![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/323830343a3838633a383030303a3a2f33332d3333203d3e203532383732.roa
File: 323830343a3838633a383030303a3a2f33332d3333203d3e203532383732.roa (raw, json)
Hash identifier: s8qq+RzZ8DkwsMNZrtAcwSJUnK+WLHjZg1+ozFgMhUk=
Subject key identifier: AC:1B:57:8B:FC:37:2D:52:02:9B:FA:26:94:33:87:8A:51:82:4E:ED
Certificate issuer: /CN=13D1F1BF3A18DE5FA517A98AF97BC12DFAB985E7
Certificate serial: 79B09495F8BA2EE31B8D64C146FAD3C807906D45
Authority key identifier: 13:D1:F1:BF:3A:18:DE:5F:A5:17:A9:8A:F9:7B:C1:2D:FA:B9:85:E7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13D1F1BF3A18DE5FA517A98AF97BC12DFAB985E7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/323830343a3838633a383030303a3a2f33332d3333203d3e203532383732.roa
Signing time: Tue 12 Mar 2024 20:35:59 +0000
ROA not before: Tue 12 Mar 2024 20:30:59 +0000
ROA not after: Tue 11 Mar 2025 20:35:59 +0000
asID: 52872
IP address blocks: 2804:88c:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:b0:94:95:f8:ba:2e:e3:1b:8d:64:c1:46:fa:d3:c8:07:90:6d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13D1F1BF3A18DE5FA517A98AF97BC12DFAB985E7
Validity
Not Before: Mar 12 20:30:59 2024 GMT
Not After : Mar 11 20:35:59 2025 GMT
Subject: CN=AC1B578BFC372D52029BFA269433878A51824EED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:90:4d:d4:c9:89:a0:44:f9:fc:c8:87:4c:b5:
aa:ec:fd:3a:af:d8:a3:dc:40:6c:d3:f1:99:18:78:
74:2e:ff:8c:72:78:02:be:84:6a:c8:10:6f:68:78:
97:3b:2d:2b:f9:ca:23:2e:d0:4c:8c:a8:f2:82:3d:
19:2a:a7:e6:f5:1a:f4:ad:19:14:ae:e6:aa:82:08:
25:48:46:39:b4:39:fa:62:54:47:4b:8c:2b:d1:8b:
06:64:a3:3e:98:61:00:04:92:06:64:b6:59:a5:4d:
bc:8e:a6:2f:6e:39:a2:0c:ea:cd:18:02:20:78:13:
5d:6e:d4:84:06:11:21:a3:27:39:26:c6:e8:89:7b:
fe:7b:a0:f5:17:13:0d:d3:40:cc:b4:90:d2:1a:cb:
34:15:93:d0:77:06:97:c2:d9:99:e2:6e:b5:a5:2e:
e3:07:15:7d:a1:00:bf:48:0e:3c:12:f6:a0:2b:e7:
51:63:1b:d2:5d:84:49:a9:ab:23:56:87:33:4d:e9:
e7:11:a3:db:59:a0:cb:e5:8b:e4:83:7e:07:9e:31:
90:d6:25:09:88:51:3f:ff:7e:2a:12:78:e5:b3:ff:
f6:81:c3:5f:4e:4b:34:7e:0d:52:aa:9a:4b:2d:3b:
9b:f1:25:c5:c6:5b:4d:b5:3b:94:d0:b5:06:2a:c5:
4c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1B:57:8B:FC:37:2D:52:02:9B:FA:26:94:33:87:8A:51:82:4E:ED
X509v3 Authority Key Identifier:
keyid:13:D1:F1:BF:3A:18:DE:5F:A5:17:A9:8A:F9:7B:C1:2D:FA:B9:85:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/13D1F1BF3A18DE5FA517A98AF97BC12DFAB985E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13D1F1BF3A18DE5FA517A98AF97BC12DFAB985E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/323830343a3838633a383030303a3a2f33332d3333203d3e203532383732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:88c:8000::/33
