![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/323830343a333464633a363030303a3a2f33352d3335203d3e20323635343835.roa
File: 323830343a333464633a363030303a3a2f33352d3335203d3e20323635343835.roa (raw, json)
Hash identifier: LG0hJALUEjBJkUcsR43TQTHHD8Do6xbNvHyOcanoEwU=
Subject key identifier: DB:89:11:C6:4D:C0:BD:E9:53:BD:44:B0:E0:8D:F4:5E:26:72:15:8D
Certificate issuer: /CN=DB4775FF1387265B8F4B430B70351316A66B6D44
Certificate serial: 26117EE70F0F68A388DDCA982F4966C31E9C7A70
Authority key identifier: DB:47:75:FF:13:87:26:5B:8F:4B:43:0B:70:35:13:16:A6:6B:6D:44
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB4775FF1387265B8F4B430B70351316A66B6D44.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/323830343a333464633a363030303a3a2f33352d3335203d3e20323635343835.roa
Signing time: Fri 23 Feb 2024 23:40:58 +0000
ROA not before: Fri 23 Feb 2024 23:35:58 +0000
ROA not after: Fri 21 Feb 2025 23:40:58 +0000
asID: 265485
IP address blocks: 2804:34dc:6000::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:11:7e:e7:0f:0f:68:a3:88:dd:ca:98:2f:49:66:c3:1e:9c:7a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB4775FF1387265B8F4B430B70351316A66B6D44
Validity
Not Before: Feb 23 23:35:58 2024 GMT
Not After : Feb 21 23:40:58 2025 GMT
Subject: CN=DB8911C64DC0BDE953BD44B0E08DF45E2672158D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:20:aa:20:a7:50:5b:ff:74:af:0a:64:5c:17:
78:c7:be:83:dd:cd:86:33:48:13:10:61:12:f2:6e:
fc:76:70:07:92:fa:03:f4:37:96:f8:09:bc:9f:1c:
6c:47:e8:37:4c:e0:77:04:fc:10:94:bb:93:e6:e8:
75:8e:1a:a7:fc:45:ed:65:66:cf:ab:86:8c:ed:60:
5a:4e:78:4b:e7:8b:de:75:3d:83:eb:f3:cc:67:ee:
4f:33:d7:7a:71:83:cb:d7:e6:1f:ce:8b:c3:00:ee:
56:94:55:9e:de:0f:b2:a0:83:8e:c2:4e:5f:d2:f1:
57:75:a1:3d:60:e3:aa:aa:00:60:4b:bc:15:62:3d:
8a:b2:5e:c9:db:75:eb:60:d1:24:84:cf:01:ee:b1:
db:b1:e6:3a:36:41:4f:bd:de:bb:66:2a:72:9f:34:
6d:a8:0c:32:fe:12:d4:69:f3:14:c3:5b:a6:ff:7d:
a0:a1:6b:02:65:c1:f3:63:8b:77:01:ff:aa:16:03:
3e:47:f3:e1:88:fa:19:4c:00:6b:7f:6a:6f:27:32:
07:e0:a6:11:9d:9e:24:a1:e4:6c:94:1a:c6:e5:9e:
c1:65:c4:85:2b:73:fd:73:3c:c9:ee:47:28:2e:2a:
a2:f7:3c:a2:e2:da:84:c1:bb:eb:56:22:6f:29:d9:
47:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:89:11:C6:4D:C0:BD:E9:53:BD:44:B0:E0:8D:F4:5E:26:72:15:8D
X509v3 Authority Key Identifier:
keyid:DB:47:75:FF:13:87:26:5B:8F:4B:43:0B:70:35:13:16:A6:6B:6D:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/DB4775FF1387265B8F4B430B70351316A66B6D44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB4775FF1387265B8F4B430B70351316A66B6D44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/323830343a333464633a363030303a3a2f33352d3335203d3e20323635343835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:34dc:6000::/35
Signature Algorithm: sha256WithRSAEncryption
94:9f:cd:33:3a:69:a7:f7:4a:64:26:d1:54:8c:f1:1b:5c:ec:
19:f4:dc:40:33:e0:f9:9a:af:6b:fa:de:f6:bd:39:be:05:3e:
03:70:f9:3c:cc:86:7b:1e:79:15:41:06:94:3a:f6:30:38:16:
0f:46:f6:20:d6:79:38:9a:01:a8:42:79:e6:7a:5e:b7:34:f2:
03:a1:83:a3:42:a6:3d:2b:bd:73:e0:46:26:71:1f:61:ef:a5:
8e:4b:f0:77:fa:96:3c:f4:6b:fe:ba:6d:39:22:6c:b0:aa:b4:
f4:a9:7a:46:b0:ff:ce:ec:5c:ef:7f:c8:b7:a3:33:f8:d1:24:
cb:cb:ad:c3:59:ca:9d:62:ca:fd:fc:c5:2e:2e:3f:33:11:8b:
5c:fe:50:50:4c:ba:a1:a9:0f:4b:d1:2c:04:a3:67:51:08:78:
98:06:5c:20:ab:b0:33:52:2b:2b:76:4b:ac:c8:f0:53:1d:21:
ea:6b:80:78:54:e4:3d:f3:fa:df:9a:d2:ae:98:28:61:64:97:
3e:e4:fa:c8:d5:1e:bc:3c:25:6f:69:01:79:7f:87:c8:64:a5:
85:ce:12:40:d6:c0:11:9b:c9:a6:cf:da:aa:5a:90:91:bd:05:
01:06:1b:0b:03:fa:75:77:cc:c0:e9:0a:7a:85:74:72:51:b2:
c4:87:14:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:33 2025 by rpki-client