![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a383030303a3a2f33342d3334203d3e203631363738.roa
File: 323830343a316364343a383030303a3a2f33342d3334203d3e203631363738.roa (raw, json)
Hash identifier: vOctyo0gXW6n1l624a5E+GwWW+drc4EhdZ+Wsxh8dGM=
Subject key identifier: AF:98:F6:83:3F:4E:D2:FA:AC:0A:33:73:08:A3:5E:AB:F1:EF:48:C6
Certificate issuer: /CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
Certificate serial: 1AFF7BFF36069C86C283BC12E050685E2340941B
Authority key identifier: 5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a383030303a3a2f33342d3334203d3e203631363738.roa
Signing time: Tue 24 Oct 2023 12:43:50 +0000
ROA not before: Tue 24 Oct 2023 12:38:50 +0000
ROA not after: Tue 22 Oct 2024 12:43:50 +0000
asID: 61678
IP address blocks: 2804:1cd4:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:ff:7b:ff:36:06:9c:86:c2:83:bc:12:e0:50:68:5e:23:40:94:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
Validity
Not Before: Oct 24 12:38:50 2023 GMT
Not After : Oct 22 12:43:50 2024 GMT
Subject: CN=AF98F6833F4ED2FAAC0A337308A35EABF1EF48C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:01:c1:c0:fd:a3:16:9b:fa:e6:ef:b5:a1:15:
6e:2f:d7:a3:e4:34:b0:0b:e6:79:57:17:b0:9a:0b:
7a:1e:ba:bf:2c:0b:13:f1:e4:f6:b8:5a:f7:43:a0:
1a:71:44:05:8c:6f:58:bb:b2:07:68:bb:00:1f:eb:
78:33:cb:57:74:f5:61:f6:c9:66:3d:a8:88:2a:b9:
8c:79:7b:fb:eb:d1:70:ed:0e:9a:6a:e9:f2:76:eb:
14:dc:5c:48:3d:d2:20:d5:01:7b:22:e9:d6:b7:7f:
bc:29:dc:2e:b8:89:89:34:e6:9e:a0:58:81:9e:c4:
d9:70:98:21:c1:17:24:08:12:04:1a:85:b4:dd:3c:
6e:99:31:4c:64:75:49:29:01:69:1e:4e:0d:83:c3:
07:8f:1d:5f:cb:b2:0e:b1:a0:28:3f:7f:d6:58:4a:
1e:03:93:63:7b:3f:3d:7e:c2:f9:85:48:be:ad:69:
f0:57:38:19:91:8a:00:f6:08:7e:c0:5a:68:67:8e:
63:94:48:95:01:91:a2:c8:ba:9b:41:8b:a9:86:86:
e7:0f:ff:a8:51:5b:ee:02:d6:3d:db:a1:04:10:6e:
a8:ca:91:8d:5c:99:12:73:6b:09:80:9e:9a:c5:c7:
21:6f:57:81:d9:d2:7c:0f:e2:ab:64:38:84:c0:35:
f0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:98:F6:83:3F:4E:D2:FA:AC:0A:33:73:08:A3:5E:AB:F1:EF:48:C6
X509v3 Authority Key Identifier:
keyid:5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a383030303a3a2f33342d3334203d3e203631363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1cd4:8000::/34
Signature Algorithm: sha256WithRSAEncryption
9e:ec:b7:7d:9e:f6:21:ef:08:76:58:a2:f8:ac:f1:a2:24:b0:
dc:c6:16:57:7a:d8:78:77:ef:34:9a:0f:3d:06:0a:21:04:b3:
1c:ed:bf:1d:2c:d0:e9:8a:ff:a3:f1:3d:af:c5:78:9c:74:c2:
08:d8:04:2a:98:eb:3f:e7:40:aa:8e:e5:44:e6:86:ec:62:8c:
51:1d:57:23:10:7f:59:19:20:51:e7:06:a7:96:ce:3a:a7:30:
99:2e:33:01:cc:c3:5d:c1:4a:aa:0d:f1:7e:fa:82:ab:f8:d6:
b8:0a:55:9c:2f:c4:97:c4:93:b7:66:7e:a2:4e:86:89:66:1a:
2a:0b:80:e9:d5:48:58:5c:37:80:f2:b5:fd:b3:50:f2:2a:c2:
23:0e:9a:8c:9a:8a:46:1b:40:89:c5:78:dc:9f:8a:d0:5d:61:
dc:00:e3:ac:c5:20:5d:6c:3c:13:49:d6:5a:46:3f:ad:85:a7:
e3:11:3d:39:63:77:ae:55:ea:3b:80:91:0b:49:7e:b2:0b:94:
6e:b7:95:24:0b:4e:be:a8:85:68:a2:fe:51:c4:54:7f:c4:81:
02:9a:cb:84:fa:39:e9:5f:7d:d8:9e:1a:10:4e:7d:f4:a6:61:
49:f4:df:9b:42:8a:c4:67:ac:94:6a:b6:65:0a:43:d5:a4:b1:
1e:f5:4c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:52 2025 by rpki-client