![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6DWDDtnvS9y2KkQPUPBLzoxU4kmHPN1PUjDTm77irE6A/0/323830343a376565303a3a2f33322d3438203d3e20323731363531.roa
File: 323830343a376565303a3a2f33322d3438203d3e20323731363531.roa (raw, json)
Hash identifier: qfFuXzkl2MGk3ogJQ/mYn4og81bHC0vuMrL0xZunAIk=
Subject key identifier: F2:9C:74:DD:F2:1C:26:EB:DF:76:F3:B2:65:A8:9E:C7:5B:CA:4D:86
Certificate issuer: /CN=CAA3D54671A28B5A90C8E96E435EFE4D0A3F4001
Certificate serial: 553121FA7A3B0023E5BDEC351E6D3235A77EEAFF
Authority key identifier: CA:A3:D5:46:71:A2:8B:5A:90:C8:E9:6E:43:5E:FE:4D:0A:3F:40:01
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAA3D54671A28B5A90C8E96E435EFE4D0A3F4001.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6DWDDtnvS9y2KkQPUPBLzoxU4kmHPN1PUjDTm77irE6A/0/323830343a376565303a3a2f33322d3438203d3e20323731363531.roa
Signing time: Thu 05 Jan 2023 13:57:32 +0000
ROA not before: Thu 05 Jan 2023 13:52:32 +0000
ROA not after: Thu 04 Jan 2024 13:57:32 +0000
asID: 271651
IP address blocks: 2804:7ee0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:31:21:fa:7a:3b:00:23:e5:bd:ec:35:1e:6d:32:35:a7:7e:ea:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAA3D54671A28B5A90C8E96E435EFE4D0A3F4001
Validity
Not Before: Jan 5 13:52:32 2023 GMT
Not After : Jan 4 13:57:32 2024 GMT
Subject: CN=F29C74DDF21C26EBDF76F3B265A89EC75BCA4D86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:38:c6:e2:c2:72:20:bb:00:4b:7c:f1:47:a3:
54:9f:11:cd:5f:61:ab:93:30:11:7b:d0:e6:83:30:
f1:21:a4:9d:4f:eb:7a:cb:fb:5d:af:39:11:32:bb:
61:8f:bd:cd:90:05:bf:82:bc:38:dc:c1:d3:c7:d8:
6b:26:e1:bf:35:9f:9a:5c:6e:76:a3:53:57:9e:6b:
d3:89:c5:95:d8:0f:7a:f8:6a:9a:22:c0:aa:26:e0:
71:cc:ae:73:ce:01:aa:d7:b2:78:7e:d6:35:b3:fd:
a6:50:3f:0c:a2:7e:07:ad:89:09:b1:d9:70:1b:87:
f8:b5:47:b7:b4:04:d9:84:0c:32:1d:3c:20:f8:1d:
d3:74:51:e1:93:53:d1:bc:fb:39:02:90:2d:5d:8f:
2f:4c:93:de:01:ca:38:d5:25:27:ec:fa:ec:ea:cb:
bb:b2:8f:06:bc:87:d8:72:8f:ae:ae:77:6b:fc:50:
c2:ba:41:23:62:aa:d0:bd:1c:71:3b:71:47:43:01:
15:72:ab:4e:f8:c3:f4:7a:9d:c9:8d:fd:d2:56:14:
24:88:83:43:fb:1c:8c:35:fb:c8:b3:aa:8a:56:a2:
57:be:69:e8:62:48:ef:d8:b3:0e:1d:36:89:f4:48:
64:c0:2a:5a:4e:c6:e9:20:b6:bf:5f:e6:1e:61:65:
ca:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9C:74:DD:F2:1C:26:EB:DF:76:F3:B2:65:A8:9E:C7:5B:CA:4D:86
X509v3 Authority Key Identifier:
keyid:CA:A3:D5:46:71:A2:8B:5A:90:C8:E9:6E:43:5E:FE:4D:0A:3F:40:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6DWDDtnvS9y2KkQPUPBLzoxU4kmHPN1PUjDTm77irE6A/0/CAA3D54671A28B5A90C8E96E435EFE4D0A3F4001.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAA3D54671A28B5A90C8E96E435EFE4D0A3F4001.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6DWDDtnvS9y2KkQPUPBLzoxU4kmHPN1PUjDTm77irE6A/0/323830343a376565303a3a2f33322d3438203d3e20323731363531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7ee0::/32
