![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/323830343a313139633a3a2f33322d3634203d3e20323633343237.roa
File: 323830343a313139633a3a2f33322d3634203d3e20323633343237.roa (raw, json)
Hash identifier: VIz3Y11mmGSHfCRovTTJBi2CULSYvJ4dGRqjZA8SYVw=
Subject key identifier: 04:43:00:0E:17:20:D5:7E:F4:C3:90:50:DD:23:38:3B:81:D3:AD:32
Certificate issuer: /CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
Certificate serial: 635015F3EDDB4D01A0B49D7EA4B328CBA8E8E509
Authority key identifier: BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/323830343a313139633a3a2f33322d3634203d3e20323633343237.roa
Signing time: Sat 13 May 2023 14:29:56 +0000
ROA not before: Sat 13 May 2023 14:24:56 +0000
ROA not after: Sat 11 May 2024 14:29:56 +0000
asID: 263427
IP address blocks: 2804:119c::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:50:15:f3:ed:db:4d:01:a0:b4:9d:7e:a4:b3:28:cb:a8:e8:e5:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
Validity
Not Before: May 13 14:24:56 2023 GMT
Not After : May 11 14:29:56 2024 GMT
Subject: CN=0443000E1720D57EF4C39050DD23383B81D3AD32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:41:fd:fd:34:f5:6e:60:17:4a:88:c9:f9:a8:
38:f9:93:15:42:0b:20:dd:76:01:a0:7c:d5:b9:42:
b0:76:c9:d1:39:c5:28:d5:fb:9f:6d:ba:a2:2c:4b:
e1:fb:24:8b:b1:c6:35:eb:2b:fd:d8:0e:25:ae:1f:
d6:11:f5:45:4d:fc:2d:3b:f7:0c:d5:32:76:b3:bd:
79:ae:d5:eb:21:3b:04:6c:ef:11:20:82:37:6b:2a:
72:05:a1:1b:0b:52:87:39:2b:5b:3e:72:2b:8a:56:
bd:18:e2:0d:2c:27:49:08:f7:1d:7c:f2:ed:44:18:
a5:e4:97:4a:4d:ce:b6:7b:10:58:37:e4:ee:5d:a0:
e2:99:5a:79:21:ad:35:b7:fa:58:a0:0d:ec:ac:56:
df:69:d4:49:6c:cf:dc:24:2d:a6:fd:cd:6c:f7:5a:
1e:ad:3c:64:d6:2c:72:dc:01:13:f0:df:ea:5d:34:
c2:3a:72:43:b8:85:33:af:a8:1b:22:33:a4:97:11:
2d:e2:fc:7d:63:46:85:70:9c:35:3d:0b:65:b9:12:
18:53:6b:e5:07:66:ba:e2:25:ea:ca:04:18:ad:4b:
99:32:4a:c3:b3:12:50:ff:88:28:54:a3:0a:1a:b8:
91:3a:e6:5c:09:48:e2:62:d1:1d:f5:ad:0b:7f:b1:
ba:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:43:00:0E:17:20:D5:7E:F4:C3:90:50:DD:23:38:3B:81:D3:AD:32
X509v3 Authority Key Identifier:
keyid:BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/323830343a313139633a3a2f33322d3634203d3e20323633343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:119c::/32
Signature Algorithm: sha256WithRSAEncryption
d7:46:fc:4f:24:30:c9:bc:f3:23:98:dc:61:82:8b:ec:14:ea:
5e:18:f2:42:b4:58:c5:51:c8:25:6c:b5:55:ec:73:e7:de:14:
8e:b2:e5:02:cf:ca:3a:99:a4:d9:c2:fe:fc:4f:7c:cd:4c:e3:
1c:40:e3:cf:b5:92:8d:b9:17:6d:7c:d5:ac:fa:83:0a:64:1d:
a8:eb:be:59:47:cd:36:7e:6c:19:d7:c3:fc:73:7d:6c:d6:bd:
d7:b1:cf:d5:f8:09:0e:3a:13:45:15:5c:b7:8b:25:40:74:31:
bf:3d:a6:ec:49:5a:75:cb:5c:20:ef:f3:23:11:49:a3:dd:1e:
bd:ad:93:54:e7:3b:87:7f:0c:c2:b4:b0:a6:72:e4:31:e6:83:
1d:c3:a2:7f:c8:c4:11:56:7c:d7:70:87:1c:b0:df:62:8d:76:
d8:fc:68:e4:c8:aa:b1:13:f7:4b:5a:75:3a:be:29:fc:62:a5:
3b:ec:f4:f7:88:63:c1:74:b8:74:85:90:34:39:a1:d9:71:a3:
66:b5:29:c2:f7:62:35:fe:1d:9f:a1:f2:ff:b4:1a:ea:21:d6:
85:ca:de:56:c8:1a:8c:4d:47:d1:ee:fb:36:db:65:31:fa:3e:
89:dc:66:00:f2:a4:39:6d:f1:5d:c7:aa:89:3c:21:85:43:b0:
81:51:9c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:16:20 2025 by rpki-client