97:2b:c8:5c:91:21:23:0b:1b:8d:
c8:06:44:c1:14:50:12:53:8c:f4:f1:04:a7:7a:4a:
e6:9b:06:08:64:2d:bc:e0:67:6c:cf:80:af:5b:dd:
45:0f:02:d6:6b:09:3a:e2:99:2b:7a:d1:1d:2d:d9:
f9:0f:6b:a1:df:27:7d:f6:fa:cc:69:3b:bc:30:f1:
69:ab:cc:5e:54:c1:26:cf:a2:90:03:69:ca:c2:e9:
81:b4:81:05:bb:3f:fe:66:d0:5c:b0:d8:5c:94:92:
54:eb:97:75:9b:1a:8d:52:ce:a0:2a:23:f7:93:81:
aa:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9F:85:C5:8E:E2:08:8A:C2:B7:96:AE:A7:54:B5:F3:D3:EB:D2:3B
X509v3 Authority Key Identifier:
keyid:29:70:A3:6B:0D:43:05:02:A5:69:55:4F:E4:F8:5E:73:50:8E:A7:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/2970A36B0D430502A569554FE4F85E73508EA7CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2970A36B0D430502A569554FE4F85E73508EA7CF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/323830343a343533343a3a2f33342d3334203d3e20323636393131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4534::/34
Signature Algorithm: sha256WithRSAEncryption
33:01:13:16:89:11:4d:8c:cd:4f:a4:b4:67:87:45:37:2e:2e:
7b:11:08:4f:fd:79:7f:ff:43:52:4d:f2:ec:89:23:b3:c7:90:
25:eb:43:3a:9c:7d:8a:26:64:4b:ad:04:2c:c7:2e:7c:b2:a3:
18:5e:1d:24:df:65:f4:b9:31:12:ee:69:7c:2d:16:b2:d1:33:
13:bc:0c:fd:11:4b:40:71:58:3d:be:72:2a:ac:9a:67:3d:ef:
fc:eb:72:a0:94:d5:ca:e0:a8:01:85:03:ea:52:08:60:f0:ae:
0a:11:98:48:a6:e2:e2:df:7e:5e:e2:8e:04:14:9a:51:e1:30:
a0:1b:2b:39:c1:1c:74:16:11:6d:ad:47:1b:f0:a1:76:3a:11:
a0:22:03:0b:04:e2:2a:11:2b:e7:86:4e:f1:18:23:45:43:bf:
e2:66:1f:50:d4:f4:e7:27:40:53:f6:08:4b:c2:79:c9:f8:b3:
af:e2:21:f7:71:87:cd:33:d6:b6:3d:bc:88:a2:43:3b:56:67:
e3:20:34:c2:10:8d:ac:8f:ca:98:78:cf:40:6c:ac:82:e5:19:
bd:b6:35:7a:0b:29:be:05:f5:3f:4c:7e:2d:aa:d0:fe:f5:e0:
15:e4:73:0f:01:d7:e0:99:cf:8d:a8:08:89:12:55:95:95:a0:
34:62:a1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:06 2025 by rpki-client