![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/323830343a333464633a633030303a3a2f33352d3335203d3e20323635343835.roa
File: 323830343a333464633a633030303a3a2f33352d3335203d3e20323635343835.roa (raw, json)
Hash identifier: ZqG0RahnvvpTVNoeD5k6gpoKnUd3gYCND8Oq5poikYc=
Subject key identifier: 9F:7F:D5:7E:D2:09:40:9B:2E:33:94:0D:08:A7:45:EE:13:65:E6:EE
Certificate issuer: /CN=DB4775FF1387265B8F4B430B70351316A66B6D44
Certificate serial: 5EEEA2E9D66647B4E90CEB3C6B60DF375A7A9CC4
Authority key identifier: DB:47:75:FF:13:87:26:5B:8F:4B:43:0B:70:35:13:16:A6:6B:6D:44
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB4775FF1387265B8F4B430B70351316A66B6D44.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/323830343a333464633a633030303a3a2f33352d3335203d3e20323635343835.roa
Signing time: Fri 23 Feb 2024 23:40:58 +0000
ROA not before: Fri 23 Feb 2024 23:35:58 +0000
ROA not after: Fri 21 Feb 2025 23:40:58 +0000
asID: 265485
IP address blocks: 2804:34dc:c000::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:ee:a2:e9:d6:66:47:b4:e9:0c:eb:3c:6b:60:df:37:5a:7a:9c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB4775FF1387265B8F4B430B70351316A66B6D44
Validity
Not Before: Feb 23 23:35:58 2024 GMT
Not After : Feb 21 23:40:58 2025 GMT
Subject: CN=9F7FD57ED209409B2E33940D08A745EE1365E6EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:67:bf:12:45:85:15:b7:93:96:b5:f4:a2:e6:
30:64:c7:b9:08:d4:d7:aa:e0:42:79:f9:90:0d:7f:
8f:7f:6d:04:2a:15:22:c9:66:67:1c:a5:c2:c8:8c:
8c:49:e0:10:c1:0d:3a:eb:06:2e:85:f3:c4:c0:f3:
d6:cf:5b:a3:1c:d1:83:b7:ef:76:21:9f:e3:49:30:
36:e1:13:d1:d1:df:18:3c:e9:f0:dd:79:2c:ba:34:
49:60:10:c7:0f:d2:4c:94:78:06:c5:47:00:bf:96:
65:63:92:fb:cd:c5:6a:40:d7:ec:c6:cf:b3:57:f1:
dd:bf:11:9c:31:d9:0c:aa:76:2c:64:4b:f9:9d:0e:
59:76:d9:89:15:1f:c4:ca:07:cf:30:db:be:20:13:
2d:11:8e:15:35:e4:e0:d1:40:e0:00:76:9b:44:fd:
56:67:bd:81:a7:e5:a1:d9:05:f8:b1:de:1e:fc:24:
5b:28:a2:65:58:b9:52:c1:a5:c0:02:d6:93:3f:51:
7f:69:ed:6f:9b:d5:b8:d7:29:fb:c8:cb:00:6d:27:
10:2f:fe:95:30:d1:f6:49:26:4d:a1:7b:74:3a:2a:
45:02:b2:a6:bf:7c:d0:58:ea:63:f2:cb:59:5f:e6:
59:97:76:15:c3:31:9e:28:79:db:4a:c0:4d:f8:2f:
54:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7F:D5:7E:D2:09:40:9B:2E:33:94:0D:08:A7:45:EE:13:65:E6:EE
X509v3 Authority Key Identifier:
keyid:DB:47:75:FF:13:87:26:5B:8F:4B:43:0B:70:35:13:16:A6:6B:6D:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/DB4775FF1387265B8F4B430B70351316A66B6D44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB4775FF1387265B8F4B430B70351316A66B6D44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/323830343a333464633a633030303a3a2f33352d3335203d3e20323635343835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:34dc:c000::/35
Signature Algorithm: sha256WithRSAEncryption
85:3a:d1:7c:2b:36:4f:0d:1c:4b:ea:79:05:66:5c:db:78:fb:
98:b3:10:74:3e:98:38:56:7e:3c:95:ff:ff:4d:84:4d:b6:d5:
a5:77:70:a9:c5:de:0f:6d:7b:38:7c:06:5d:a0:0a:fe:e7:9c:
a2:87:71:4e:0c:26:b0:a7:1f:e7:38:ed:4c:86:fb:79:71:99:
ad:1d:b1:d7:5f:dd:bd:44:d0:9d:3f:93:7e:05:e6:2b:8e:18:
95:14:f8:11:b0:6a:b7:f1:f5:8a:41:bf:ca:b1:45:98:b0:e4:
5e:13:ad:fc:b9:14:ff:39:ba:e3:63:b0:bb:d6:c1:87:64:90:
9d:d8:ab:b3:ff:db:76:db:29:4f:16:c1:8c:58:78:80:6d:74:
65:df:a0:16:1e:82:aa:1a:db:b7:d2:ba:a4:db:7c:11:14:bf:
ec:c9:87:40:68:2e:fa:1f:5f:6a:f9:d3:9b:cc:22:b1:6a:46:
5d:74:46:ac:bd:ab:29:09:0c:ba:f9:6d:59:38:30:74:8d:99:
47:46:63:42:04:f8:a0:2c:68:07:90:ad:f9:b2:fa:64:66:18:
64:7b:85:be:af:df:57:e9:4b:14:fb:d3:bf:ab:38:3f:53:92:
51:f1:6b:31:aa:9f:3f:e0:e8:61:f5:fa:24:20:85:d7:70:d6:
75:a4:39:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:01 2025 by rpki-client