Signature Algorithm: sha256WithRSAEncryption
01:60:06:a0:73:41:3a:30:fa:a1:79:e7:cb:58:e5:e9:65:7c:
00:65:28:cc:2d:9e:3b:c7:89:a2:ba:04:c2:2f:f6:05:67:d9:
7a:ec:01:47:3a:02:bf:38:a9:7c:88:41:7c:a6:8f:68:4b:b7:
d9:75:74:e3:e3:89:ce:ee:e2:03:6e:08:e0:cc:f0:2f:6c:8d:
d0:6a:ff:f9:c7:79:8b:47:17:92:7f:c5:5d:cb:11:3d:a0:b0:
90:9d:3d:af:36:40:1b:f1:e6:4b:2f:90:dc:87:85:d9:5c:83:
75:4d:14:f4:c2:70:6a:1a:94:fd:74:73:6d:ef:84:20:bb:6f:
df:6e:0b:74:ba:80:3f:79:d5:68:87:34:12:44:cf:41:fa:ba:
df:ef:48:4b:88:9a:4b:5b:d5:55:69:b8:f6:3e:5f:48:a8:45:
38:2a:3f:c5:53:cd:43:b0:21:b6:dd:9e:ad:2c:f2:e8:65:12:
95:91:b4:d3:15:1a:eb:ba:8d:56:3a:41:b3:84:0f:81:1a:8a:
ea:94:fa:8b:42:81:08:4c:85:89:d4:72:1e:5d:28:28:30:e2:
16:a1:5a:c5:05:33:0b:c3:7e:b2:a1:35:ae:48:ac:61:0e:e8:
6f:27:87:9a:1b:f4:b6:48:91:b1:bf:64:49:3f:55:4e:f9:3e:
13:a2:4b:11
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUVTEh+no7ACPlvew1Hm0yNad+6v8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FBM0Q1NDY3MUEyOEI1QTkwQzhFOTZFNDM1RUZFNEQw
QTNGNDAwMTAeFw0yMzAxMDUxMzUyMzJaFw0yNDAxMDQxMzU3MzJaMDMxMTAvBgNV
BAMTKEYyOUM3NERERjIxQzI2RUJERjc2RjNCMjY1QTg5RUM3NUJDQTREODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhOMbiwnIguwBLfPFHo1SfEc1f
YauTMBF70OaDMPEhpJ1P63rL+12vOREyu2GPvc2QBb+CvDjcwdPH2Gsm4b81n5pc
bnajU1eea9OJxZXYD3r4apoiwKom4HHMrnPOAarXsnh+1jWz/aZQPwyifgetiQmx
2XAbh/i1R7e0BNmEDDIdPCD4HdN0UeGTU9G8+zkCkC1djy9Mk94ByjjVJSfs+uzq
y7uyjwa8h9hyj66ud2v8UMK6QSNiqtC9HHE7cUdDARVyq074w/R6ncmN/dJWFCSI
g0P7HIw1+8izqopWole+aehiSO/Ysw4dNon0SGTAKlpOxukgtr9f5h5hZcp3AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU8px03fIcJuvfdvOyZaiex1vKTYYwHwYDVR0j
BBgwFoAUyqPVRnGii1qQyOluQ17+TQo/QAEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkRXRER0bnZTOXkyS2tRUFVQQkx6b3hVNGttSFBOMVBVakRUbTc3aXJF
NkEvMC9DQUEzRDU0NjcxQTI4QjVBOTBDOEU5NkU0MzVFRkU0RDBBM0Y0MDAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NBQTNENTQ2NzFBMjhCNUE5
MEM4RTk2RTQzNUVGRTREMEEzRjQwMDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZEV0REdG52Uzl5MktrUVBVUEJMem94VTRrbUhQTjFQVWpEVG03N2lyRTZBLzAv
MzIzODMwMzQzYTM3NjU2NTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMx
MzYzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR+4DANBgkqhkiG9w0BAQsFAAOCAQEAAWAGoHNB
OjD6oXnny1jl6WV8AGUozC2eO8eJoroEwi/2BWfZeuwBRzoCvzipfIhBfKaPaEu3
2XV04+OJzu7iA24I4MzwL2yN0Gr/+cd5i0cXkn/FXcsRPaCwkJ09rzZAG/HmSy+Q
3IeF2VyDdU0U9MJwahqU/XRzbe+EILtv324LdLqAP3nVaIc0EkTPQfq63+9IS4ia
S1vVVWm49j5fSKhFOCo/xVPNQ7Ahtt2erSzy6GUSlZG00xUa67qNVjpBs4QPgRqK
6pT6i0KBCEyFidRyHl0oKDDiFqFaxQUzC8N+sqE1rkisYQ7obyeHmhv0tkiRsb9k
ST9VTvk+E6JLEQ==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:27:00 2025 by rpki-client