![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/323830343a336534343a3a2f33322d3336203d3e20323636353834.roa
File: 323830343a336534343a3a2f33322d3336203d3e20323636353834.roa (raw, json)
Hash identifier: HKlBwlLqr56MaMlEfF6V8YrAmae7QNeUJtZyJYtlHO0=
Subject key identifier: 20:6E:C3:0A:A1:C7:BA:3D:97:73:76:5E:18:75:9A:8F:36:BE:5C:98
Certificate issuer: /CN=D6F553ECFCDBA2522E44AAACF387799E1CA98EDB
Certificate serial: 1FE52C83BC8B613147D324BAA0B6B89C98CBCADB
Authority key identifier: D6:F5:53:EC:FC:DB:A2:52:2E:44:AA:AC:F3:87:79:9E:1C:A9:8E:DB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D6F553ECFCDBA2522E44AAACF387799E1CA98EDB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/323830343a336534343a3a2f33322d3336203d3e20323636353834.roa
Signing time: Wed 20 Mar 2024 18:29:11 +0000
ROA not before: Wed 20 Mar 2024 18:24:11 +0000
ROA not after: Wed 19 Mar 2025 18:29:11 +0000
asID: 266584
IP address blocks: 2804:3e44::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:e5:2c:83:bc:8b:61:31:47:d3:24:ba:a0:b6:b8:9c:98:cb:ca:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6F553ECFCDBA2522E44AAACF387799E1CA98EDB
Validity
Not Before: Mar 20 18:24:11 2024 GMT
Not After : Mar 19 18:29:11 2025 GMT
Subject: CN=206EC30AA1C7BA3D9773765E18759A8F36BE5C98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b7:bf:50:56:fe:2f:c1:ec:32:7b:d6:6e:86:
c3:be:d3:15:f8:2f:b8:fc:02:cf:a6:f7:48:10:bc:
d0:8e:3a:85:2f:f9:98:96:d6:13:3f:a9:13:c5:f9:
fe:df:2e:a0:ca:15:c7:6c:71:84:40:f1:b3:75:dc:
d3:8f:ad:f8:75:65:63:c4:36:a8:68:df:2c:4b:17:
51:38:5a:4c:e8:6e:a4:3c:b3:68:22:9e:0b:c2:86:
af:ee:61:2b:72:85:a8:34:75:57:9f:46:96:75:19:
88:7c:68:ec:69:f3:13:14:07:e5:c1:29:1e:d6:76:
6d:9e:8e:0f:04:a1:b3:56:44:99:24:25:e9:e4:98:
41:7e:ee:f2:c1:2b:1e:66:26:10:77:55:ce:3b:7e:
c8:45:81:24:72:a1:a6:0e:7d:bd:cb:5f:9f:31:59:
35:3e:ca:ec:20:57:bf:b0:97:5f:cc:9b:e1:31:a8:
2d:90:a7:e6:8b:6a:a0:61:1a:a8:d4:b9:69:33:8c:
7c:32:a6:f3:d9:62:a9:26:c1:23:75:aa:ad:b8:96:
79:f4:19:3e:77:3c:05:84:d0:3a:51:c6:f0:96:b4:
b6:ec:e0:87:e8:07:bd:b0:2f:a3:3d:96:93:2d:2a:
55:a0:e3:14:b5:7e:f9:f1:2e:1a:e7:5f:67:21:c7:
4b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6E:C3:0A:A1:C7:BA:3D:97:73:76:5E:18:75:9A:8F:36:BE:5C:98
X509v3 Authority Key Identifier:
keyid:D6:F5:53:EC:FC:DB:A2:52:2E:44:AA:AC:F3:87:79:9E:1C:A9:8E:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/D6F553ECFCDBA2522E44AAACF387799E1CA98EDB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D6F553ECFCDBA2522E44AAACF387799E1CA98EDB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/323830343a336534343a3a2f33322d3336203d3e20323636353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3e44::/32
