![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/323830343a353461303a323230303a3a2f34302d3430203d3e203237363838.roa
File: 323830343a353461303a323230303a3a2f34302d3430203d3e203237363838.roa (raw, json)
Hash identifier: msTuRH7cK0MQtUQBJWKWm+KQjGUDVP4jJvgee4yy3yY=
Subject key identifier: 25:CD:6B:FC:92:6A:61:8B:67:12:FC:C4:CE:41:E6:BF:0E:49:F9:C2
Certificate issuer: /CN=AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67
Certificate serial: 4E6CDEC1526A1ECC70426407DCB4E6206518890D
Authority key identifier: AA:49:B8:B3:EB:5A:75:5B:D4:A1:8B:3F:5B:C2:4D:7C:2A:E3:EC:67
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/323830343a353461303a323230303a3a2f34302d3430203d3e203237363838.roa
Signing time: Fri 15 Jul 2022 21:08:03 +0000
ROA not before: Fri 15 Jul 2022 21:03:03 +0000
ROA not after: Fri 14 Jul 2023 21:08:03 +0000
asID: 27688
IP address blocks: 2804:54a0:2200::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:6c:de:c1:52:6a:1e:cc:70:42:64:07:dc:b4:e6:20:65:18:89:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67
Validity
Not Before: Jul 15 21:03:03 2022 GMT
Not After : Jul 14 21:08:03 2023 GMT
Subject: CN=25CD6BFC926A618B6712FCC4CE41E6BF0E49F9C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:23:9c:fc:b7:9e:b9:ce:61:85:62:9d:60:60:
11:07:46:b7:3c:d0:ba:ac:36:d3:d9:6e:31:4d:1e:
a7:16:65:be:2a:1e:98:2f:e1:f0:15:fa:d3:06:6c:
a0:b1:64:6e:b6:17:ec:ba:a6:b8:5e:fa:24:b9:93:
c8:da:59:8a:83:97:49:d3:84:8d:51:ed:40:f5:1c:
77:92:97:ed:77:b8:7e:49:65:76:5c:07:4b:14:3a:
a3:06:36:d4:33:99:1a:c9:dc:8d:f6:46:a0:75:b0:
df:18:47:85:31:70:ec:54:69:31:7d:aa:19:2b:b5:
6e:f3:ec:64:79:6d:7f:a2:62:33:45:9a:8f:37:36:
08:f8:8c:64:2b:32:9f:b1:2c:e1:4f:37:88:07:5b:
81:46:8c:dd:27:50:23:c4:75:c3:fd:b7:9f:70:62:
cd:df:79:e3:ce:85:37:0b:cd:da:f5:0b:d9:07:00:
9c:1c:14:c3:96:4e:29:6c:6b:32:be:d4:f3:d8:73:
32:10:bb:bf:a9:d7:a1:eb:3d:b9:06:80:ef:45:16:
94:9d:e7:06:4e:71:e5:dd:e7:fb:6d:ae:80:b9:01:
10:bd:25:7c:d7:23:2e:27:48:c1:37:58:78:49:81:
ea:5b:c5:53:06:3f:0b:36:4c:e2:44:98:fc:c6:5c:
77:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CD:6B:FC:92:6A:61:8B:67:12:FC:C4:CE:41:E6:BF:0E:49:F9:C2
X509v3 Authority Key Identifier:
keyid:AA:49:B8:B3:EB:5A:75:5B:D4:A1:8B:3F:5B:C2:4D:7C:2A:E3:EC:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/323830343a353461303a323230303a3a2f34302d3430203d3e203237363838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:54a0:2200::/40
Signature Algorithm: sha256WithRSAEncryption
6f:23:d6:21:ab:78:2b:18:1d:77:b5:2e:40:9a:b9:e4:0c:0a:
1a:05:d8:86:34:2b:4d:23:16:df:b4:7b:63:64:31:5c:bc:d5:
61:d6:fe:b4:88:ad:42:af:95:37:a3:9f:78:39:3d:cc:46:16:
a6:f0:67:4a:26:d7:46:62:83:91:1e:7f:0e:2d:bd:91:c7:e4:
4c:12:de:82:dc:fd:09:16:c1:de:bf:f6:47:ce:70:0d:55:4e:
b2:de:27:17:f5:a1:34:a6:a2:21:95:9f:9d:60:20:ab:8a:1a:
9f:f9:8f:e0:0d:49:b4:7a:c6:91:3a:32:87:7e:5d:d2:bc:89:
a0:4a:82:ae:84:0a:95:11:05:89:72:61:df:6a:92:29:d9:7c:
22:69:4c:5d:e2:ac:e6:9e:f1:f1:0e:f6:e8:f0:f8:1d:e8:78:
be:c9:b5:12:bb:ec:02:39:ce:69:ec:0a:c2:a4:e2:4a:68:cf:
4f:31:7c:0f:7c:fa:73:5b:52:35:4e:64:4a:c3:4e:17:1a:95:
52:b1:1c:98:5c:b6:0f:a0:18:cb:5b:59:78:69:cf:d2:69:83:
84:bb:87:ff:e2:cb:fd:5f:c9:0c:ab:a1:e6:f6:0d:74:54:a8:
77:dd:0b:9f:42:cc:a5:29:0f:4e:de:22:a4:9f:48:29:1c:c8:
46:46:c3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:44 2025 by rpki-client