Signature Algorithm: sha256WithRSAEncryption
9c:7a:34:41:ca:48:ac:96:8c:49:88:b2:c1:c7:29:ee:11:cf:
8a:2f:53:0d:74:82:86:9e:7a:45:8d:ec:78:8c:4b:ee:1d:94:
ad:e5:ac:6a:0b:37:9c:ad:3f:95:9c:b4:55:39:e7:4e:35:b1:
49:b5:f4:42:9a:25:0e:38:3e:bc:6b:44:25:4d:de:4c:5d:9f:
fc:93:86:7f:1f:73:a4:a1:d3:4e:83:87:99:8a:83:29:e0:e5:
a8:ca:f6:77:33:4e:25:de:11:c1:e2:c6:55:6d:e9:74:54:e1:
c7:83:ef:11:58:e7:3d:7e:63:22:fc:5b:eb:76:a7:06:78:86:
c7:b7:a1:35:90:4a:bd:19:f3:b2:3f:32:63:02:74:8f:7f:cf:
0e:4d:76:6d:f1:2b:3e:60:35:a8:a8:3b:72:20:10:64:99:c2:
b4:3a:37:3c:40:98:00:bc:a4:33:46:91:dd:d3:ad:89:1a:c3:
e2:e7:3a:29:6a:52:7b:18:b0:57:14:f2:21:9e:bb:2a:02:c8:
4c:16:90:a4:cb:79:f6:e9:be:b4:ff:ed:0f:d2:3d:f9:8d:b8:
d2:db:73:23:15:ab:ec:7f:02:a3:64:24:d7:b0:f0:39:75:5e:
4f:e9:84:1b:56:f9:c5:e6:49:7a:17:c8:e0:a0:a5:78:ad:ea:
50:ca:ef:0a
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUebCUlfi6LuMbjWTBRvrTyAeQbUUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNEMUYxQkYzQTE4REU1RkE1MTdBOThBRjk3QkMxMkRG
QUI5ODVFNzAeFw0yNDAzMTIyMDMwNTlaFw0yNTAzMTEyMDM1NTlaMDMxMTAvBgNV
BAMTKEFDMUI1NzhCRkMzNzJENTIwMjlCRkEyNjk0MzM4NzhBNTE4MjRFRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtkE3UyYmgRPn8yIdMtars/Tqv
2KPcQGzT8ZkYeHQu/4xyeAK+hGrIEG9oeJc7LSv5yiMu0EyMqPKCPRkqp+b1GvSt
GRSu5qqCCCVIRjm0OfpiVEdLjCvRiwZkoz6YYQAEkgZktlmlTbyOpi9uOaIM6s0Y
AiB4E11u1IQGESGjJzkmxuiJe/57oPUXEw3TQMy0kNIayzQVk9B3BpfC2ZnibrWl
LuMHFX2hAL9IDjwS9qAr51FjG9JdhEmpqyNWhzNN6ecRo9tZoMvli+SDfgeeMZDW
JQmIUT//fioSeOWz//aBw19OSzR+DVKqmkstO5vxJcXGW021O5TQtQYqxUxfAgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQUrBtXi/w3LVICm/omlDOHilGCTu0wHwYDVR0j
BBgwFoAUE9HxvzoY3l+lF6mK+XvBLfq5hecwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHhjTFdYQzdoZFFUa0pyY2FicFRxUDV3QTFoUnBIWnZmUUdVblhLZEFH
M1cvMC8xM0QxRjFCRjNBMThERTVGQTUxN0E5OEFGOTdCQzEyREZBQjk4NUU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEzRDFGMUJGM0ExOERFNUZB
NTE3QTk4QUY5N0JDMTJERkFCOTg1RTcuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR4Y0xXWEM3aGRRVGtKcmNhYnBUcVA1d0ExaFJwSFp2ZlFHVW5YS2RBRzNXLzAv
MzIzODMwMzQzYTM4Mzg2MzNhMzgzMDMwMzAzYTNhMmYzMzMzMmQzMzMzMjAzZDNl
MjAzNTMyMzgzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYHKAQIjIAwDQYJKoZIhvcNAQELBQADggEB
AJx6NEHKSKyWjEmIssHHKe4Rz4ovUw10goaeekWN7HiMS+4dlK3lrGoLN5ytP5Wc
tFU55041sUm19EKaJQ44PrxrRCVN3kxdn/yThn8fc6Sh006Dh5mKgyng5ajK9ncz
TiXeEcHixlVt6XRU4ceD7xFY5z1+YyL8W+t2pwZ4hse3oTWQSr0Z87I/MmMCdI9/
zw5Ndm3xKz5gNaioO3IgEGSZwrQ6NzxAmAC8pDNGkd3TrYkaw+LnOilqUnsYsFcU
8iGeuyoCyEwWkKTLefbpvrT/7Q/SPfmNuNLbcyMVq+x/AqNkJNew8Dl1Xk/phBtW
+cXmSXoXyOCgpXit6lDK7wo=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:49:33 2025 by rpki-client