Signature Algorithm: sha256WithRSAEncryption
45:22:f6:44:09:d9:82:2a:1b:c8:d4:60:fb:c0:71:e8:a2:04:
78:9e:f9:45:f9:56:ce:fa:31:57:cd:3f:28:0a:68:07:af:cb:
71:b0:a6:e6:57:b8:3a:63:22:36:4e:3a:79:a8:a5:fb:a2:02:
3c:03:20:87:8f:2a:6b:a3:20:eb:71:e2:0b:11:7a:ff:a3:8d:
5f:44:03:3f:3d:c4:dc:e7:f6:f0:27:9f:06:b2:b4:8b:1b:22:
a2:e5:bb:66:79:cc:b8:ef:79:44:f0:6b:c8:75:f4:af:d1:9d:
5a:95:aa:f0:62:e3:00:b3:95:f5:28:6b:71:39:b6:fe:d3:b1:
c6:8e:cf:cd:f1:a5:81:49:d5:35:bb:2d:f0:c5:f1:e2:08:19:
04:d3:b1:da:38:5a:a1:4b:36:d6:a9:d8:c3:5d:60:bd:d4:25:
0a:3d:80:12:c8:61:47:43:8a:92:ea:13:0c:88:bb:8a:37:55:
32:13:81:46:35:40:af:46:83:84:b1:8e:f0:3b:8a:21:da:e7:
f3:c5:a6:5f:cf:4f:dd:7b:32:3c:3e:8d:81:7f:f9:5a:4d:ba:
be:e1:a2:0b:1f:e2:96:6e:d3:2f:2c:05:9a:43:85:fa:45:55:
e3:ca:ea:94:34:5a:a0:f1:cc:a5:7d:09:23:85:fb:d9:b8:2d:
e4:e7:21:01
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUH+Usg7yLYTFH0yS6oLa4nJjLytswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDZGNTUzRUNGQ0RCQTI1MjJFNDRBQUFDRjM4Nzc5OUUx
Q0E5OEVEQjAeFw0yNDAzMjAxODI0MTFaFw0yNTAzMTkxODI5MTFaMDMxMTAvBgNV
BAMTKDIwNkVDMzBBQTFDN0JBM0Q5NzczNzY1RTE4NzU5QThGMzZCRTVDOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOt79QVv4vwewye9ZuhsO+0xX4
L7j8As+m90gQvNCOOoUv+ZiW1hM/qRPF+f7fLqDKFcdscYRA8bN13NOPrfh1ZWPE
Nqho3yxLF1E4WkzobqQ8s2gingvChq/uYStyhag0dVefRpZ1GYh8aOxp8xMUB+XB
KR7Wdm2ejg8EobNWRJkkJenkmEF+7vLBKx5mJhB3Vc47fshFgSRyoaYOfb3LX58x
WTU+yuwgV7+wl1/Mm+ExqC2Qp+aLaqBhGqjUuWkzjHwypvPZYqkmwSN1qq24lnn0
GT53PAWE0DpRxvCWtLbs4IfoB72wL6M9lpMtKlWg4xS1fvnxLhrnX2chx0vBAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUIG7DCqHHuj2Xc3ZeGHWajza+XJgwHwYDVR0j
BBgwFoAU1vVT7PzbolIuRKqs84d5nhypjtswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM21LYXpheTlYV283ZVpqVHRRVThvUVd2THNUSGFORmVhbk5XWjZUWnJ0
TWUvMC9ENkY1NTNFQ0ZDREJBMjUyMkU0NEFBQUNGMzg3Nzk5RTFDQTk4RURCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q2RjU1M0VDRkNEQkEyNTIy
RTQ0QUFBQ0YzODc3OTlFMUNBOThFREIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNtS2F6YXk5WFdvN2VaalR0UVU4b1FXdkxzVEhhTkZlYW5OV1o2VFpydE1lLzAv
MzIzODMwMzQzYTMzNjUzNDM0M2EzYTJmMzMzMjJkMzMzNjIwM2QzZTIwMzIzNjM2
MzUzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ+RDANBgkqhkiG9w0BAQsFAAOCAQEARSL2RAnZ
giobyNRg+8Bx6KIEeJ75RflWzvoxV80/KApoB6/LcbCm5le4OmMiNk46eail+6IC
PAMgh48qa6Mg63HiCxF6/6ONX0QDPz3E3Of28CefBrK0ixsiouW7ZnnMuO95RPBr
yHX0r9GdWpWq8GLjALOV9ShrcTm2/tOxxo7PzfGlgUnVNbst8MXx4ggZBNOx2jha
oUs21qnYw11gvdQlCj2AEshhR0OKkuoTDIi7ijdVMhOBRjVAr0aDhLGO8DuKIdrn
88WmX89P3XsyPD6NgX/5Wk26vuGiCx/ilm7TLywFmkOF+kVV48rqlDRaoPHMpX0J
I4X72bgt5OchAQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:41:19 2025 by rpki-client