![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/323830343a333464633a323030303a3a2f33352d3335203d3e20323635343835.roa
File: 323830343a333464633a323030303a3a2f33352d3335203d3e20323635343835.roa (raw, json)
Hash identifier: iBgdho6RV+hKsHMwHu5TfA0bKSgSwXAK23sG7WC2K0s=
Subject key identifier: 80:EB:F5:64:FA:E1:38:26:86:69:B8:96:02:21:CB:BE:C3:9A:B1:87
Certificate issuer: /CN=DB4775FF1387265B8F4B430B70351316A66B6D44
Certificate serial: 53FB2CF81E1B40390C50B15B8F27E37ABC8CFF12
Authority key identifier: DB:47:75:FF:13:87:26:5B:8F:4B:43:0B:70:35:13:16:A6:6B:6D:44
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB4775FF1387265B8F4B430B70351316A66B6D44.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/323830343a333464633a323030303a3a2f33352d3335203d3e20323635343835.roa
Signing time: Fri 23 Feb 2024 23:40:59 +0000
ROA not before: Fri 23 Feb 2024 23:35:59 +0000
ROA not after: Fri 21 Feb 2025 23:40:59 +0000
asID: 265485
IP address blocks: 2804:34dc:2000::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:fb:2c:f8:1e:1b:40:39:0c:50:b1:5b:8f:27:e3:7a:bc:8c:ff:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB4775FF1387265B8F4B430B70351316A66B6D44
Validity
Not Before: Feb 23 23:35:59 2024 GMT
Not After : Feb 21 23:40:59 2025 GMT
Subject: CN=80EBF564FAE138268669B8960221CBBEC39AB187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e4:85:e9:67:62:ae:21:8a:a4:c7:7c:c8:1c:
a1:0a:c6:e1:d3:c0:0b:e8:52:49:44:31:29:6f:ce:
da:87:64:0d:61:ae:87:a8:91:2d:33:89:fb:35:7b:
7a:78:0f:13:f7:81:ef:6e:8d:ba:20:e7:e8:7e:f8:
65:08:14:a9:09:09:91:92:d3:43:d3:70:76:d6:1c:
3f:f6:b2:f9:30:84:85:5b:d0:bb:c1:82:68:3c:46:
16:b6:74:19:9b:d5:29:29:b7:55:d9:0e:95:34:ee:
f4:92:fa:6d:6b:6d:93:43:1c:8f:f9:a1:18:71:12:
c1:98:2a:27:60:db:71:b6:0d:42:58:29:7a:40:df:
7d:b2:08:7b:b9:4d:04:9a:d3:25:66:23:50:7d:9f:
f5:42:5d:ab:1b:83:f9:70:aa:d2:7e:d9:d3:35:bf:
04:15:53:86:da:51:e8:b6:89:a1:4e:ec:41:2b:76:
96:e7:c0:04:c4:b3:51:34:0d:17:d3:31:27:ca:95:
b6:37:e7:24:ef:5a:66:2c:57:0b:fc:94:3d:d8:d7:
6d:0a:4f:11:9e:ee:b8:c8:85:56:fc:4b:5a:30:b4:
b4:ac:59:9a:ca:68:e1:24:15:08:ed:51:88:b6:5d:
ff:39:9e:38:63:10:56:3f:41:f5:c5:a6:8c:d6:31:
2b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EB:F5:64:FA:E1:38:26:86:69:B8:96:02:21:CB:BE:C3:9A:B1:87
X509v3 Authority Key Identifier:
keyid:DB:47:75:FF:13:87:26:5B:8F:4B:43:0B:70:35:13:16:A6:6B:6D:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/DB4775FF1387265B8F4B430B70351316A66B6D44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB4775FF1387265B8F4B430B70351316A66B6D44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/323830343a333464633a323030303a3a2f33352d3335203d3e20323635343835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:34dc:2000::/35
Signature Algorithm: sha256WithRSAEncryption
ad:50:c4:1d:62:7a:f8:0c:5a:7e:ac:27:6a:f3:7d:71:29:04:
2a:29:3d:45:a1:dc:11:03:20:c9:e2:b0:7e:50:45:89:f7:cc:
bc:3f:ef:28:35:e1:6d:b2:ee:38:01:6c:6d:b7:c8:05:e6:be:
5a:2b:94:ca:75:97:da:58:59:e0:2e:77:b3:0a:c0:e1:c9:8c:
0b:5f:47:a5:e6:bf:eb:0e:ba:91:48:64:ca:12:d0:24:a3:53:
7b:00:dc:f1:ff:ce:da:b4:6b:4a:2e:68:42:0f:2e:b0:4b:81:
2c:80:e9:7c:46:6c:52:88:d7:3e:3a:a9:1d:a7:39:dc:13:7f:
52:3b:b8:d2:56:75:a2:b8:94:1d:ab:4e:a1:2b:40:ee:65:f3:
c4:4c:3b:58:3a:b2:46:4b:b1:3e:a9:f8:94:c1:62:23:c3:6e:
3c:0a:fd:9d:f0:9b:3c:31:8c:07:31:f7:86:e1:c8:33:13:88:
8a:2f:d4:3f:fe:60:fd:8e:19:42:4f:80:1a:49:d7:9c:37:12:
69:a0:9e:86:e8:47:b4:11:96:c1:31:64:2b:f5:90:bc:0a:5e:
67:ee:d9:96:cd:51:e3:dc:e6:c7:96:4e:10:b7:7e:2a:99:0d:
e2:bd:68:c7:a1:ec:06:6d:31:4d:6b:ec:2f:a6:67:c2:1a:6a:
6a:7f:5d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:18 2025 by rpki-client