![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/323830343a6438303a3a2f33322d3332203d3e203532363335.roa
File: 323830343a6438303a3a2f33322d3332203d3e203532363335.roa (raw, json)
Hash identifier: w19YX/7D+pjZoHISfZH5brNjxz0nn1xISzN7ZCLt6vs=
Subject key identifier: 25:A2:60:69:A3:3B:5E:03:6C:29:5E:90:9A:6D:60:38:7C:6C:90:13
Certificate issuer: /CN=63ED338701F5B4BCE8EF3D9881EE5EF1299FD237
Certificate serial: 32A37998A90ADE0168D1BDDE2D96089F918F273A
Authority key identifier: 63:ED:33:87:01:F5:B4:BC:E8:EF:3D:98:81:EE:5E:F1:29:9F:D2:37
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/323830343a6438303a3a2f33322d3332203d3e203532363335.roa
Signing time: Fri 16 Dec 2022 19:00:00 +0000
ROA not before: Fri 16 Dec 2022 18:55:00 +0000
ROA not after: Fri 15 Dec 2023 19:00:00 +0000
asID: 52635
IP address blocks: 2804:d80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:a3:79:98:a9:0a:de:01:68:d1:bd:de:2d:96:08:9f:91:8f:27:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ED338701F5B4BCE8EF3D9881EE5EF1299FD237
Validity
Not Before: Dec 16 18:55:00 2022 GMT
Not After : Dec 15 19:00:00 2023 GMT
Subject: CN=25A26069A33B5E036C295E909A6D60387C6C9013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bf:b9:b6:0c:c4:2b:9b:22:69:2f:3c:75:3a:
c3:89:1f:44:91:fe:49:08:fd:1a:01:fa:44:76:62:
f0:ca:17:76:53:fd:62:37:61:b7:67:a2:4f:1a:1d:
44:c9:fc:5e:fe:83:43:61:7a:43:cc:c8:56:03:e5:
6d:a7:72:73:84:19:b6:41:a6:31:08:dc:a5:87:89:
83:0f:3e:4c:f8:37:4a:6b:18:af:97:9f:06:60:a2:
1a:16:9e:ce:b6:88:e7:ad:36:26:ed:4a:a4:64:78:
94:5e:4e:06:3e:8a:21:69:ee:27:63:59:30:15:47:
c3:6e:59:86:24:db:5a:39:38:6d:5a:cd:c3:8b:2c:
09:85:75:a3:24:3d:7a:ca:9b:75:b4:f6:f2:16:3b:
be:e3:ae:9d:9d:54:2d:95:2f:76:92:18:0b:da:15:
33:ea:80:40:ce:7b:b3:1e:2b:50:95:ef:0c:71:db:
6d:e5:82:94:6e:e5:85:04:fa:d5:e2:93:58:47:e1:
6e:b5:84:29:1a:8c:a4:86:15:d0:6a:02:9e:cb:c4:
cc:f2:d5:11:4d:75:2a:79:e1:23:ff:a7:66:5a:be:
38:fb:46:4e:46:18:18:75:ed:0f:94:69:d5:6f:9b:
3d:24:f2:4c:13:82:54:e8:66:aa:69:4e:6d:c8:15:
36:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A2:60:69:A3:3B:5E:03:6C:29:5E:90:9A:6D:60:38:7C:6C:90:13
X509v3 Authority Key Identifier:
keyid:63:ED:33:87:01:F5:B4:BC:E8:EF:3D:98:81:EE:5E:F1:29:9F:D2:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/323830343a6438303a3a2f33322d3332203d3e203532363335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:d80::/32
Signature Algorithm: sha256WithRSAEncryption
d6:99:9d:98:05:41:c4:8c:9e:ef:d9:28:72:ad:27:2d:cb:97:
05:04:ab:3d:cc:49:84:00:0d:ad:f5:1a:9f:0f:23:1a:3d:a6:
04:9c:e8:14:c7:a7:b5:47:6f:1e:72:73:98:be:5a:86:79:b5:
03:60:2e:8c:cd:c8:1e:e1:98:cb:e8:ee:35:32:0e:1a:48:7b:
89:4b:22:3a:21:cb:05:da:44:4b:af:44:e7:3f:2c:f4:29:3e:
fa:c2:14:71:83:bf:6b:40:5f:53:08:cc:cc:8d:a7:3f:d7:78:
52:40:d2:34:f9:95:1c:e5:c0:7c:7e:21:42:58:da:55:9b:53:
3c:8d:02:3e:31:d1:4c:b4:57:7d:e5:28:a9:c2:79:2e:07:67:
fa:aa:54:97:7f:72:26:97:55:20:d1:f6:89:fd:ba:f9:29:6c:
28:78:82:c7:b1:15:ca:3e:73:0a:97:fb:7f:3b:73:bb:91:83:
c7:4d:c1:18:57:22:9e:1c:38:17:76:38:70:5e:25:e3:68:9f:
ea:4b:00:0f:05:67:7a:6d:5e:95:c6:13:b7:26:f1:05:3a:55:
d2:12:2b:09:63:98:f9:4f:16:bc:43:87:5d:5b:82:3d:1c:41:
61:48:a7:a9:64:eb:f7:c4:91:f6:3b:1d:26:91:ec:bd:0f:86:
d8:49:8c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:29 2025 by rpki-client