![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/323830343a353365633a383030303a3a2f33342d3334203d3e20323638363136.roa
File: 323830343a353365633a383030303a3a2f33342d3334203d3e20323638363136.roa (raw, json)
Hash identifier: R+OLz7jK8OZzLkP3FCfVCdu5ixkITsprgNjlN1Rcf6E=
Subject key identifier: 59:6F:62:3A:A3:65:C7:20:BE:16:D7:1C:F1:FC:F0:C6:0B:2A:5B:64
Certificate issuer: /CN=420734A528D0DD1EA09F6BB591E3B023EDB9EDDA
Certificate serial: 704DEF3E20E967E992D0FED15AF1E24FCCBEADB2
Authority key identifier: 42:07:34:A5:28:D0:DD:1E:A0:9F:6B:B5:91:E3:B0:23:ED:B9:ED:DA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/420734A528D0DD1EA09F6BB591E3B023EDB9EDDA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/323830343a353365633a383030303a3a2f33342d3334203d3e20323638363136.roa
Signing time: Tue 05 Sep 2023 14:04:36 +0000
ROA not before: Tue 05 Sep 2023 13:59:36 +0000
ROA not after: Tue 03 Sep 2024 14:04:36 +0000
asID: 268616
IP address blocks: 2804:53ec:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:4d:ef:3e:20:e9:67:e9:92:d0:fe:d1:5a:f1:e2:4f:cc:be:ad:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420734A528D0DD1EA09F6BB591E3B023EDB9EDDA
Validity
Not Before: Sep 5 13:59:36 2023 GMT
Not After : Sep 3 14:04:36 2024 GMT
Subject: CN=596F623AA365C720BE16D71CF1FCF0C60B2A5B64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:24:38:a2:1a:b4:22:b2:a0:a5:1e:05:b2:18:
d2:54:a3:33:36:8d:be:b8:8a:40:31:a6:13:32:28:
04:b6:73:0a:b4:ce:cd:3b:0d:f0:18:eb:f5:82:c2:
4f:ef:9a:24:f9:f1:8e:f6:64:0f:6b:c7:43:ff:4d:
00:f7:cb:da:88:35:00:46:f5:75:9f:09:e0:4e:cd:
62:86:69:a9:6b:37:fb:53:a1:90:6d:60:99:3f:19:
c4:a1:d9:3b:8c:6b:0d:e0:22:e7:8a:42:09:d6:3a:
fb:46:3f:97:d1:8c:0b:2f:ad:9f:e4:c7:05:af:97:
17:19:76:02:aa:74:48:df:46:2b:ad:13:54:58:06:
95:07:ea:39:de:44:74:3b:73:5e:4a:69:fb:fb:48:
b2:bf:70:43:fc:52:56:b3:e7:7a:20:ce:13:c8:7b:
8f:d1:99:7a:d1:59:67:ae:d0:a5:f0:c8:56:60:e1:
45:6c:40:b7:88:c6:09:da:22:0d:7a:d5:78:3a:50:
81:77:2c:05:67:b8:0d:9a:d3:9e:07:63:23:6c:cd:
35:49:66:95:b6:17:50:d0:bd:fa:3e:f8:5b:22:f2:
6e:a5:30:37:63:1c:8f:fb:a8:2b:dc:64:83:59:46:
a6:cd:92:20:6c:40:1f:53:31:a0:f4:a2:09:6d:0f:
58:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6F:62:3A:A3:65:C7:20:BE:16:D7:1C:F1:FC:F0:C6:0B:2A:5B:64
X509v3 Authority Key Identifier:
keyid:42:07:34:A5:28:D0:DD:1E:A0:9F:6B:B5:91:E3:B0:23:ED:B9:ED:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/420734A528D0DD1EA09F6BB591E3B023EDB9EDDA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/420734A528D0DD1EA09F6BB591E3B023EDB9EDDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/323830343a353365633a383030303a3a2f33342d3334203d3e20323638363136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:53ec:8000::/34
Signature Algorithm: sha256WithRSAEncryption
75:ca:08:2e:9e:38:ad:a3:80:0e:5f:cb:9f:9c:ec:f2:01:d5:
94:d3:30:72:95:27:0e:2e:13:7f:0c:a1:1d:ca:ce:4e:82:1b:
03:e5:94:51:ac:7c:d0:d7:56:b5:4f:a9:a2:d3:67:f7:42:bc:
2c:0e:0f:2e:09:ca:b9:1b:2a:85:a2:f7:c7:6a:fd:c3:0a:67:
11:bd:93:15:d3:41:44:28:d4:d6:f1:14:ed:2d:ed:b7:53:0f:
03:31:46:5e:69:a5:63:59:52:0a:d6:38:1d:69:37:4f:f4:10:
27:73:7e:98:2b:66:53:59:3c:d9:d1:3d:d5:12:fa:c9:c0:51:
0f:d3:46:51:60:d1:9e:c7:2d:5d:ec:4f:90:be:fc:2e:11:56:
17:a3:15:6c:68:fc:84:00:1d:44:dc:e2:e8:92:2c:e1:96:c6:
d0:82:31:f4:88:91:c9:e8:18:d9:6e:c8:ff:b7:c5:b3:86:41:
6e:ba:78:67:e5:08:e7:7f:79:ab:9d:1f:b0:e2:03:84:b9:18:
86:67:b4:5f:24:a6:65:e2:81:2e:c6:30:f8:38:b0:e5:b6:09:
45:c1:94:48:ad:92:74:07:71:86:94:b1:42:68:bc:aa:4e:38:
3d:68:6b:9b:4a:e6:dc:9b:c6:0c:db:2c:7f:fc:49:5c:45:11:
52:69:a1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:24:17 2025 by rpki-client