![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/323830343a31343a3a2f33322d3438203d3e203238333630.roa
File: 323830343a31343a3a2f33322d3438203d3e203238333630.roa (raw, json)
Hash identifier: Obso0x7fNb+aBRniXW/Fx05UvmKO+EzkmaRNSc1nCHA=
Subject key identifier: 70:BB:A5:B6:5D:91:D4:57:DA:3F:C7:68:E1:33:94:9C:45:F8:F1:63
Certificate issuer: /CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
Certificate serial: 3B458C2D298F8F8036E13AB62ACD00F0C697725D
Authority key identifier: 16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/323830343a31343a3a2f33322d3438203d3e203238333630.roa
Signing time: Fri 18 Nov 2022 13:29:58 +0000
ROA not before: Fri 18 Nov 2022 13:24:58 +0000
ROA not after: Fri 17 Nov 2023 13:29:58 +0000
asID: 28360
IP address blocks: 2804:14::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:45:8c:2d:29:8f:8f:80:36:e1:3a:b6:2a:cd:00:f0:c6:97:72:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
Validity
Not Before: Nov 18 13:24:58 2022 GMT
Not After : Nov 17 13:29:58 2023 GMT
Subject: CN=70BBA5B65D91D457DA3FC768E133949C45F8F163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:53:be:e6:1d:31:2b:49:ce:9e:d3:ff:c1:5a:
01:46:10:e3:79:f2:39:c8:bc:74:86:e9:45:dd:d4:
4d:49:ec:4e:d4:a6:4c:27:fc:3c:2a:d0:ee:f6:d5:
94:02:08:05:fd:9d:2d:a7:d9:12:8f:f7:65:b2:d2:
a9:b7:65:29:cd:7f:55:4a:e7:be:4c:db:63:68:de:
04:91:f7:99:5a:d5:d5:ec:5b:cc:9e:fc:8b:08:84:
cf:36:5d:23:49:e9:69:34:c8:80:3c:0c:97:82:64:
39:46:23:0b:f0:f1:44:2c:b4:7e:a5:74:98:6b:00:
97:cd:61:ff:d8:83:6f:f9:32:ad:81:98:1e:5a:cd:
7f:90:4e:65:7c:45:8a:c3:e1:a3:bc:d1:39:6f:1d:
97:c4:4d:c0:30:d7:ed:8d:47:15:8f:44:c0:96:2f:
ba:3d:bc:3e:21:7b:3e:a8:41:93:22:28:d7:a7:0c:
6d:fb:b2:c8:1a:f2:47:f6:ee:e1:63:be:8b:f6:1f:
1e:81:3f:79:d0:c6:7d:7f:5a:c9:bd:09:0e:fe:83:
b8:d3:14:4b:24:95:68:c1:ae:f5:d4:3a:b8:35:f7:
de:e5:8f:c4:b6:2e:8e:38:01:95:90:4f:cc:0d:3a:
80:5a:6d:0a:cb:36:b1:dc:be:62:00:e6:72:9a:92:
30:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BB:A5:B6:5D:91:D4:57:DA:3F:C7:68:E1:33:94:9C:45:F8:F1:63
X509v3 Authority Key Identifier:
keyid:16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/323830343a31343a3a2f33322d3438203d3e203238333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:14::/32
Signature Algorithm: sha256WithRSAEncryption
2d:6e:23:a2:9e:08:74:4e:28:88:6c:7d:d5:f5:da:e7:ea:ba:
dc:41:02:fb:82:70:19:eb:41:b9:4c:42:49:3c:1c:f2:95:6d:
3a:32:a6:65:c5:ef:1c:ab:44:56:98:7b:8b:70:41:23:87:cb:
e2:a3:cb:26:74:fd:0a:70:f3:5a:5a:8b:c2:eb:f1:af:7d:ac:
ee:10:49:74:a9:fc:cd:4e:e8:aa:74:2f:73:2d:44:59:13:c7:
bb:0a:d3:d9:ff:20:0c:33:b5:b7:f5:5e:f5:1d:33:e7:69:e3:
c7:c8:5e:29:c6:b1:f2:47:43:82:9a:99:cb:ea:f4:9f:e3:6d:
ec:64:ef:09:d8:8c:40:31:12:9f:7d:17:6a:7a:09:21:b5:be:
82:47:e7:94:e3:a4:a8:41:9c:98:ad:6a:87:5a:b2:8d:89:6a:
fe:1c:39:2d:eb:77:df:ee:e5:a6:71:20:a2:c8:b4:3b:07:94:
52:6b:c3:02:f7:c5:27:74:19:c2:fa:69:6c:a9:a5:79:23:9b:
ef:11:bb:c8:12:92:bc:e7:99:60:e6:ab:b4:2b:9a:10:37:96:
32:ac:21:cf:76:52:f1:ac:0c:4e:c8:7d:24:23:72:b2:72:c1:
a2:61:00:6b:9f:e1:2e:51:73:cb:da:f3:ad:c3:11:ce:5f:f5:
74:2f:94:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:50:33 2025 by rpki-client