![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/323830343a3737343a613030303a3a2f34302d3430203d3e203532383538.roa
File: 323830343a3737343a613030303a3a2f34302d3430203d3e203532383538.roa (raw, json)
Hash identifier: QvgHcXTC25U0wfJIg4okwdWsX2zrH2gab7pM4KNrBYc=
Subject key identifier: 13:48:E9:84:8D:1F:62:F4:04:00:98:59:B1:B9:91:1C:48:03:7C:04
Certificate issuer: /CN=3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757
Certificate serial: 24151DA8FDF838911B6D25E0A94E6E92B0B60C7B
Authority key identifier: 3F:89:ED:2D:E6:A8:CF:76:4F:D3:D0:48:DA:5C:4C:6A:C4:83:D7:57
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/323830343a3737343a613030303a3a2f34302d3430203d3e203532383538.roa
Signing time: Fri 08 Mar 2024 19:09:49 +0000
ROA not before: Fri 08 Mar 2024 19:04:49 +0000
ROA not after: Fri 07 Mar 2025 19:09:49 +0000
asID: 52858
IP address blocks: 2804:774:a000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:15:1d:a8:fd:f8:38:91:1b:6d:25:e0:a9:4e:6e:92:b0:b6:0c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757
Validity
Not Before: Mar 8 19:04:49 2024 GMT
Not After : Mar 7 19:09:49 2025 GMT
Subject: CN=1348E9848D1F62F404009859B1B9911C48037C04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:53:b1:9e:18:7a:28:17:99:01:9b:8a:2e:d5:
8a:59:cb:57:8a:32:7b:e9:9f:88:6b:a0:ca:50:a7:
38:b5:67:16:92:da:28:02:97:8a:b6:fb:05:75:45:
ba:ef:f7:ba:5c:43:82:52:e3:b2:d6:59:5e:fd:6f:
40:c3:bf:02:5f:2f:c2:3e:1a:9e:00:e4:8a:ab:e5:
57:65:a0:58:ae:d8:79:e3:04:5b:1c:b9:fe:03:6d:
d8:e0:e1:25:f0:32:ad:11:63:5b:10:4d:69:ad:16:
61:55:4b:50:1e:0b:1d:b0:ce:df:bd:89:78:0f:0a:
35:c7:d0:1e:5d:96:ef:3e:ff:fe:62:4b:22:07:44:
a5:cb:ef:40:e3:9c:a8:87:3c:ed:35:df:3f:0c:82:
21:93:c0:d0:5f:ed:7f:59:ae:6d:1c:50:f6:ab:35:
7b:2a:10:21:5c:1a:70:3e:b9:0e:c8:54:ac:44:63:
a8:e0:c4:bd:42:6e:56:e4:fb:c9:04:27:1e:f9:b1:
59:00:cc:af:17:d3:ce:69:9a:0f:2c:e2:3e:fd:44:
1a:a0:86:9a:98:13:3a:f4:b3:56:a1:be:80:3f:ad:
75:ef:4b:0b:b1:2c:be:df:17:d9:5e:b0:7b:bc:78:
ad:f9:69:22:8d:ec:ee:7f:b1:77:6c:4d:52:ac:04:
fa:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:48:E9:84:8D:1F:62:F4:04:00:98:59:B1:B9:91:1C:48:03:7C:04
X509v3 Authority Key Identifier:
keyid:3F:89:ED:2D:E6:A8:CF:76:4F:D3:D0:48:DA:5C:4C:6A:C4:83:D7:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/323830343a3737343a613030303a3a2f34302d3430203d3e203532383538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:774:a000::/40
Signature Algorithm: sha256WithRSAEncryption
16:69:b9:fb:5d:a5:aa:d9:10:36:b9:bf:ad:e2:76:7b:12:27:
80:4d:7e:01:28:ea:b0:8f:e9:31:4d:11:e8:74:5c:9e:8c:52:
de:a8:53:da:95:a6:6e:92:60:6b:9b:a6:99:2f:bc:e6:20:44:
37:0e:b0:12:94:c9:c6:b4:de:46:d5:98:3b:4a:c8:86:5a:4e:
e1:cd:1a:b8:6b:8f:0b:96:0c:ca:17:5e:36:a2:96:61:75:fe:
e5:46:4c:e0:19:8d:ea:35:8b:2f:80:ce:6e:c9:f4:2c:f5:ce:
15:d4:eb:d5:7e:11:37:56:c0:a2:3d:be:44:86:82:a5:dc:a3:
ed:15:3a:5c:f1:7d:e6:90:8b:b1:db:21:88:7a:8c:a3:6b:8f:
b3:a2:60:84:45:80:79:7b:26:6f:6c:93:92:9c:ae:db:91:1b:
ee:e5:b3:04:6b:c6:31:eb:ca:d2:06:af:5a:eb:52:9a:84:ac:
72:90:0e:f8:c1:b8:93:38:db:47:f1:33:85:92:55:8c:56:13:
4a:77:b4:61:9a:61:1d:19:4d:b1:b2:09:01:f5:5a:c9:3e:a1:
48:b3:84:2e:52:4e:82:47:bb:bb:64:46:a0:fe:56:80:26:c8:
eb:60:08:d7:d3:21:f4:d5:9a:be:6f:b2:ca:88:0f:44:fb:08:
91:47:b2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:53 2025 by rpki-client