![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/323830343a346635343a383030303a3a2f33332d3333203d3e20323338333230.roa
File: 323830343a346635343a383030303a3a2f33332d3333203d3e20323338333230.roa (raw, json)
Hash identifier: wTxdHAGPk08iq6+Pe9itLnqKS2dIeNoL5wUrhEL9rd8=
Subject key identifier: B9:A1:B2:93:B2:10:48:EA:D5:19:6B:04:76:3A:55:06:6C:D8:64:9E
Certificate issuer: /CN=7E870936463A4C49A47872CB9BDBE77E9EF1EE14
Certificate serial: 5A3181D90CFDF6E16CB661843AFE0D6AED585236
Authority key identifier: 7E:87:09:36:46:3A:4C:49:A4:78:72:CB:9B:DB:E7:7E:9E:F1:EE:14
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E870936463A4C49A47872CB9BDBE77E9EF1EE14.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/323830343a346635343a383030303a3a2f33332d3333203d3e20323338333230.roa
Signing time: Wed 02 Aug 2023 14:08:43 +0000
ROA not before: Wed 02 Aug 2023 14:03:43 +0000
ROA not after: Wed 31 Jul 2024 14:08:43 +0000
asID: 238320
IP address blocks: 2804:4f54:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:31:81:d9:0c:fd:f6:e1:6c:b6:61:84:3a:fe:0d:6a:ed:58:52:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E870936463A4C49A47872CB9BDBE77E9EF1EE14
Validity
Not Before: Aug 2 14:03:43 2023 GMT
Not After : Jul 31 14:08:43 2024 GMT
Subject: CN=B9A1B293B21048EAD5196B04763A55066CD8649E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fe:12:71:31:20:bc:a6:06:f0:3d:4b:98:45:
23:1e:9a:b8:86:9d:88:75:f6:db:73:75:ec:54:87:
99:7a:7e:91:23:60:e7:ef:00:6e:55:7c:6d:00:18:
96:d1:19:56:2d:81:68:eb:79:aa:4e:33:6c:b7:52:
d2:8b:19:0e:fe:2f:7b:c4:27:45:64:bb:8e:63:43:
0a:0c:fc:da:36:e9:6d:ec:17:dc:b0:02:b9:9e:ae:
a9:39:01:44:c0:04:b8:45:83:24:39:46:d9:19:a1:
62:3c:68:2c:25:d7:32:04:4a:7b:a0:b0:3c:4a:cc:
12:af:f7:fc:25:23:00:0f:84:ca:42:95:6a:d6:ae:
8c:02:88:2d:a1:c2:c9:a2:01:43:b6:ee:af:91:3a:
3c:29:01:3e:ba:df:52:e5:ea:a2:21:9f:03:2d:10:
94:1c:ba:32:a9:09:2f:6a:33:c5:57:7e:64:dc:94:
f8:d0:9b:f9:3a:3b:f5:ce:91:b7:3c:66:31:b8:4d:
35:59:17:a3:e5:91:82:ea:60:46:e9:1d:d7:b6:3c:
41:06:f2:50:7b:29:17:59:f9:41:9b:25:37:c6:1c:
de:e6:57:49:81:59:d1:41:55:63:59:69:f0:54:75:
51:92:cd:52:3f:69:af:07:2c:63:e6:e4:b7:17:14:
ed:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A1:B2:93:B2:10:48:EA:D5:19:6B:04:76:3A:55:06:6C:D8:64:9E
X509v3 Authority Key Identifier:
keyid:7E:87:09:36:46:3A:4C:49:A4:78:72:CB:9B:DB:E7:7E:9E:F1:EE:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/7E870936463A4C49A47872CB9BDBE77E9EF1EE14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E870936463A4C49A47872CB9BDBE77E9EF1EE14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/323830343a346635343a383030303a3a2f33332d3333203d3e20323338333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4f54:8000::/33
Signature Algorithm: sha256WithRSAEncryption
b6:90:69:de:61:18:c4:bb:f5:0b:38:a7:02:d1:ed:31:b6:ca:
7f:3b:33:d7:5b:2c:bc:0d:9e:fc:b1:2b:93:02:dd:5a:32:4a:
91:f6:51:af:32:83:f6:29:3f:ae:16:45:71:2d:b6:df:03:4f:
d9:b3:93:ca:b6:d1:2b:c3:a0:f9:31:6d:fc:96:17:0a:8f:2b:
fb:ba:36:04:95:51:10:6c:0e:32:c1:3c:18:51:f5:e4:2a:3e:
c6:b9:cf:ea:f7:e0:f3:0f:cc:1b:0f:fd:1a:6b:00:a2:02:25:
e5:b6:db:6a:0b:1f:36:57:4f:b3:de:07:f8:b0:a8:c9:05:c2:
95:95:6f:cf:4d:89:ab:4c:89:6f:7b:84:c7:4e:00:67:4b:44:
82:fe:a0:9e:23:11:61:a3:03:de:ed:fd:0d:27:56:b1:ca:43:
ad:ae:8e:07:12:1a:0a:29:ca:80:b8:8b:b7:37:10:da:de:28:
66:f8:8c:81:a1:4b:e3:db:5d:47:ea:04:6f:0b:a7:51:08:5d:
8d:d1:b3:32:f7:75:62:48:28:e1:c1:bd:83:f2:96:2d:76:40:
5d:83:02:f2:52:1e:06:fe:e0:fc:99:fd:cc:60:9c:be:56:94:
52:e9:93:b0:24:40:a5:46:ef:ff:3a:8c:9f:6d:6a:d5:1e:3e:
ce:e5:23:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:03 2025 by rpki-client