![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4vMdBsKgQXVZQ1af4gqepEKzYdAuUy7QFoWjeoMHoWCX/0/323830343a323766633a383030303a3a2f33332d3333203d3e20323633393333.roa
File: 323830343a323766633a383030303a3a2f33332d3333203d3e20323633393333.roa (raw, json)
Hash identifier: uW6mxym1lZ4pLzEjkQNxe6aSK8xY34t8p8f3ej/Ko7c=
Subject key identifier: 85:99:2C:3F:A3:92:1D:3B:B7:A1:A8:97:45:2A:D1:DB:3B:F0:BE:A3
Certificate issuer: /CN=AA562CEFF4B69D67F2C885D547C0C42848DD81B3
Certificate serial: 2EEFEDDC6B119B54B638EC9AFBE3C9E2DE4A5053
Authority key identifier: AA:56:2C:EF:F4:B6:9D:67:F2:C8:85:D5:47:C0:C4:28:48:DD:81:B3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA562CEFF4B69D67F2C885D547C0C42848DD81B3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4vMdBsKgQXVZQ1af4gqepEKzYdAuUy7QFoWjeoMHoWCX/0/323830343a323766633a383030303a3a2f33332d3333203d3e20323633393333.roa
Signing time: Wed 08 Feb 2023 12:25:21 +0000
ROA not before: Wed 08 Feb 2023 12:20:21 +0000
ROA not after: Wed 07 Feb 2024 12:25:21 +0000
asID: 263933
IP address blocks: 2804:27fc:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:ef:ed:dc:6b:11:9b:54:b6:38:ec:9a:fb:e3:c9:e2:de:4a:50:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA562CEFF4B69D67F2C885D547C0C42848DD81B3
Validity
Not Before: Feb 8 12:20:21 2023 GMT
Not After : Feb 7 12:25:21 2024 GMT
Subject: CN=85992C3FA3921D3BB7A1A897452AD1DB3BF0BEA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ed:36:ef:05:db:41:be:fb:ee:70:28:93:26:
ee:ce:bc:21:d4:23:67:03:00:6a:54:cc:c0:42:75:
a4:f9:3f:3e:b8:f6:61:39:14:a8:31:d9:54:e3:f7:
c2:a8:45:92:56:6b:d8:01:b6:f5:05:f5:ef:bb:54:
3a:6f:b7:40:e5:ef:57:1d:58:48:1e:7f:13:2b:23:
7b:0f:b9:d2:2f:17:e4:18:0e:9b:94:2d:6c:d4:70:
1b:7f:71:58:6a:17:2c:ec:43:df:80:87:7d:eb:f1:
81:a3:16:9f:0a:4f:88:63:64:5b:ec:cf:57:3e:d4:
5a:d0:22:3e:25:ed:8d:6c:e2:55:4e:3c:dd:7e:4e:
7f:dd:fd:74:52:11:eb:b0:c4:b5:5c:e4:63:fc:32:
69:02:fd:3b:7d:22:8f:90:97:f9:89:e3:4d:92:5c:
c8:56:02:5a:51:c2:44:b0:62:2a:3e:1b:01:b0:ba:
8d:34:0e:c3:44:43:da:52:95:b7:b7:e2:38:01:d1:
c0:4c:0c:1f:5f:b0:4a:dd:2a:4f:a7:e8:22:43:3b:
92:5c:80:b7:97:4b:53:6e:16:48:19:8f:e3:4a:a6:
38:65:41:f5:a8:4b:91:d1:e1:13:5d:87:6b:08:d0:
ec:bd:dc:dc:f1:a5:f6:6a:70:57:9d:89:12:54:e6:
fc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:99:2C:3F:A3:92:1D:3B:B7:A1:A8:97:45:2A:D1:DB:3B:F0:BE:A3
X509v3 Authority Key Identifier:
keyid:AA:56:2C:EF:F4:B6:9D:67:F2:C8:85:D5:47:C0:C4:28:48:DD:81:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4vMdBsKgQXVZQ1af4gqepEKzYdAuUy7QFoWjeoMHoWCX/0/AA562CEFF4B69D67F2C885D547C0C42848DD81B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA562CEFF4B69D67F2C885D547C0C42848DD81B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4vMdBsKgQXVZQ1af4gqepEKzYdAuUy7QFoWjeoMHoWCX/0/323830343a323766633a383030303a3a2f33332d3333203d3e20323633393333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:27fc:8000::/33
Signature Algorithm: sha256WithRSAEncryption
12:ae:e6:20:39:d3:b3:5b:40:a8:90:f9:9f:19:aa:c8:f1:ad:
47:b6:5c:a2:6a:e7:e6:ad:1d:a3:ee:37:38:93:a0:f7:36:71:
56:0c:22:96:84:21:ae:2b:8b:2b:b0:d7:06:68:b6:e5:cf:3d:
db:ba:8e:30:d2:50:61:96:01:ad:4c:75:e4:cf:71:6c:6f:2f:
9b:52:48:2f:6d:cd:65:47:6b:12:16:31:7a:f9:da:74:1f:5d:
03:74:88:99:5a:5f:c4:ba:0e:f3:a0:40:07:d3:72:4a:08:70:
bd:9b:1e:e2:54:65:25:c8:c4:c6:31:3d:45:9d:9f:cd:40:d7:
da:1d:30:28:65:d6:5a:5a:4e:83:17:c0:36:01:5b:4d:7f:86:
ae:01:10:28:5c:56:6e:ec:d5:33:6b:26:d0:90:89:9f:6d:be:
a0:14:40:ff:ef:65:27:31:91:e7:33:f7:e6:f7:d1:1e:ce:64:
d0:b2:4f:12:0c:0b:d1:d0:8c:f8:ba:22:1e:f8:b8:11:2a:35:
75:28:e0:0a:a4:bd:f1:10:b4:42:d4:fd:de:48:1c:2d:ed:51:
5b:bc:c9:92:3a:61:d1:97:05:ee:2c:97:48:6b:55:cd:f4:f6:
9a:7c:1b:d9:a3:47:7c:a6:28:e8:24:30:0d:ec:7f:7a:14:39:
17:f0:6b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:55 2025 by rpki-client