![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/1/323830343a336465633a3a2f33332d3333203d3e20323636353633.roa
File: 323830343a336465633a3a2f33332d3333203d3e20323636353633.roa (raw, json)
Hash identifier: c5oBYW0s1hSfIY8L36WCy3KslD3kK1t/zf29ib76t1Q=
Subject key identifier: 71:B9:AF:3B:DB:93:27:7C:DD:E7:EC:C3:D0:87:6A:16:DD:31:9A:B0
Certificate issuer: /CN=2C8F79E76852475DDED25004F5D935390FAB63C4
Certificate serial: 7ACEC9152A1ACB1EE846107DFCED6506CB349658
Authority key identifier: 2C:8F:79:E7:68:52:47:5D:DE:D2:50:04:F5:D9:35:39:0F:AB:63:C4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C8F79E76852475DDED25004F5D935390FAB63C4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/1/323830343a336465633a3a2f33332d3333203d3e20323636353633.roa
Signing time: Thu 20 Apr 2023 13:55:04 +0000
ROA not before: Thu 20 Apr 2023 13:50:04 +0000
ROA not after: Thu 18 Apr 2024 13:55:04 +0000
asID: 266563
IP address blocks: 2804:3dec::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:ce:c9:15:2a:1a:cb:1e:e8:46:10:7d:fc:ed:65:06:cb:34:96:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C8F79E76852475DDED25004F5D935390FAB63C4
Validity
Not Before: Apr 20 13:50:04 2023 GMT
Not After : Apr 18 13:55:04 2024 GMT
Subject: CN=71B9AF3BDB93277CDDE7ECC3D0876A16DD319AB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:83:89:de:26:1e:89:dc:87:1b:58:ed:c4:d5:
69:23:dd:fd:f9:d4:dd:29:8e:47:8c:a7:c0:87:b3:
d8:fe:b0:60:d5:07:2d:58:d2:94:05:f8:9b:bc:1e:
0b:45:94:04:1e:d5:bd:7a:af:d0:b9:8b:43:65:c9:
03:83:90:ca:e6:ad:f5:e9:2e:18:24:89:e5:1b:8e:
a3:1e:60:84:2a:32:21:8f:9d:0d:c0:b2:89:c5:e7:
9d:0a:02:39:54:fc:27:7e:84:b2:ac:8d:b1:2e:ed:
d7:6c:6e:5a:dc:d2:64:fa:cc:60:ff:60:31:e1:7b:
02:cb:45:c5:23:e7:51:a1:56:da:5a:eb:b1:49:e7:
f8:7e:a0:4b:1f:62:d2:f8:eb:94:13:c1:61:46:0c:
5e:76:1f:14:2c:da:c3:2e:ca:80:ab:2b:cc:db:8f:
a1:5f:45:4f:80:45:2b:56:4b:7a:0e:ae:14:7f:9f:
d0:5b:3d:39:ff:47:d2:51:0b:a7:07:8b:b0:c8:b2:
69:3b:0a:1e:eb:4d:7f:27:9e:04:6c:d0:9c:c5:90:
3a:68:35:32:85:eb:03:cd:83:a8:4b:f3:a4:46:08:
8c:c5:96:6d:c5:d5:1e:e2:3a:7a:85:65:f2:21:9a:
2b:6c:55:9e:b9:0f:b8:41:1b:1a:e8:67:f4:c4:b0:
24:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B9:AF:3B:DB:93:27:7C:DD:E7:EC:C3:D0:87:6A:16:DD:31:9A:B0
X509v3 Authority Key Identifier:
keyid:2C:8F:79:E7:68:52:47:5D:DE:D2:50:04:F5:D9:35:39:0F:AB:63:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/1/2C8F79E76852475DDED25004F5D935390FAB63C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C8F79E76852475DDED25004F5D935390FAB63C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/1/323830343a336465633a3a2f33332d3333203d3e20323636353633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3dec::/33
Signature Algorithm: sha256WithRSAEncryption
45:48:c1:44:07:7f:f5:7f:8a:c0:4a:08:d4:3a:4f:18:b1:a2:
9a:b6:6d:f3:3e:d1:06:61:26:a0:1c:6a:90:8c:d2:05:4d:fb:
f2:23:ce:0b:67:ae:e7:4a:7c:23:e8:00:6f:23:05:79:be:5e:
ce:62:37:1a:cd:b3:c2:ca:80:8c:a0:a4:d6:ef:69:f9:28:8f:
e3:6d:b7:dd:5c:f2:71:0c:fc:17:42:79:ff:5d:0d:2a:e5:38:
84:7d:c7:f2:76:00:b0:f6:03:cd:87:68:9f:67:72:6d:6a:56:
f8:13:94:d0:99:89:06:4b:e7:1e:d5:69:e8:dc:a2:0c:9d:fc:
7e:03:ca:8e:9f:6e:ad:d3:ff:b4:83:6f:9b:e7:86:77:ba:09:
de:8d:9a:76:f2:ef:8f:b7:a7:9b:1d:e4:a3:72:bf:3b:65:5b:
5a:e7:99:26:4f:da:5e:ed:b7:64:8f:aa:6c:d9:5c:42:51:58:
fd:77:91:7b:a2:3b:af:d6:20:7f:ab:4b:e7:89:20:b1:cd:3b:
61:03:5d:91:19:f3:8d:78:fd:a0:1e:ec:47:93:f8:8e:d4:55:
91:47:c1:06:1d:08:e5:3f:db:53:df:eb:48:4a:e6:61:68:da:
b9:56:26:a5:e0:d0:4a:3e:48:66:fd:16:98:bc:36:57:fb:18:
36:0f:37:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:42:34 2025 by rpki-client